This advisory covers security updates for Red Hat Hardened Images RPMs, specifically curl and its related libraries (libcurl, libcurl-devel, libcurl-minimal) version 8.21.0-0.1.1.hum1 for aarch64 and x86_64 architectures. The update addresses CVE-2026-58055 among other CVEs. The advisory does not explicitly state fixed version numbers but provides updated RPMs. The vulnerabilities relate to weaknesses identified by CWEs 295 (Improper Certificate Validation), 825 (Expansion of Memory Buffer), and 444 (Inconsistent Interpretation of HTTP Requests). No known exploits in the wild have been reported. The vendor advisory is the authoritative source for remediation.

The vulnerabilities addressed affect the curl packages in Red Hat Hardened Images, potentially impacting secure communications and memory handling. The issues could lead to improper certificate validation and memory corruption scenarios. However, no active exploitation has been reported, and the severity is medium, indicating a moderate risk to affected systems.

Red Hat has released updated RPM packages for curl and related libraries (version 8.21.0-0.1.1.hum1) that address the identified vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly by following the instructions provided in the Red Hat advisory at https://images.redhat.com/. No additional mitigation steps are indicated by the vendor advisory.