Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat issued a security advisory (RHSA-2026:41176) for Red Hat Hardened Images RPMs that includes updates to libevent packages (version 2.1.12-19.hum1) for aarch64 and x86_64 architectures. The advisory references CVE-2026-63495, which is associated with CWE-770, indicating a potential resource management issue. The update is described as a bug fix and enhancement. The advisory does not detail the nature of the vulnerability beyond the CVE identifier, nor does it provide explicit patch instructions beyond referencing the updated RPM versions. No known exploits in the wild are reported.

The vulnerability is rated as high severity by Red Hat, indicating a significant security risk if unpatched. The specific impact details are not described in the advisory, but the CWE-770 classification suggests issues related to allocation of resources that could potentially lead to denial of service or other resource exhaustion conditions. No active exploitation has been reported.

Red Hat has released updated libevent RPM packages (version 2.1.12-19.hum1) to address this vulnerability. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat to remediate the issue. The advisory provides links to the update repositories and instructions on applying the update. No alternative mitigations or workarounds are specified.