Skip to main content
EPSS 0.1%top 99%

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

0
Medium
Published: 07/10/2026 (07/10/2026, 00:17:17 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

A security update has been released for Red Hat Hardened Images RPMs addressing CVE-2026-56289. This update includes patched versions of the 'patch' RPM for aarch64 and x86_64 architectures. The vulnerability is classified with medium severity and relates to a specific security flaw identified by Red Hat Product Security.

Affected software

gnu/patch
pkg:deb/gnu/patch
Affected versions
=3.0

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/17/2026, 21:20:48 UTC

Technical Analysis

Red Hat has issued a security advisory (RHSA-2026:37468) for Red Hat Hardened Images RPMs, specifically updating the 'patch' RPM to version 2.8-4.2.hum1 for aarch64 and x86_64 architectures. This update addresses the vulnerability identified as CVE-2026-56289. The advisory does not provide detailed technical information about the nature of the vulnerability but categorizes it with medium severity and associates it with CWE-835. The update is available through Red Hat's public repositories and is intended to mitigate the identified security issue.

Potential Impact

The vulnerability CVE-2026-56289 affects Red Hat Hardened Images RPMs and has been rated medium severity by Red Hat. The specific impact details are not provided in the advisory, but the update aims to fix a security flaw in the 'patch' RPM package. There are no known exploits in the wild at the time of the advisory.

Mitigation Recommendations

Red Hat has released an official security update for the affected RPMs. Users of Red Hat Hardened Images should apply the update to 'patch' RPM version 2.8-4.2.hum1 for their respective architectures (aarch64, x86_64) as soon as possible. Detailed update instructions are available at https://images.redhat.com/. Since an official fix is available, applying this update is the recommended mitigation.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_vex
Csaf Version
2.0
Publisher
Microsoft Security Response Center
Advisory Id
msrc_CVE-2026-56289
Cve Count
1
State
PUBLISHED

Threat ID: 6a520f1568715ace43922cf9

Added to database: 07/11/2026, 09:38:29 UTC

Last enriched: 09/17/2026, 21:20:48 UTC

Last updated: 10/09/2026, 06:48:18 UTC

Views: 109

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses