Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
This update includes the following RPMs: llvm: * clang-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-analyzer-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-libs-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-resource-filesystem-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-tools-extra-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-tools-extra-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * compiler-rt-21.1.8-1.1.hum1 (aarch64, x86_64) * git-clang-format-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxx-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxx-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxx-static-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxxabi-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxxabi-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxxabi-static-21.1.8-1.1.hum1 (aarch64, x86_64) * libomp-21.1.8-1.1.hum1 (aarch64, x86_64) * libomp-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * lld-21.1.8-1.1.hum1 (aarch64, x86_64) * lld-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * lld-libs-21.1.8-1.1.hum1 (aarch64, x86_64) * lldb-21.1.8-1.1.hum1 (aarch64, x86_64) * lldb-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-bolt-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-cmake-utils-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-doc-21.1.8-1.1.hum1 (noarch) * llvm-filesystem-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-googletest-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libs-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libunwind-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libunwind-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libunwind-static-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-static-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-test-21.1.8-1.1.hum1 (aarch64, x86_64) * mlir-21.1.8-1.1.hum1 (aarch64, x86_64) * mlir-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * mlir-static-21.1.8-1.1.hum1 (aarch64, x86_64) * polly-21.1.8-1.1.hum1 (aarch64, x86_64) * polly-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * python3-clang-21.1.8-1.1.hum1 (aarch64, x86_64) * python3-lit-21.1.8-1.1.hum1 (noarch) * python3-lldb-21.1.8-1.1.hum1 (aarch64, x86_64) * python3-mlir-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-21.1.8-1.1.hum1.src (src)
AI Analysis
Technical Summary
This advisory from Red Hat Product Security announces a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically targeting multiple LLVM-related packages such as clang, llvm, lld, lldb, libcxx, and others. The update addresses two vulnerabilities identified by CVE-2026-44432 and CVE-2026-45149, associated with CWEs CWE-409 (Improper Locking) and CWE-770 (Allocation of Resources Without Limits or Throttling). The advisory provides a detailed list of updated RPM packages but does not specify affected or fixed versions explicitly. No CVSS score is provided. The advisory does not mention any known exploits in the wild and does not specify affected countries. The update is available via Red Hat Hardened Images, and users are directed to Red Hat's official resources for applying the update.
Potential Impact
The vulnerabilities addressed are rated as high severity by Red Hat. They relate to potential issues in resource management and locking mechanisms within LLVM-related components. Exploitation could lead to stability or security issues in environments using these hardened images. No known active exploitation has been reported. The impact is limited to systems using the affected Red Hat Hardened Images RPMs containing the listed LLVM packages.
Mitigation Recommendations
A fix is available through the updated Red Hat Hardened Images RPMs listed in the advisory RHSA-2026:7634. Users should apply the update as provided by Red Hat to remediate the vulnerabilities. Since this is not a cloud service, remediation requires manual update by system administrators. No additional mitigation steps are specified or required beyond applying the update.
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Description
This update includes the following RPMs: llvm: * clang-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-analyzer-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-libs-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-resource-filesystem-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-tools-extra-21.1.8-1.1.hum1 (aarch64, x86_64) * clang-tools-extra-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * compiler-rt-21.1.8-1.1.hum1 (aarch64, x86_64) * git-clang-format-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxx-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxx-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxx-static-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxxabi-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxxabi-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * libcxxabi-static-21.1.8-1.1.hum1 (aarch64, x86_64) * libomp-21.1.8-1.1.hum1 (aarch64, x86_64) * libomp-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * lld-21.1.8-1.1.hum1 (aarch64, x86_64) * lld-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * lld-libs-21.1.8-1.1.hum1 (aarch64, x86_64) * lldb-21.1.8-1.1.hum1 (aarch64, x86_64) * lldb-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-bolt-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-cmake-utils-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-doc-21.1.8-1.1.hum1 (noarch) * llvm-filesystem-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-googletest-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libs-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libunwind-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libunwind-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-libunwind-static-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-static-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-test-21.1.8-1.1.hum1 (aarch64, x86_64) * mlir-21.1.8-1.1.hum1 (aarch64, x86_64) * mlir-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * mlir-static-21.1.8-1.1.hum1 (aarch64, x86_64) * polly-21.1.8-1.1.hum1 (aarch64, x86_64) * polly-devel-21.1.8-1.1.hum1 (aarch64, x86_64) * python3-clang-21.1.8-1.1.hum1 (aarch64, x86_64) * python3-lit-21.1.8-1.1.hum1 (noarch) * python3-lldb-21.1.8-1.1.hum1 (aarch64, x86_64) * python3-mlir-21.1.8-1.1.hum1 (aarch64, x86_64) * llvm-21.1.8-1.1.hum1.src (src)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory from Red Hat Product Security announces a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically targeting multiple LLVM-related packages such as clang, llvm, lld, lldb, libcxx, and others. The update addresses two vulnerabilities identified by CVE-2026-44432 and CVE-2026-45149, associated with CWEs CWE-409 (Improper Locking) and CWE-770 (Allocation of Resources Without Limits or Throttling). The advisory provides a detailed list of updated RPM packages but does not specify affected or fixed versions explicitly. No CVSS score is provided. The advisory does not mention any known exploits in the wild and does not specify affected countries. The update is available via Red Hat Hardened Images, and users are directed to Red Hat's official resources for applying the update.
Potential Impact
The vulnerabilities addressed are rated as high severity by Red Hat. They relate to potential issues in resource management and locking mechanisms within LLVM-related components. Exploitation could lead to stability or security issues in environments using these hardened images. No known active exploitation has been reported. The impact is limited to systems using the affected Red Hat Hardened Images RPMs containing the listed LLVM packages.
Mitigation Recommendations
A fix is available through the updated Red Hat Hardened Images RPMs listed in the advisory RHSA-2026:7634. Users should apply the update as provided by Red Hat to remediate the vulnerabilities. Since this is not a cloud service, remediation requires manual update by system administrators. No additional mitigation steps are specified or required beyond applying the update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:7634
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-45149"]
- Cvss Version
- null
Threat ID: 6a340ceff198dc38c10606a9
Added to database: 6/18/2026, 3:21:19 PM
Last enriched: 6/18/2026, 3:35:34 PM
Last updated: 6/18/2026, 9:11:01 PM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.