Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

0
High
Published: Tue Apr 07 2026 (04/07/2026, 06:21:37 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

This Red Hat security advisory addresses multiple vulnerabilities affecting Red Hat Hardened Images RPM packages, including libpng versions 1. 6. 56-1. hum1 for aarch64 and x86_64 architectures. The update includes bug fixes and enhancements for these RPMs. The advisory references a total of 13 CVEs, including CVE-2025-28162 and others, with associated CWEs such as buffer overflow and out-of-bounds read/write issues. No known exploits in the wild have been reported. Patch status is not explicitly confirmed in the provided data. The advisory is categorized as a high severity vulnerability update.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 05/26/2026, 22:35:55 UTC

Technical Analysis

The advisory covers a set of vulnerabilities in Red Hat Hardened Images RPMs, specifically libpng packages version 1.6.56-1.hum1 for aarch64 and x86_64. It addresses 13 CVEs related to memory safety issues (CWE-120, CWE-125, CWE-787, CWE-131, CWE-825, CWE-124), which typically involve buffer overflows, out-of-bounds reads/writes, and improper memory operations. The update aims to fix these issues and enhance the stability and security of the affected packages. The vendor advisory does not explicitly state the patch availability status, but the update implies that fixes have been applied in the listed RPM versions. No cloud service is involved, and no known active exploitation has been reported.

Potential Impact

The vulnerabilities involve memory corruption issues that could potentially lead to denial of service or code execution if exploited. However, there are no known exploits in the wild at this time. The impact is considered high due to the nature of the vulnerabilities (buffer overflows and out-of-bounds memory access), which can be critical in security-sensitive environments.

Mitigation Recommendations

The advisory indicates that updated RPM packages (libpng-1.6.56-1.hum1 and related packages) have been released to address these vulnerabilities. Users of affected Red Hat Hardened Images should apply these updates to remediate the issues. Patch status is implied by the update but not explicitly confirmed; therefore, users should consult the official Red Hat advisory (https://access.redhat.com/security/cve/CVE-2025-65018) for the latest patch and remediation instructions. No additional mitigation steps are specified in the provided data.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:6732
Cve Count
13
Additional Cves
["CVE-2025-28164","CVE-2025-64505","CVE-2025-64506","CVE-2025-64720","CVE-2025-65018","CVE-2025-66293","CVE-2026-3713","CVE-2026-22695","CVE-2026-22801","CVE-2026-25646","CVE-2026-33416","CVE-2026-33636"]
Cvss Version
null

Threat ID: 6a160988e29bf47b50652eed

Added to database: 5/26/2026, 8:58:48 PM

Last enriched: 5/26/2026, 10:35:55 PM

Last updated: 5/27/2026, 5:04:07 AM

Views: 2

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses