Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This advisory updates the buildah RPMs to version 1.45.1-1.hum1, addressing vulnerabilities identified as CVE-2026-56851 and CVE-2026-63209. The update applies to Red Hat Hardened Images for aarch64 and x86_64 architectures. The advisory does not specify detailed technical vulnerability descriptions or exploitation methods but references CWE-787 (Out-of-bounds Write) and CWE-823 (Use of Out-of-bounds Pointer).

The vulnerabilities addressed are rated as high severity, indicating potential significant security impact if exploited. However, no known exploits in the wild have been reported at this time. The update mitigates these vulnerabilities by providing a patched version of the buildah package.

A fix is available through the updated buildah RPMs version 1.45.1-1.hum1 for aarch64 and x86_64 architectures. Users should apply this update as provided by Red Hat to remediate the vulnerabilities. Refer to https://images.redhat.com/ for detailed update instructions. No additional mitigation steps are indicated by the vendor advisory.