This Red Hat security advisory (RHSA-2026:45779) addresses multiple security vulnerabilities in Red Hat Hardened Images RPMs, focusing on SQLite packages. The update includes new RPM versions (3.53.4-0.1.hum1) for components such as lemon, sqlite, sqlite-analyzer, sqlite-debug, sqlite-devel, sqlite-doc, sqlite-libs, sqlite-tcl, and sqlite-tools for aarch64 and x86_64 architectures. The vulnerabilities include CVE-2026-51297, CVE-2026-51298, CVE-2026-51302, and CVE-2026-51304, among others, with a high severity rating. The CWE classification is CWE-825, indicating issues related to expanding privileges. The advisory does not specify affected version ranges but provides updated packages to address the issues. No exploits are currently known in the wild. Users are directed to Red Hat's official update channels for remediation.

The vulnerabilities addressed in this advisory are rated as high severity and relate to privilege expansion issues (CWE-825) within SQLite components of Red Hat Hardened Images. Successful exploitation could potentially allow an attacker to gain elevated privileges or perform unauthorized actions within affected systems. However, there are no known exploits reported in the wild at this time.

Red Hat has released updated RPM packages (version 3.53.4-0.1.hum1) for the affected SQLite components as part of the Hardened Images update. Users should apply these updates promptly by following the instructions provided in the official Red Hat advisory (RHSA-2026:45779) and through Red Hat's update channels at https://images.redhat.com/. No alternative mitigations or workarounds are specified. Patch status is confirmed by the vendor advisory.