Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This Red Hat security advisory announces an update to Red Hat Hardened Images RPMs, specifically multiple krb5 packages (krb5-devel, krb5-libs, krb5-pkinit, krb5-server, krb5-server-ldap, krb5-tests, krb5-workstation, krb5-xrealmauthz, libkadm5, and krb5 source). The update version is 1.22.2-10.3.hum1 for the listed architectures. The advisory references CVE-2026-107708 and CVE-2026-107778 but does not provide detailed vulnerability descriptions or CVSS scores. The update is described as a bug fix and enhancement update for Red Hat Hardened Images RPMs.

The advisory lists a medium severity level but does not specify the exact impact or exploitation details of the referenced CVEs. No known exploits in the wild are reported. The update addresses bugs and enhancements in the krb5 packages, which are critical components for Kerberos authentication services, suggesting potential security or stability improvements.

A fix is available through the updated RPM packages version 1.22.2-10.3.hum1 for the affected krb5 components. Users of Red Hat Hardened Images should apply this update as per Red Hat's official guidance at https://images.redhat.com/. No additional mitigation steps are specified in the advisory.