Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This Red Hat security advisory announces a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically updating OpenSSH packages to version 10.5p1-1.hum1 for aarch64 and x86_64 architectures. The update addresses multiple vulnerabilities identified by CVE-2026-73281, CVE-2026-73282, and CVE-2026-73283. The advisory does not specify detailed technical information about the vulnerabilities but references CWE identifiers CWE-266 (Permission Issues), CWE-825 (Expansion of Privilege), and CWE-305 (Authentication Issues). The advisory directs users to apply the updated RPMs available from Red Hat's repositories. No known exploits in the wild are reported.

The vulnerabilities addressed potentially involve permission and authentication issues that could impact the security of OpenSSH components within Red Hat Hardened Images. The medium severity suggests a moderate risk of exploitation if unpatched. No active exploitation is known at this time.

Red Hat has released updated RPM packages for OpenSSH (version 10.5p1-1.hum1) that fix the identified vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly by following Red Hat's official update procedures. Since this is an official fix, applying the update fully mitigates the vulnerabilities. No additional mitigation steps are indicated by the vendor advisory.