Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

The Red Hat security advisory RHSA-2026:83843 announces an update to the Red Hat Hardened Images RPMs, focusing on the pgbouncer package. The updated version is 1.26.1-1.hum1, which includes fixes for vulnerabilities tracked under CVE-2026-107348, CVE-2026-107349, and CVE-2026-107350. The advisory does not provide detailed technical descriptions of the vulnerabilities but references common weakness enumerations CWE-190 (Integer Overflow or Wraparound), CWE-835 (Loop with Unreachable Exit Condition), and CWE-841 (Improper Enforcement of Behavioral Workflow). The update is published and available for installation on supported architectures. No exploits in the wild are currently known.

The vulnerabilities addressed are rated as high severity, indicating potential significant security risks if left unpatched. The specific impacts are not detailed in the advisory, but the referenced CWEs suggest issues related to integer overflows and logic errors that could lead to unexpected behavior or security bypasses in the pgbouncer service. Since pgbouncer is a connection pooler for PostgreSQL, these vulnerabilities could affect database connection stability or security.

A fixed version of the pgbouncer package (1.26.1-1.hum1) is available from Red Hat Hardened Images RPM repositories for multiple architectures. Users should apply this update promptly to mitigate the identified vulnerabilities. Refer to the official Red Hat advisory RHSA-2026:83843 and the Red Hat images portal for detailed update instructions. No additional mitigations or workarounds are specified or required beyond applying the update.