Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This Red Hat security advisory (RHSA-2026:54438) covers a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically nodejs24 packages and related components. The update addresses multiple CVEs including CVE-2026-18149 and others, affecting various versions of Red Hat Hardened Images and nodejs24 packages on aarch64 and x86_64 architectures. The advisory lists specific updated RPMs such as nodejs24-24.18.1-0.2.2.hum1 and related binaries, libraries, and development packages. The vendor has released patched versions to mitigate the vulnerabilities.

The vulnerabilities addressed in this advisory are rated as high severity. They affect Red Hat Hardened Images and nodejs24 packages, potentially impacting systems running affected versions. The exact impact details are not specified in the advisory, but the presence of multiple CVEs and a high severity rating indicates significant security concerns that warrant applying the update.

A patch is available from Red Hat as part of the updated RPM packages listed in the advisory. Users should apply the provided updates to nodejs24 and related packages to remediate the vulnerabilities. Refer to the official Red Hat advisory RHSA-2026:54438 and the Red Hat images portal for detailed update instructions. No additional mitigation steps are indicated beyond applying the official patch.