Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This Red Hat security advisory addresses multiple vulnerabilities in the util-linux package set included in Red Hat Hardened Images. The affected RPMs include libblkid, libfdisk, liblastlog2, libmount, libsmartcols, libuuid, python3-libmount, util-linux core components, and related development packages for aarch64 and x86_64 architectures. The advisory lists four CVEs (CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410) as security fixes. Updated RPM versions 2.42.2-3.4.hum1 are provided to address these vulnerabilities. The advisory does not include detailed technical descriptions of the vulnerabilities or their exploitation methods. No known exploits are reported in the wild.

The vulnerabilities affect multiple components of the util-linux package, which is a core set of utilities in Linux environments. While the exact impact of each CVE is not detailed in the advisory, the high severity rating indicates potential risks such as privilege escalation, denial of service, or other security issues. No active exploitation has been reported, but unpatched systems remain vulnerable to these issues.

Red Hat has released updated RPM packages (version 2.42.2-3.4.hum1) that address the listed vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly to mitigate the security risks. Detailed update instructions and packages are available via Red Hat's official channels at https://images.redhat.com/. No additional mitigation steps are specified or required beyond applying the official updates.