Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This Red Hat security advisory announces an update to the Red Hat Hardened Images RPMs, focusing on Rust-related packages. The update addresses three security vulnerabilities (CVE-2026-109349, CVE-2026-109350, CVE-2026-109351) affecting multiple Rust components across architectures including aarch64, s390x, and x86_64. The advisory lists the updated package versions as 1.99.0-1.1.hum1 for all relevant RPMs. No detailed technical descriptions of the vulnerabilities are provided beyond their CVE identifiers and associated CWEs (CWE-617, CWE-1285, CWE-770). The advisory does not specify fixed or vulnerable version ranges, but the presence of updated packages indicates a remediation is available.

The vulnerabilities affect Rust-related packages within Red Hat Hardened Images RPMs, potentially impacting the security of systems using these components. The advisory classifies the severity as medium, suggesting moderate risk. No known exploits in the wild have been reported. The impact is limited to environments using these specific Rust packages from Red Hat Hardened Images.

A security update is available and should be applied to affected systems. The advisory provides updated package versions (1.99.0-1.1.hum1) for all relevant Rust RPMs. Users should update to these versions to remediate the vulnerabilities. No additional mitigation steps or workarounds are specified by the vendor.