Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This Red Hat security advisory announces an update to the Red Hat Hardened Images RPMs, particularly nodejs26 and related packages, to fix multiple security vulnerabilities identified by CVEs CVE-2026-87018, CVE-2026-87029, CVE-2026-109932, CVE-2026-109383, CVE-2026-109869, CVE-2026-109841, CVE-2026-109924, CVE-2026-109829, and CVE-2026-102276. The advisory lists the updated RPM package versions (26.11.1-0.4.hum1 and related) across various architectures (aarch64, s390x, x86_64, noarch, src). The advisory does not specify detailed technical descriptions of the vulnerabilities or affected versions but confirms the availability of updated packages to address these issues.

The vulnerabilities addressed are considered high severity, implying potential significant security risks if unpatched. The advisory does not detail specific impacts per CVE but the collective update suggests multiple security flaws in the nodejs26 packages within Red Hat Hardened Images. No known exploits in the wild are reported at this time.

Red Hat has released updated RPM packages for nodejs26 and related components to remediate the listed vulnerabilities. Users should apply these updates as provided by Red Hat Hardened Images repositories. For detailed update instructions, users should refer to https://images.redhat.com/. No additional mitigation guidance or temporary workarounds are indicated in the advisory.