This advisory from Red Hat addresses a security vulnerability identified as CVE-2026-81871 affecting the caddy RPM included in Red Hat Hardened Images. The update provides caddy version 2.11.4-0.4.hum1 for aarch64 and x86_64 architectures and the corresponding source package. The vulnerability is classified with medium severity. No CVSS score is provided. The advisory references CWE-295 and CWE-835, indicating issues related to improper certificate validation and arithmetic errors, respectively. No known exploits are reported in the wild. The vendor advisory does not specify affected versions explicitly or detailed technical impact beyond the CVE reference.

The vulnerability is rated medium severity, suggesting a moderate impact on confidentiality, integrity, or availability if exploited. The exact impact details are not provided in the advisory. There are no known exploits in the wild at the time of publication. The update mitigates the vulnerability by providing a patched version of the caddy package.

A fixed version of the caddy package is available in Red Hat Hardened Images as caddy-2.11.4-0.4.hum1 for aarch64 and x86_64 architectures. Users should apply this update to remediate the vulnerability. The vendor advisory provides instructions and references for applying the update. No additional mitigation steps are indicated or required beyond applying the update.