Skip to main content
EPSS 0.3%top 80%

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

0
High
Published: 10/01/2026 (10/01/2026, 17:20:02 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the openshell packages to address multiple vulnerabilities identified by CVE-2026-102821, CVE-2026-102823, and CVE-2026-102824. The update includes new versions of openshell, openshell-gateway, and python3-openshell RPMs for aarch64 and x86_64 architectures. No explicit details on the nature of the vulnerabilities or their impact are provided in the advisory. The advisory does not list any fixed versions prior to these updates, indicating these RPM versions contain the security fixes.

Affected software

redhat/openshell
pkg:rpm/redhat/openshell
Affected versions
=0.1.2-0.2.hum1
redhat/openshell-gateway
pkg:rpm/redhat/openshell-gateway
Affected versions
=0.1.2-0.2.hum1
redhat/python3-openshell
pkg:rpm/redhat/python3-openshell
Affected versions
=0.1.2-0.2.hum1

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 10/02/2026, 18:04:36 UTC

Technical Analysis

This Red Hat security advisory addresses multiple vulnerabilities in the openshell RPM packages used in Red Hat Hardened Images. The affected packages include openshell, openshell-gateway, and python3-openshell versions 0.1.2-0.2.hum1 for aarch64 and x86_64 architectures. The advisory references CVE-2026-102821, CVE-2026-102823, and CVE-2026-102824 as the security issues resolved by this update. The advisory does not provide CVSS scores or detailed technical descriptions of the vulnerabilities. The update is available through Red Hat's public hummingbird repositories. No known exploits in the wild have been reported at the time of publication.

Potential Impact

The vulnerabilities addressed are classified as high severity, indicating a significant security risk if left unpatched. However, the advisory does not specify the exact impact or exploitation methods. The update mitigates these risks by providing patched RPM packages. There are no reports of active exploitation in the wild.

Mitigation Recommendations

Red Hat has released updated RPM packages for openshell, openshell-gateway, and python3-openshell that fix the identified vulnerabilities. Users of Red Hat Hardened Images should apply these updates promptly by upgrading to version 0.1.2-0.2.hum1 of the affected packages from the official Red Hat repositories. No additional mitigation steps are indicated in the advisory.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2026:74586
Cve Count
4
Additional Cves
["CVE-2026-102823","CVE-2026-102824","CVE-2026-102825"]
State
PUBLISHED

Threat ID: 6abfeea1a43b0b3b89e5527b

Added to database: 10/02/2026, 17:49:21 UTC

Last enriched: 10/02/2026, 18:04:36 UTC

Last updated: 10/03/2026, 02:46:02 UTC

Views: 2

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses