This Red Hat security advisory (RHSA-2026:25042) covers a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically httpd and related modules. The update includes new versions of httpd-2.4.68-1.hum1 packages for aarch64 and x86_64 architectures. It addresses multiple vulnerabilities identified by 13 CVEs, including CVE-2026-29167 and CVE-2026-49975. The vulnerabilities relate to various CWEs such as CWE-79 (Cross-site Scripting), CWE-120 (Buffer Overflow), CWE-22 (Path Traversal), and others. The advisory does not explicitly describe exploitation methods or impacts but indicates a high severity level. The update is available and recommended to be applied as per Red Hat's instructions at https://images.redhat.com/. No known exploits in the wild are reported.

The vulnerabilities addressed affect Red Hat Hardened Images RPMs, particularly httpd and its modules, potentially allowing attackers to exploit issues like improper access control, buffer overflows, path traversal, and other security weaknesses. The advisory classifies the severity as high but does not provide detailed impact scenarios or confirmed exploitation in the wild. The update mitigates these risks by providing patched RPM packages.

A fix is available through updated RPM packages (httpd-2.4.68-1.hum1 and related modules) provided by Red Hat. Users of Red Hat Hardened Images should apply this update following Red Hat's official guidance at https://images.redhat.com/. No additional mitigation steps are indicated or required beyond applying the update.