Inspecting raw image manifest quay.io/redhat-appstudio-qe/image-controller-e2e-jehl/test-comp-kdqe@sha256:8729c2c552bc6650464439f77cfb6cef05134ba544a2e889b4a8396578860cdb.
Selecting auth
Using token for quay.io/redhat-appstudio-qe/image-controller-e2e-jehl/test-comp-kdqe
Selecting auth
Using token for quay.io/redhat-appstudio-qe/image-controller-e2e-jehl/test-comp-kdqe
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation <image uri>'.
Found SBOM of media type: text/spdx+json
Running TPA scan on amd64 image manifest...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
{
  "scanned" : {
    "total" : 41,
    "direct" : 15,
    "transitive" : 26
  },
  "providers" : {
    "rhtpa" : {
      "status" : {
        "ok" : true,
        "name" : "rhtpa",
        "code" : 200,
        "message" : "OK",
        "warnings" : { }
      },
      "sources" : {
        "redhat-csaf" : {
          "summary" : {
            "direct" : 10,
            "transitive" : 3,
            "total" : 13,
            "dependencies" : 8,
            "critical" : 0,
            "high" : 6,
            "medium" : 4,
            "low" : 3,
            "unknown" : 0,
            "remediations" : 28,
            "recommendations" : 0,
            "unscanned" : 0
          },
          "dependencies" : [ {
            "ref" : "pkg:rpm/redhat/libselinux@3.11-5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libselinux-3.11-5.hum1.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/pcre2@10.47-1.2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=pcre2-10.47-1.2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-103111",
                "title" : "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-103111" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.49-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-103111",
                      "title" : "pcre2: pcre2: Out-of-bounds write via crafted regular expression",
                      "url" : "https://www.redhat.com/#CVE-2026-103111"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74972",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74972"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89161",
                "title" : "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-89161" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89161",
                      "title" : "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
                      "url" : "https://www.redhat.com/#CVE-2026-89161"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89158",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89158" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89158",
                      "title" : "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
                      "url" : "https://www.redhat.com/#CVE-2026-89158"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89157",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89157" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89157",
                      "title" : "pcre2: PCRE2: Out-of-bounds write via large pattern input",
                      "url" : "https://www.redhat.com/#CVE-2026-89157"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89160",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89160" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89160",
                      "title" : "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
                      "url" : "https://www.redhat.com/#CVE-2026-89160"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89156",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89156" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89156",
                      "title" : "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
                      "url" : "https://www.redhat.com/#CVE-2026-89156"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89162",
                "title" : "In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89162" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89162",
                      "title" : "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode",
                      "url" : "https://www.redhat.com/#CVE-2026-89162"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2-syntax@10.47-1.2.hum1?arch=noarch&distro=hummingbird-20251124&upstream=pcre2-10.47-1.2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-103111",
                "title" : "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-103111" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.49-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-103111",
                      "title" : "pcre2: pcre2: Out-of-bounds write via crafted regular expression",
                      "url" : "https://www.redhat.com/#CVE-2026-103111"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74972",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74972"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89161",
                "title" : "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-89161" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89161",
                      "title" : "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
                      "url" : "https://www.redhat.com/#CVE-2026-89161"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89158",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89158" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89158",
                      "title" : "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
                      "url" : "https://www.redhat.com/#CVE-2026-89158"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89157",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89157" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89157",
                      "title" : "pcre2: PCRE2: Out-of-bounds write via large pattern input",
                      "url" : "https://www.redhat.com/#CVE-2026-89157"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89160",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89160" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89160",
                      "title" : "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
                      "url" : "https://www.redhat.com/#CVE-2026-89160"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89156",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89156" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89156",
                      "title" : "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
                      "url" : "https://www.redhat.com/#CVE-2026-89156"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89162",
                "title" : "In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89162" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89162",
                      "title" : "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode",
                      "url" : "https://www.redhat.com/#CVE-2026-89162"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86145",
              "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
              "source" : "redhat-csaf",
              "cvssScore" : 8.2,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86145" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-86145",
                    "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                    "url" : "https://www.redhat.com/#CVE-2026-86145"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/coreutils-single@9.11-6.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=coreutils-9.11-6.hum1.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/pcre2@10.47-1.2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=pcre2-10.47-1.2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-103111",
                "title" : "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-103111" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.49-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-103111",
                      "title" : "pcre2: pcre2: Out-of-bounds write via crafted regular expression",
                      "url" : "https://www.redhat.com/#CVE-2026-103111"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74972",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74972"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89161",
                "title" : "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-89161" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89161",
                      "title" : "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
                      "url" : "https://www.redhat.com/#CVE-2026-89161"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89158",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89158" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89158",
                      "title" : "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
                      "url" : "https://www.redhat.com/#CVE-2026-89158"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89157",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89157" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89157",
                      "title" : "pcre2: PCRE2: Out-of-bounds write via large pattern input",
                      "url" : "https://www.redhat.com/#CVE-2026-89157"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89160",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89160" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89160",
                      "title" : "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
                      "url" : "https://www.redhat.com/#CVE-2026-89160"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89156",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89156" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89156",
                      "title" : "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
                      "url" : "https://www.redhat.com/#CVE-2026-89156"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89162",
                "title" : "In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89162" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89162",
                      "title" : "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode",
                      "url" : "https://www.redhat.com/#CVE-2026-89162"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/pcre2-syntax@10.47-1.2.hum1?arch=noarch&distro=hummingbird-20251124&upstream=pcre2-10.47-1.2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-103111",
                "title" : "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-103111" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.49-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-103111",
                      "title" : "pcre2: pcre2: Out-of-bounds write via crafted regular expression",
                      "url" : "https://www.redhat.com/#CVE-2026-103111"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74972",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74972"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89161",
                "title" : "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-89161" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89161",
                      "title" : "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
                      "url" : "https://www.redhat.com/#CVE-2026-89161"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89158",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89158" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89158",
                      "title" : "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
                      "url" : "https://www.redhat.com/#CVE-2026-89158"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89157",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89157" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89157",
                      "title" : "pcre2: PCRE2: Out-of-bounds write via large pattern input",
                      "url" : "https://www.redhat.com/#CVE-2026-89157"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89160",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89160" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89160",
                      "title" : "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
                      "url" : "https://www.redhat.com/#CVE-2026-89160"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89156",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89156" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89156",
                      "title" : "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
                      "url" : "https://www.redhat.com/#CVE-2026-89156"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89162",
                "title" : "In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89162" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89162",
                      "title" : "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode",
                      "url" : "https://www.redhat.com/#CVE-2026-89162"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86145",
              "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
              "source" : "redhat-csaf",
              "cvssScore" : 8.2,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86145" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-86145",
                    "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                    "url" : "https://www.redhat.com/#CVE-2026-86145"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/pcre2@10.47-1.2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=pcre2-10.47-1.2.hum1.src.rpm",
            "issues" : [ {
              "id" : "CVE-2026-86145",
              "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
              "source" : "redhat-csaf",
              "cvssScore" : 8.2,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86145" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-86145",
                    "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                    "url" : "https://www.redhat.com/#CVE-2026-86145"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                } ]
              }
            }, {
              "id" : "CVE-2026-103111",
              "title" : "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.",
              "source" : "redhat-csaf",
              "cvssScore" : 7.6,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-103111" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.49-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-103111",
                    "title" : "pcre2: pcre2: Out-of-bounds write via crafted regular expression",
                    "url" : "https://www.redhat.com/#CVE-2026-103111"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.49-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.49-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:74972",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                    "url" : "https://www.redhat.com/#RHSA-2026_74972"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.49-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.49-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                } ]
              }
            }, {
              "id" : "CVE-2026-89161",
              "title" : "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.",
              "source" : "redhat-csaf",
              "cvssScore" : 7.4,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-89161" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-89161",
                    "title" : "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
                    "url" : "https://www.redhat.com/#CVE-2026-89161"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                } ]
              }
            }, {
              "id" : "CVE-2026-89158",
              "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.",
              "source" : "redhat-csaf",
              "cvssScore" : 6.5,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-89158" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-89158",
                    "title" : "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
                    "url" : "https://www.redhat.com/#CVE-2026-89158"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                } ]
              }
            }, {
              "id" : "CVE-2026-89157",
              "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.",
              "source" : "redhat-csaf",
              "cvssScore" : 5.7,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-89157" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-89157",
                    "title" : "pcre2: PCRE2: Out-of-bounds write via large pattern input",
                    "url" : "https://www.redhat.com/#CVE-2026-89157"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                } ]
              }
            }, {
              "id" : "CVE-2026-89160",
              "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.",
              "source" : "redhat-csaf",
              "cvssScore" : 3.7,
              "severity" : "LOW",
              "cves" : [ "CVE-2026-89160" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-89160",
                    "title" : "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
                    "url" : "https://www.redhat.com/#CVE-2026-89160"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                } ]
              }
            }, {
              "id" : "CVE-2026-89156",
              "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.",
              "source" : "redhat-csaf",
              "cvssScore" : 2.9,
              "severity" : "LOW",
              "cves" : [ "CVE-2026-89156" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-89156",
                    "title" : "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
                    "url" : "https://www.redhat.com/#CVE-2026-89156"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                } ]
              }
            }, {
              "id" : "CVE-2026-89162",
              "title" : "In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.",
              "source" : "redhat-csaf",
              "cvssScore" : 2.9,
              "severity" : "LOW",
              "cves" : [ "CVE-2026-89162" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-89162",
                    "title" : "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode",
                    "url" : "https://www.redhat.com/#CVE-2026-89162"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                  } ]
                } ]
              }
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/pcre2-syntax@10.47-1.2.hum1?arch=noarch&distro=hummingbird-20251124&upstream=pcre2-10.47-1.2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-103111",
                "title" : "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.6,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-103111" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.49-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-103111",
                      "title" : "pcre2: pcre2: Out-of-bounds write via crafted regular expression",
                      "url" : "https://www.redhat.com/#CVE-2026-103111"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74972",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74972"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.49-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.49-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74972"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89161",
                "title" : "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.",
                "source" : "redhat-csaf",
                "cvssScore" : 7.4,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-89161" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89161",
                      "title" : "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match",
                      "url" : "https://www.redhat.com/#CVE-2026-89161"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89158",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.",
                "source" : "redhat-csaf",
                "cvssScore" : 6.5,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89158" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89158",
                      "title" : "PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms",
                      "url" : "https://www.redhat.com/#CVE-2026-89158"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89157",
                "title" : "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.",
                "source" : "redhat-csaf",
                "cvssScore" : 5.7,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-89157" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-89157",
                      "title" : "pcre2: PCRE2: Out-of-bounds write via large pattern input",
                      "url" : "https://www.redhat.com/#CVE-2026-89157"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89160",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.",
                "source" : "redhat-csaf",
                "cvssScore" : 3.7,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89160" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89160",
                      "title" : "pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching",
                      "url" : "https://www.redhat.com/#CVE-2026-89160"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89156",
                "title" : "PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89156" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89156",
                      "title" : "PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback",
                      "url" : "https://www.redhat.com/#CVE-2026-89156"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-89162",
                "title" : "In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.",
                "source" : "redhat-csaf",
                "cvssScore" : 2.9,
                "severity" : "LOW",
                "cves" : [ "CVE-2026-89162" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-89162",
                      "title" : "pcre2: PCRE2: Information disclosure via pcre2_serialize_encode",
                      "url" : "https://www.redhat.com/#CVE-2026-89162"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86145",
                "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
                "source" : "redhat-csaf",
                "cvssScore" : 8.2,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86145" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "10.48-0.1.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-86145",
                      "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                      "url" : "https://www.redhat.com/#CVE-2026-86145"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:67534",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_67534"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "10.48-0.1.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "10.48-0.1.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86145",
              "title" : "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).",
              "source" : "redhat-csaf",
              "cvssScore" : 8.2,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86145" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "10.48-0.1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-86145",
                    "title" : "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions",
                    "url" : "https://www.redhat.com/#CVE-2026-86145"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:67534",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_67534"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "10.48-0.1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "10.48-0.1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:67534"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "To mitigate this Improper Protection of Alternate Path vulnerability, ensure that secondary execution branches—such as the reuse of cached memory workspaces—enforce the exact same size and boundary checks as the primary memory allocation paths. Limit exposure by preventing untrusted user input from directly controlling PCRE2 regular expressions, and strictly avoid utilizing recursive matching patterns when operating under a low heap limit. Apply a defense-in-depth strategy by validating all inputs comprehensively."
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=attr-2.6.0-9.1.hum1.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86805",
              "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86805" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "2.43-8.7.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:72503",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_72503"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-86805",
                    "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                    "url" : "https://www.redhat.com/#CVE-2026-86805"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/libstdc%2B%2B@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
            "issues" : [ {
              "id" : "CVE-2026-102010",
              "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-102010" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "16.2.1-3.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-102010",
                    "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                    "url" : "https://www.redhat.com/#CVE-2026-102010"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "16.2.1-3.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "16.2.1-3.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:74569",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_74569"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "16.2.1-3.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "16.2.1-3.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                  } ]
                } ]
              }
            } ],
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 67926    0     0  100 67926      0  70316 --:--:-- --:--:-- --:--:-- 70244
100  635k    0  568k  100 67926   579k  69171 --:--:-- --:--:-- --:--:--  646k
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-102010",
              "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-102010" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "16.2.1-3.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-102010",
                    "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                    "url" : "https://www.redhat.com/#CVE-2026-102010"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "16.2.1-3.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "16.2.1-3.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:74569",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_74569"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "16.2.1-3.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "16.2.1-3.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/libsepol@3.11-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libsepol-3.11-2.hum1.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86805",
              "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86805" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "2.43-8.7.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:72503",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_72503"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-86805",
                    "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                    "url" : "https://www.redhat.com/#CVE-2026-86805"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libeconf-0.7.9-4.1.hum1.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86805",
              "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86805" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "2.43-8.7.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:72503",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_72503"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-86805",
                    "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                    "url" : "https://www.redhat.com/#CVE-2026-86805"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=zlib-ng-2.3.3-6.hum1.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86805",
              "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86805" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "2.43-8.7.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:72503",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_72503"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-86805",
                    "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                    "url" : "https://www.redhat.com/#CVE-2026-86805"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=pam-1.7.2-4.hum1.src.rpm",
            "transitive" : [ {
              "ref" : "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/libgcc@16.2.1-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-16.2.1-2.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-102010",
                "title" : "Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-102010" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "16.2.1-3.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "CVE-2026-102010",
                      "title" : "gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_if",
                      "url" : "https://www.redhat.com/#CVE-2026-102010"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "RHSA-2026:74569",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_74569"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "16.2.1-3.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "16.2.1-3.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:74569"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available."
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            }, {
              "ref" : "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.43-8.5.hum1.src.rpm",
              "issues" : [ {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-95818",
                "title" : "AT_SECURE program buffer overflow via $ORIGIN processing",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-95818" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-95818",
                      "title" : "glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.",
                      "url" : "https://www.redhat.com/#CVE-2026-95818"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }, {
                "id" : "CVE-2026-8674",
                "title" : "Assertion failure in the DNS stub resolver with a long search domain",
                "source" : "redhat-csaf",
                "cvssScore" : 5.3,
                "severity" : "MEDIUM",
                "cves" : [ "CVE-2026-8674" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.6.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:69276",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                      "url" : "https://www.redhat.com/#RHSA-2026_69276"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-8674",
                      "title" : "glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration",
                      "url" : "https://www.redhat.com/#CVE-2026-8674"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.6.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.6.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:69276"
                    }, {
                      "category" : "WORKAROUND",
                      "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
                    } ]
                  } ]
                }
              } ],
              "highestVulnerability" : {
                "id" : "CVE-2026-86805",
                "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
                "source" : "redhat-csaf",
                "cvssScore" : 7.0,
                "severity" : "HIGH",
                "cves" : [ "CVE-2026-86805" ],
                "unique" : false,
                "remediation" : {
                  "fixedIn" : [ "2.43-8.7.hum1" ],
                  "advisories" : [ {
                    "advisory" : {
                      "id" : "RHSA-2026:72503",
                      "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                      "url" : "https://www.redhat.com/#RHSA-2026_72503"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  }, {
                    "advisory" : {
                      "id" : "CVE-2026-86805",
                      "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                      "url" : "https://www.redhat.com/#CVE-2026-86805"
                    },
                    "status" : "affected",
                    "versionRanges" : [ {
                      "versionSchemeId" : "rpm",
                      "highVersion" : "2.43-8.7.hum1",
                      "highInclusive" : false
                    } ],
                    "fixedIn" : "2.43-8.7.hum1",
                    "remediations" : [ {
                      "category" : "VENDOR_FIX",
                      "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                      "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                    } ]
                  } ]
                }
              }
            } ],
            "highestVulnerability" : {
              "id" : "CVE-2026-86805",
              "title" : "AT_SECURE programs may load attacker-controlled code via $ORIGIN",
              "source" : "redhat-csaf",
              "cvssScore" : 7.0,
              "severity" : "HIGH",
              "cves" : [ "CVE-2026-86805" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "2.43-8.7.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "RHSA-2026:72503",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
                    "url" : "https://www.redhat.com/#RHSA-2026_72503"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                }, {
                  "advisory" : {
                    "id" : "CVE-2026-86805",
                    "title" : "glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader",
                    "url" : "https://www.redhat.com/#CVE-2026-86805"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2.43-8.7.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2.43-8.7.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:72503"
                  } ]
                } ]
              }
            }
          }, {
            "ref" : "pkg:rpm/redhat/ca-certificates-bundle@2025.2.80_v9.0.304-9.hum1?arch=noarch&distro=hummingbird-20251124&upstream=ca-certificates-2025.2.80_v9.0.304-9.hum1.src.rpm",
            "issues" : [ {
              "id" : "CVE-2026-114406",
              "title" : "Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns",
              "source" : "redhat-csaf",
              "cvssScore" : 6.8,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-114406" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "2026.2.92_v9.0.319-1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-114406",
                    "title" : "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns",
                    "url" : "https://www.redhat.com/#CVE-2026-114406"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2026.2.92_v9.0.319-1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2026.2.92_v9.0.319-1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:86595"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "See the security bulletin for a detailed mitigation procedure."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:86595",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                    "url" : "https://www.redhat.com/#RHSA-2026_86595"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2026.2.92_v9.0.319-1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2026.2.92_v9.0.319-1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:86595"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "See the security bulletin for a detailed mitigation procedure."
                  } ]
                } ]
              }
            } ],
            "transitive" : [ ],
            "highestVulnerability" : {
              "id" : "CVE-2026-114406",
              "title" : "Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns",
              "source" : "redhat-csaf",
              "cvssScore" : 6.8,
              "severity" : "MEDIUM",
              "cves" : [ "CVE-2026-114406" ],
              "unique" : false,
              "remediation" : {
                "fixedIn" : [ "2026.2.92_v9.0.319-1.hum1" ],
                "advisories" : [ {
                  "advisory" : {
                    "id" : "CVE-2026-114406",
                    "title" : "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns",
                    "url" : "https://www.redhat.com/#CVE-2026-114406"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2026.2.92_v9.0.319-1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2026.2.92_v9.0.319-1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:86595"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "See the security bulletin for a detailed mitigation procedure."
                  } ]
                }, {
                  "advisory" : {
                    "id" : "RHSA-2026:86595",
                    "title" : "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
                    "url" : "https://www.redhat.com/#RHSA-2026_86595"
                  },
                  "status" : "affected",
                  "versionRanges" : [ {
                    "versionSchemeId" : "rpm",
                    "highVersion" : "2026.2.92_v9.0.319-1.hum1",
                    "highInclusive" : false
                  } ],
                  "fixedIn" : "2026.2.92_v9.0.319-1.hum1",
                  "remediations" : [ {
                    "category" : "VENDOR_FIX",
                    "details" : "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
                    "url" : "https://access.redhat.com/errata/RHSA-2026:86595"
                  }, {
                    "category" : "WORKAROUND",
                    "details" : "See the security bulletin for a detailed mitigation procedure."
                  } ]
                } ]
              }
            }
          } ]
        }
      },
      "recommendations" : { }
    }
  },
  "licenses" : [ {
    "status" : {
      "ok" : true,
      "name" : "deps.dev",
      "code" : 200,
      "message" : "OK",
      "warnings" : { }
    },
    "summary" : {
      "total" : 0,
      "concluded" : 35,
      "permissive" : 0,
      "weakCopyleft" : 0,
      "strongCopyleft" : 0,
      "unknown" : 0,
      "deprecated" : 0,
      "osiApproved" : 0,
      "fsfLibre" : 0
    },
    "packages" : {
      "pkg:rpm/redhat/filesystem@3.18-59.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pam-libs@1.7.2-4.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc-common@2.43-8.5.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pcre2@10.47-1.2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.16.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libselinux@3.11-5.hum1" : {
        "evidence" : [ ]
      },
      "pkg:github/actions/checkout@v4" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpg-pubkey@7e4624258c406535d56d6f135054e4a45a6340b3-6229229e" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pcre2-syntax@10.47-1.2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/hummingbird-release@20251124-1.16.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/hummingbird-repos@20251124-1.16.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpg-pubkey@567e347ad0044ade55ba8a5f199e2f91fd431d51-4ae0493b" : {
        "evidence" : [ ]
      },
      "pkg:oci/core-runtime@sha256%3A1171ea7227d7c06e2cce4b000c0e7f3d31c216fffd3bd7ad6e8dcc56de2a217f" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libeconf@0.7.9-4.1.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/coreutils-single@9.11-6.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcap-ng@0.9.5-1.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsepol@3.11-2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc-minimal-langpack@2.43-8.5.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ca-certificates-bundle@2025.2.80_v9.0.304-9.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/systemd-libs@261.2-1.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ncurses-base@6.6-3.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/bash@5.3.15-2.1.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libstdc%2B%2B@16.2.1-2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libacl@2.4.0-2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc@2.43-8.5.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcap@2.78-2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/audit-libs@4.2.1-2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/setup@2.15.1-2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libgcc@16.2.1-2.hum1" : {
        "evidence" : [ ]
      },
      "pkg:oci/hummingbird-builder@sha256%3A2cb3b168408e4b709465edb26263adc267ae96d81faab0a2d858c357ec60b457" : {
        "evidence" : [ ]
      },
      "pkg:oci/test-comp-kdqe@sha256%3A8729c2c552bc6650464439f77cfb6cef05134ba544a2e889b4a8396578860cdb" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ncurses-libs@6.6-3.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.hum1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpg-pubkey@fcd355b305707a62da143ab6e422397e50fe8467a2a95343d246d6276afedf8f-68e6a1f3" : {
        "evidence" : [ ]
      }
    }
  } ]
}