RHSA-2026:45254HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
July 24, 2026
Last Modified
October 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-10758 →

📋 Description

CVE-2026-10758 — lerc: lerc: Denial of Service via heap-based out-of-bounds write

🎯 Affected products10

  • Red Hat Hardened Images
  • liblerc-0:4.2.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • liblerc-0:4.2.0-1.hum1@src as a component of Red Hat Hardened Images
  • liblerc-0:4.2.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • liblerc-devel-0:4.2.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • liblerc-devel-0:4.2.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • mingw32-liblerc-0:4.2.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • mingw32-liblerc-0:4.2.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • mingw64-liblerc-0:4.2.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • mingw64-liblerc-0:4.2.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Restrict the ingestion of LERC raster imagery to authenticated, trusted sources only. If untrusted input must be processed, isolate the parsing service inside an unprivileged, resource-constrained container or sandboxed worker process with automated restart limits.

🔗 References (5)