RHSA-2026:73523HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
September 29, 2026
Last Modified
October 22, 2026

🔗 CVE IDs covered (2)

CVE-2026-56851 →CVE-2026-77411 →

📋 Description

CVE-2026-56851 — golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile CVE-2026-77411 — github.com/rabbitmq/amqp091-go: RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

🎯 Affected products4

  • Red Hat Hardened Images
  • opentelemetry-collector-contrib-0:0.162.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • opentelemetry-collector-contrib-0:0.162.0-0.1.hum1@src as a component of Red Hat Hardened Images
  • opentelemetry-collector-contrib-0:0.162.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Connect applications only to trusted AMQP brokers, restrict network access to approved broker endpoints, use transport security and protected credentials, and update to a Red Hat product version containing the fix for amqp091-go 1.13.0 or later.

🔗 References (6)