{"id":"RHSA-2026:86202","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","modified":"2026-11-13T19:03:59.688371573Z","published":"2026-11-13T18:46:32Z","upstream":["CVE-2026-119371","CVE-2026-119372","CVE-2026-119373","CVE-2026-119374","CVE-2026-119375","CVE-2026-119376","CVE-2026-119377","CVE-2026-119378","CVE-2026-119379","CVE-2026-119591"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:86202"},{"type":"ARTICLE","url":"https://images.redhat.com/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119376"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119374"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119375"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119373"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119372"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119377"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119371"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119379"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119378"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-119591"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86202.json"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564005"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119371"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119371"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-cte-nest"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L5754"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/e6ff280c839fdfc7418fd5add12e8f32702a17fb"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-10-04T04:58:58Z"},{"type":"ARTICLE","url":"https://sqlite.org/releaselog/3_54_0.html"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/f54730871303e655"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-cte-chain-in-selectexpander"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564015"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119372"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119372"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-fts3-snippet"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts3/fts3_snippet.c#L561"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/a87bd2471a9c0606e78d3c3678bcd9cecaa0e731"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-08-17T09:18:24Z"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/e4635c4153"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-fts3-fts3bestsnippet-via-snippet"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563953"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119373"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119373"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-08-04T08:49:27Z"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/a7f8c92f62"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563978"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119374"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119374"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-fts5-securedel"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/9cd4f9e920"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563947"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119375"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119375"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-wal-pagesize"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/src/wal.c#L3672"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/e5bf119821f25be1d7f10ef0a2edbe175289166e"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-08-17T15:54:41Z"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/f9b4ee369557c36c"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-information-disclosure-via-wal-page-size-mismatch"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563943"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119376"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119376"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-collate-depth"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/src/expr.c#L175"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/d54522a5b832422ab893a1e9fa7a99ab314ea4e2"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-10-04T04:50:56Z"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/252c0b7bf5a727d2"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-collate-operator-chain"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564011"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119377"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119377"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-fj-using-auth"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/src/resolve.c#L775"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/5694c3bb2a6a40770ecd2f65910eea756734dfd8"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/7ff247c5b9ead3ad8a69c26d3fd264878e127237"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-07-05T08:15:45Z"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/2cb22877683680c1"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/bbd69ce274620008"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-authorizer-bypass-via-right-or-full-join-using"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563979"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119378"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119378"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-rtree-rowid0"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/rtree/rtree.c#L905"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/d21bd37c7cfc1b85b17a6703555f0926b6236e04"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/6a9e1415659f9e75"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-r-tree-nodewrite"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563955"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119379"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119379"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-session-ncol"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-08-16T10:15:25Z"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/3f57024aecea0f3b"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563985"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-119591"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119591"},{"type":"ARTICLE","url":"https://abraxaslabs.tech/research/sqlite-values-union"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L7199"},{"type":"ARTICLE","url":"https://github.com/sqlite/sqlite/commit/eff50a067c55f972909e7780e506e91382d08de2"},{"type":"ARTICLE","url":"https://sqlite.org/bugs/info/2026-10-04T05:34:47Z"},{"type":"ARTICLE","url":"https://sqlite.org/src/info/ab621a3e11ee4acc"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-countofviewoptimization-in-values-clause"}],"affected":[{"package":{"name":"lemon","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/lemon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite-analyzer","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite-analyzer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite-debug","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite-debug"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite-doc","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite-libs","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite-tcl","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite-tcl"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}},{"package":{"name":"sqlite-tools","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/sqlite-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.54.1-1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:86202.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}