{"id":"RHSA-2026:44416","summary":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","modified":"2026-10-10T10:11:06Z","published":"2026-08-04T10:25:06Z","upstream":["CVE-2026-67322","CVE-2026-67323","CVE-2026-67325","CVE-2026-67326"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:44416"},{"type":"ARTICLE","url":"https://images.redhat.com/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-67322"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-67326"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-67323"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-67325"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_44416.json"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510021"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-67322"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67322"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-clone-from"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2509976"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-67323"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67323"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-unguarded-git-options"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2509975"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-67325"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67325"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-option-prefix-abbreviation"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510003"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-67326"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67326"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-newline-injection-via-config-writer-section"}],"affected":[{"package":{"name":"clang","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/clang"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"clang-analyzer","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/clang-analyzer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"clang-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/clang-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"clang-libs","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/clang-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"clang-resource-filesystem","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/clang-resource-filesystem"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"clang-tools-extra","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/clang-tools-extra"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"clang-tools-extra-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/clang-tools-extra-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"compiler-rt","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/compiler-rt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"git-clang-format","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/git-clang-format"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libcxx","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libcxx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libcxx-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libcxx-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libcxx-static","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libcxx-static"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libcxxabi","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libcxxabi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libcxxabi-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libcxxabi-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libcxxabi-static","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libcxxabi-static"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libomp","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libomp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"libomp-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/libomp-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"lld","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/lld"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"lld-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/lld-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"lld-libs","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/lld-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"lldb","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/lldb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"lldb-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/lldb-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-bolt","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-bolt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-cmake-utils","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-cmake-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-doc","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-filesystem","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-filesystem"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-googletest","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-googletest"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-libs","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-libunwind","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-libunwind"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-libunwind-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-libunwind-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-libunwind-static","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-libunwind-static"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-static","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-static"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"llvm-test","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/llvm-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"polly","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/polly"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"polly-devel","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/polly-devel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"python3-clang","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/python3-clang"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"python3-lit","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/python3-lit"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}},{"package":{"name":"python3-lldb","ecosystem":"Red Hat:hummingbird:1","purl":"pkg:rpm/redhat/python3-lldb"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.8-4.1.hum1"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:44416.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}