P5Verified

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-56859, CVE-2026-56860 affects yggdrasil-worker-package-manager. EPSS 0.00568 (percentile 0.45104), scored 2026-10-03. Fixed version: 0:0.2.3-6.el10_0.1. Fixed version: 0:0.2.3-6.el10_0.1. Fixed version: 0:0.2.3-6.el10_0.1. Fixed version: 0:0.2.3-7.el10_2.8. Fixed version: 0:0.2.3-7.el10_2.8. Fixed version: 0:0.2.3-7.el10_2.8. Fixed version: 0:1.27.0-0.1.hum1. Fixed version: 0:1.27.0-0.1.hum1.

CVE: CVE-2026-56859, CVE-2026-56860
Product: yggdrasil-worker-package-manager
CCR priority: 0.1 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N · OSV.dev
EPSS: 0.00568 · percentile 0.45104 · 2026-10-03
KEV: no

Affected products

yggdrasil-worker-package-manager · Fixed version: 0:0.2.3-6.el10_0.1
yggdrasil-worker-package-manager-debuginfo · Fixed version: 0:0.2.3-6.el10_0.1
yggdrasil-worker-package-manager-debugsource · Fixed version: 0:0.2.3-6.el10_0.1
yggdrasil-worker-package-manager · Fixed version: 0:0.2.3-7.el10_2.8
yggdrasil-worker-package-manager-debuginfo · Fixed version: 0:0.2.3-7.el10_2.8
yggdrasil-worker-package-manager-debugsource · Fixed version: 0:0.2.3-7.el10_2.8
golang1.27 · Fixed version: 0:1.27.0-0.1.hum1
golang1.27-docs · Fixed version: 0:1.27.0-0.1.hum1

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC
OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-56859.html