{"schemaVersion":3,"id":"RHSA-2026:61884","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","dates":{"published":"2026-09-09T10:19:11.000Z","modified":"2026-10-20T10:43:35.751Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"valkey","name":"valkey","label":"valkey","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/valkey","purlType":"rpm","versions":[{"text":"< 0:9.0.6-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.0.6-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"valkey-compat-redis","name":"valkey-compat-redis","label":"valkey-compat-redis","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/valkey-compat-redis","purlType":"rpm","versions":[{"text":"< 0:9.0.6-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.0.6-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"valkey-compat-redis-devel","name":"valkey-compat-redis-devel","label":"valkey-compat-redis-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/valkey-compat-redis-devel","purlType":"rpm","versions":[{"text":"< 0:9.0.6-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.0.6-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"valkey-devel","name":"valkey-devel","label":"valkey-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/valkey-devel","purlType":"rpm","versions":[{"text":"< 0:9.0.6-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.0.6-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"valkey-doc","name":"valkey-doc","label":"valkey-doc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/valkey-doc","purlType":"rpm","versions":[{"text":"< 0:9.0.6-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.0.6-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"valkey-rdma","name":"valkey-rdma","label":"valkey-rdma","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/valkey-rdma","purlType":"rpm","versions":[{"text":"< 0:9.0.6-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.0.6-0.1.hum1","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:61884","label":"access.redhat.com/errata/RHSA-2026:61884","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://images.redhat.com/","label":"images.redhat.com","hostname":"images.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-85522","label":"access.redhat.com/security/cve/CVE-2026-85522","hostname":"access.redhat.com","tags":["ARTICLE","REPORT"]},{"url":"https://access.redhat.com/security/updates/classification/","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86227","label":"access.redhat.com/security/cve/CVE-2026-86227","hostname":"access.redhat.com","tags":["ARTICLE","REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56684","label":"access.redhat.com/security/cve/CVE-2026-56684","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63639","label":"access.redhat.com/security/cve/CVE-2026-63639","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-82677","label":"access.redhat.com/security/cve/CVE-2026-82677","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-82631","label":"access.redhat.com/security/cve/CVE-2026-82631","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61884.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61884.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517907","label":"bugzilla.redhat.com/show_bug.cgi?id=2517907","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56684","label":"www.cve.org/CVERecord?id=CVE-2026-56684","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56684","label":"nvd.nist.gov/vuln/detail/CVE-2026-56684","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/valkey-io/valkey/commit/7cd5bcb7575d750ec2de618db80da58680a10fe3","label":"github.com/valkey-io/valkey/commit/7cd5bcb7575d750ec2de618db80da58680a10fe3","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/pull/4234","label":"github.com/valkey-io/valkey/pull/4234","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/releases/tag/7.2.14","label":"github.com/valkey-io/valkey/releases/tag/7.2.14","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/releases/tag/8.0.10","label":"github.com/valkey-io/valkey/releases/tag/8.0.10","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/releases/tag/8.1.9","label":"github.com/valkey-io/valkey/releases/tag/8.1.9","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/releases/tag/9.0.5","label":"github.com/valkey-io/valkey/releases/tag/9.0.5","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/releases/tag/9.1.1","label":"github.com/valkey-io/valkey/releases/tag/9.1.1","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/security/advisories/GHSA-53mc-f3m3-99vh","label":"github.com/valkey-io/valkey/security/advisories/GHSA-53mc-f3m3-99vh","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517906","label":"bugzilla.redhat.com/show_bug.cgi?id=2517906","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63639","label":"www.cve.org/CVERecord?id=CVE-2026-63639","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63639","label":"nvd.nist.gov/vuln/detail/CVE-2026-63639","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/valkey-io/valkey/commit/06bc7768fe609f2054e69ccedefe7628f5675da9","label":"github.com/valkey-io/valkey/commit/06bc7768fe609f2054e69ccedefe7628f5675da9","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/commit/509cb3c74e8cbc9c0498ebe8b6c93dcd605e7271","label":"github.com/valkey-io/valkey/commit/509cb3c74e8cbc9c0498ebe8b6c93dcd605e7271","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/commit/98465eaffe3f95524a5046318bfbc4bdb9798291","label":"github.com/valkey-io/valkey/commit/98465eaffe3f95524a5046318bfbc4bdb9798291","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/commit/e95911d4d65be8789fa3705f44d7ed1e65378445","label":"github.com/valkey-io/valkey/commit/e95911d4d65be8789fa3705f44d7ed1e65378445","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/commit/f8d2027e8d4df790ac04974bf606408c8ea62778","label":"github.com/valkey-io/valkey/commit/f8d2027e8d4df790ac04974bf606408c8ea62778","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/pull/4073","label":"github.com/valkey-io/valkey/pull/4073","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/security/advisories/GHSA-mvcj-73cw-22m4","label":"github.com/valkey-io/valkey/security/advisories/GHSA-mvcj-73cw-22m4","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526157","label":"bugzilla.redhat.com/show_bug.cgi?id=2526157","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-82631","label":"www.cve.org/CVERecord?id=CVE-2026-82631","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82631","label":"nvd.nist.gov/vuln/detail/CVE-2026-82631","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/user-attachments/files/30111628/PoC.zip","label":"github.com/user-attachments/files/30111628/PoC.zip","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/","label":"github.com/valkey-io/valkey/","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/commit/b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20b","label":"github.com/valkey-io/valkey/commit/b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20b","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/issues/4198","label":"github.com/valkey-io/valkey/issues/4198","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/pull/4212","label":"github.com/valkey-io/valkey/pull/4212","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/cve/CVE-2026-82631","label":"vuldb.com/cve/CVE-2026-82631","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/submit/893793","label":"vuldb.com/submit/893793","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/397129","label":"vuldb.com/vuln/397129","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/397129/cti","label":"vuldb.com/vuln/397129/cti","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526233","label":"bugzilla.redhat.com/show_bug.cgi?id=2526233","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-82677","label":"www.cve.org/CVERecord?id=CVE-2026-82677","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82677","label":"nvd.nist.gov/vuln/detail/CVE-2026-82677","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/user-attachments/files/30118801/PoC.zip","label":"github.com/user-attachments/files/30118801/PoC.zip","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/commit/b349fe2821e3998534b1454c1b64a478daf8c6b7","label":"github.com/valkey-io/valkey/commit/b349fe2821e3998534b1454c1b64a478daf8c6b7","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/issues/4200","label":"github.com/valkey-io/valkey/issues/4200","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/pull/4211","label":"github.com/valkey-io/valkey/pull/4211","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/cve/CVE-2026-82677","label":"vuldb.com/cve/CVE-2026-82677","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/submit/893959","label":"vuldb.com/submit/893959","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/397172","label":"vuldb.com/vuln/397172","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/397172/cti","label":"vuldb.com/vuln/397172/cti","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529241","label":"bugzilla.redhat.com/show_bug.cgi?id=2529241","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86227","label":"www.cve.org/CVERecord?id=CVE-2026-86227","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86227","label":"nvd.nist.gov/vuln/detail/CVE-2026-86227","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/user-attachments/files/30195539/RDB.zip","label":"github.com/user-attachments/files/30195539/RDB.zip","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/commit/4691888e7fab3df128f0bde5750c9fde2ae552fa","label":"github.com/valkey-io/valkey/commit/4691888e7fab3df128f0bde5750c9fde2ae552fa","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/issues/4222","label":"github.com/valkey-io/valkey/issues/4222","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/pull/4229","label":"github.com/valkey-io/valkey/pull/4229","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/cve/CVE-2026-86227","label":"vuldb.com/cve/CVE-2026-86227","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/submit/897659","label":"vuldb.com/submit/897659","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/399380","label":"vuldb.com/vuln/399380","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/399380/cti","label":"vuldb.com/vuln/399380/cti","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2528500","label":"bugzilla.redhat.com/show_bug.cgi?id=2528500","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85522","label":"www.cve.org/CVERecord?id=CVE-2026-85522","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85522","label":"nvd.nist.gov/vuln/detail/CVE-2026-85522","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/valkey-io/valkey/commit/f4dc3ca09eb650c2fe14060090a41c524eca803f","label":"github.com/valkey-io/valkey/commit/f4dc3ca09eb650c2fe14060090a41c524eca803f","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/issues/4207","label":"github.com/valkey-io/valkey/issues/4207","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/valkey-io/valkey/pull/4210","label":"github.com/valkey-io/valkey/pull/4210","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/cve/CVE-2026-85522","label":"vuldb.com/cve/CVE-2026-85522","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/submit/895119","label":"vuldb.com/submit/895119","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/398707","label":"vuldb.com/vuln/398707","hostname":"vuldb.com","tags":["ARTICLE"]},{"url":"https://vuldb.com/vuln/398707/cti","label":"vuldb.com/vuln/398707/cti","hostname":"vuldb.com","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2026-56684","CVE-2026-63639","CVE-2026-82631","CVE-2026-82677","CVE-2026-85522","CVE-2026-86227"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-09T10:19:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-20T10:43:35.751Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T11:38:29.667Z","stale":false,"partial":false}}