Skip to content
OpenAdvisories
Medium RHSA-2026:24013 3 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jul 16, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python3-unbound 0:1.25.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound 0:1.25.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-anchor 0:1.25.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-devel 0:1.25.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-dracut 0:1.25.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-libs 0:1.25.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-munin 0:1.25.1-2.hum1
Red Hat · Hardened Images 1 hummingbird:1 unbound-utils 0:1.25.1-2.hum1

Vulnerabilities 3

  • Medium 6.9
    CVE-2026-42534

    Jostle logic bypass degrades resolution performance

    NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance. Retransmits of the same query could renew the age of slow running queries and not allow the jostle …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 6.9
    CVE-2026-44390

    Unbounded name compression in certain cases causes degradation of service

    NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suff…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 6.6
    CVE-2026-41292

    Long list of incoming EDNS options degrades performance

    NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-44390
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-42534
  • report
    https://access.redhat.com/security/cve/CVE-2026-41292
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24013.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2480125
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-41292
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-41292
  • article
    https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-41292.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2480131
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-42534
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-42534
  • article
    https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-42534.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2480130
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44390
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44390
  • article
    https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-44390.txt