Skip to content
OpenAdvisories
High RHSA-2026:30652 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jun 29, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 busybox 1:1.37.0-7.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 busybox-petitboot 1:1.37.0-7.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 busybox-shared 1:1.37.0-7.3.hum1

Vulnerabilities 1

  • High 8.1
    CVE-2026-29004

    BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS

    BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv…

    vda-linux busybox_mirror busybox busybox Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-29004
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30652.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2466526
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-29004
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-29004
  • article
    https://busybox.net/
  • article
    https://github.com/vda-linux/busybox_mirror/commit/42202bfb1e6ac51fa995beda8be4d7b654aeee2a
  • article
    https://github.com/vda-linux/busybox_mirror/commit/d368f3f7836d1c2484c8f839316e5c93e76d4409
  • article
    https://www.vulncheck.com/advisories/busybox-dhcpv6-client-heap-buffer-overflow-via-dns-servers