Skip to content
OpenAdvisories
High RHSA-2026:7412 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published May 22, 2026 · Updated Oct 10, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 bind 0:9.18.48-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 bind-chroot 0:9.18.48-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 bind-devel 0:9.18.48-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 bind-dnssec-utils 0:9.18.48-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 bind-doc 0:9.18.48-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 bind-libs 0:9.18.48-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 bind-utils 0:9.18.48-1.1.hum1

Vulnerabilities 2

  • High 7.5
    CVE-2026-5947

    SIG(0) validation during query flood may lead to undefined behavior

    Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is r…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • High 7.4
    CVE-2026-3593

    Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

    A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.0 through 9.18.48 and 9.18.11-S1 through …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-3593
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-5947
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7412.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2479770
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-3593
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-3593
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2479772
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-5947
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-5947