Skip to content
OpenAdvisories
Medium RHSA-2026:81391 4 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 14, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 busybox 1:1.37.0-9.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 busybox-petitboot 1:1.37.0-9.4.hum1
Red Hat · Hardened Images 1 hummingbird:1 busybox-shared 1:1.37.0-9.4.hum1

Vulnerabilities 4

  • Medium 6.3
    CVE-2026-108119

    Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix

    A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is create…

    Red Hat Red Hat Enterprise Linux 6 Red Hat Hardened Images busybox Linux Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2026-124745

    Busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory

    A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links t…

    Red Hat Red Hat Enterprise Linux 6 Red Hat Hardened Images busybox Linux Debian Ubuntu
  • Medium 6.1
    CVE-2026-92205

    BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability

    BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that…

    BusyBox BusyBox busybox busybox Debian Ubuntu
  • Low 3.3
    CVE-2026-88842

    Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption

    A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dro…

    Red Hat Red Hat Hardened Images busybox busybox Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-108119
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-88842
  • report
    https://access.redhat.com/security/cve/CVE-2026-92205
  • report
    https://access.redhat.com/security/cve/CVE-2026-124745
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_81391.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2531355
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-88842
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-88842
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2558404
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-92205
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-92205
  • article
    https://www.zerodayinitiative.com/advisories/ZDI-26-705/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548611
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-108119
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-108119
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2571637
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-124745
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-124745