Skip to content
OpenAdvisories
High RHSA-2026:83217 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Oct 20, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 39

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 erlang27 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-asn1 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-common_test 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-compiler 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-crypto 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-debugger 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-dialyzer 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-diameter 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-edoc 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-eldap 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-erl_interface 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-erts 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-et 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-eunit 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-examples 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-ftp 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-gdb-tools 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-inets 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-jinterface 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-kernel 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-megaco 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-mnesia 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-observer 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-odbc 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-os_mon 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-parsetools 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-public_key 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-reltool 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-runtime_tools 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-sasl 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-snmp 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-ssh 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-ssl 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-stdlib 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-syntax_tools 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-tftp 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-tools 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-wx 0:27.3.4.19-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 erlang27-xmerl 0:27.3.4.19-0.1.hum1

Vulnerabilities 2

  • High 8.2
    CVE-2026-94200

    TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

    Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. Th…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2026-105236

    TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries

    Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-94200
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-105236
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83217.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2552615
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-94200
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-94200
  • article
    https://cna.erlef.org/cves/CVE-2026-94200.html
  • article
    https://github.com/erlang/otp/commit/00a333bcf2800b69f540369b54167e897dae7219
  • article
    https://github.com/erlang/otp/commit/0abe6f66db0d295cd06b0efab3bdb3caa2803930
  • article
    https://github.com/erlang/otp/commit/66febc190e6dc42a5c4aedbfe250bf9a2edc2d5e
  • article
    https://github.com/erlang/otp/commit/cd0334854bf3ef56dc16f9fb728efe88fb05c4ac
  • article
    https://github.com/erlang/otp/security/advisories/GHSA-m5mh-q53w-67jq
  • article
    https://osv.dev/vulnerability/EEF-CVE-2026-94200
  • article
    https://www.erlang.org/doc/system/versions.html#order-of-versions
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2552595
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-105236
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-105236
  • article
    https://cna.erlef.org/cves/CVE-2026-105236.html
  • article
    https://github.com/erlang/otp/commit/0c20f3683b3c81fd30b46047195be9b3d2c69d76
  • article
    https://github.com/erlang/otp/commit/10ee925d0fee8413f1170cc21bfcf123c8d22454
  • article
    https://github.com/erlang/otp/commit/4d76adbf39d547a931048544df09c3c087e56618
  • article
    https://github.com/erlang/otp/commit/4fe38c4b8b2c8024afb60990e598ff823743fd54
  • article
    https://github.com/erlang/otp/security/advisories/GHSA-2g23-cgjh-34gq
  • article
    https://osv.dev/vulnerability/EEF-CVE-2026-105236