RHSA-2026:47009CriticalCVSS 8.2

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
July 28, 2026
Last Modified
August 24, 2026

🔗 CVE IDs covered (5)

CVE-2026-42792 →CVE-2026-54890 →CVE-2026-55953 →CVE-2026-59250 →CVE-2026-59251 →

📋 Description

CVE-2026-42792 — erlang-otp: epmd: Erlang OTP epmd: Remote Denial of Service via connection exhaustion CVE-2026-54890 — erlang/otp: erts: otp: Erlang/OTP: Denial of Service via integer underflow in ETF decoding CVE-2026-55953 — erlang/otp: Erlang/OTP ssl client: Authentication bypass via unoffered anonymous cipher suite acceptance CVE-2026-59250 — megaco: Erlang/OTP Megaco Flex Scanner: Remote code execution or denial of service via oversized message CVE-2026-59251 — Erlang/OTP: public_key: Erlang/OTP public_key: Denial of Service via crafted TLS certificate chains

🎯 Affected products4

  • Red Hat Hardened Images
  • erlang27-main@aarch64 as a component of Red Hat Hardened Images
  • erlang27-main@src as a component of Red Hat Hardened Images
  • erlang27-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Clients using only TLS 1.3 are not affected; the TLS 1.3 client handshake path validates the negotiated cipher suite. As a workaround for TLS 1.2/DTLS clients prior to upgrading, explicitly disable anonymous cipher suites (TLS_DH_anon_*, TLS_ECDH_anon_*) in the ssl client configuration, or restrict the client to TLS 1.3-only.

🔗 References (9)