RHSA-2026:56999HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
August 19, 2026
Last Modified
October 29, 2026

🔗 CVE IDs covered (2)

CVE-2026-35406 →CVE-2026-93599 →

📋 Description

CVE-2026-35406 — aardvark-dns: Aardvark-dns: Denial of Service via truncated TCP DNS query and connection reset CVE-2026-93599 — rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List

🎯 Affected products6

  • Red Hat Hardened Images
  • aardvark-dns-2:2.1.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • aardvark-dns-2:2.1.0-1.hum1@src as a component of Red Hat Hardened Images
  • aardvark-dns-2:2.1.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • aardvark-dns-tests-2:2.1.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • aardvark-dns-tests-2:2.1.0-1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: As a mitigation, avoid using aardvark-dns when container name resolution is not required by creating Podman networks with DNS disabled (e.g., podman network create --disable-dns). This prevents the vulnerable component from being used.

🔗 References (6)