RHSA-2026:99577: Red Hat Hardened Images RPMs Security Update

Published Nov 12, 2026

Updated

Red Hat Hardened Images RPMs Security Update

Other sources

This update includes the following RPMs:busybox: busybox-1:1.37.0-9.5.hum1 (aarch64, s390x, x8664) busybox-petitboot-1:1.37.0-9.5.hum1 (aarch64, s390x, x8664) busybox-shared-1:1.37.0-9.5.hum1 (aarch64, s390x, x8664) busybox-1:1.37.0-9.5.hum1.src (src) Security Fix(es):busybox: CVE-2026-124742 CVE-2026-88833

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat Hardened Images

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade busybox to a version that resolves this vulnerability.
Fixed in 1:1.37.0-9.5.hum1
Upgrade
Upgrade busybox-petitboot to a version that resolves this vulnerability.
Fixed in 1:1.37.0-9.5.hum1
Upgrade
Upgrade busybox-shared to a version that resolves this vulnerability.
Fixed in 1:1.37.0-9.5.hum1

Event History

Nov 12, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·09:44 AM

Data Sourced

via Red Hat·09:44 AM

Severity

Frequently Asked Questions

Which packages and architectures are included in this update?

The update includes busybox, busybox-petitboot, and busybox-shared version 1:1.37.0-9.5.hum1 for aarch64, s390x, and x86_64. A corresponding busybox source RPM is also included.

Which security issues are addressed?

The update addresses CVE-2026-124742 and CVE-2026-88833 in busybox.