Red Hat Security Advisory

RHSA-2026:42074

Red Hat Hardened Images RPMs Security Update

Released 2026-07-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images busybox-1:1.37.0-8.2.hum1@aarch64, busybox-1:1.37.0-8.2.hum1@src, busybox-1:1.37.0-8.2.hum1@x86_64 +4

Fixes 2 records

TI-2026-28205 CVE-2026-38755 · GHSA-jcqv-rj94-jmx3

Uncontrolled recursion in BusyBox

LOW 38

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00207 Published 2026-07-15 Partial fix CWE-674

TI-2026-28202 CVE-2026-38752 · GHSA-fj27-x67r-v4g5

Uncontrolled recursion in BusyBox

LOW 38

A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00207 Published 2026-07-15 Partial fix CWE-674