The Red Hat security advisory RHSA-2026:70694 updates Red Hat Hardened Images RPMs, including openshell-0.0.116-0.2.hum1 and related packages, to address multiple vulnerabilities such as CVE-2026-93599. CVE-2026-93599 is a denial of service vulnerability in rustls-webpki caused by an out-of-bounds read triggered by parsing a crafted CRL with an empty onlySomeReasons value in the issuingDistributionPoint extension. This leads to application panic and crash in software explicitly enabling CRL revocation checking. The advisory includes updated RPMs for aarch64 and x86_64 architectures and source packages. No explicit affected versions are stated, but the update supersedes prior vulnerable versions. The advisory does not mention known exploits in the wild.

The primary impact is a denial of service condition caused by application crashes when processing maliciously crafted CRLs in environments using rustls-webpki with CRL revocation checking enabled. This can disrupt availability of affected applications. No confidentiality or integrity impacts are reported. The vulnerability could potentially be leveraged to cause service interruptions but does not lead to code execution or data disclosure as per the advisory.

Red Hat has released updated RPM packages (openshell-0.0.116-0.2.hum1 and related) that fix the described vulnerabilities. Users should apply these official updates to remediate the issues. The vendor advisory indicates the fix is available and provides instructions for applying the update. No additional mitigations or workarounds are specified or required once the update is applied.