Skip to content
OpenAdvisories
High RHSA-2026:22934 6 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jun 18, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 cargo 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 clippy 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-analyzer 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-debugger-common 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-doc 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-gdb 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-lldb 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-src 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-aarch64-unknown-none-softfloat 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-aarch64-unknown-uefi 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-i686-pc-windows-gnu 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-wasm32-unknown-unknown 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-wasm32-wasip1 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-x86_64-pc-windows-gnu 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-x86_64-unknown-none 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rust-std-static-x86_64-unknown-uefi 0:1.96.0-1.hum1
Red Hat · Hardened Images 1 hummingbird:1 rustfmt 0:1.96.0-1.hum1

Vulnerabilities 6

  • High 8.9
    CVE-2026-44432

    urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

    urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the official Br…

    urllib3 urllib3 open-webui katib-suggestion-hyperopt Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2026-6734

    undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

    Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin. All requests are dispatched through the pool connected to the first origin, regardless …

    undici undici renovate code-server Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-9675

    undici WebSocket client vulnerable to denial of service via cumulative fragment bypass

    Impact: The undici WebSocket client enforces maxPayloadSize per-frame but does not enforce the cumulative size of fragmented uncompressed messages. A malicious WebSocket server can stream many small fragments that each pass per-frame validation but collective…

    undici undici node-undici undici Ubuntu npm
  • High 7.4
    CVE-2026-9697

    undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

    Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://). The target HTTPS connection through the SOCKS5 tunnel falls back to Node's default trust store, ignoring user-configured ca, cert…

    undici undici langfuse-3-worker renovate Debian Ubuntu Azure Linux Wolfi npm
  • Medium 6.5
    CVE-2026-45149

    brace-expansion: Large numeric range defeats documented `max` DoS protection

    The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max option was being applied too late. When expanding a single large numeric range like {1..10000000}, the sequence generation loop …

    juliangruber brace-expansion langfuse-3-worker renovate Debian Ubuntu Wolfi npm
  • Medium 4.3
    CVE-2026-9358

    postcss-selector-parser AST Serialization container.js toString recursion

    A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2. Affected is the function toString of the file src/selectors/container.js of the component AST Serialization. Executing a manipulation can lead to uncontrolled recursion. It is possib…

    jupyter-base-notebook vitess-23 vitess-24 vitess-24-compat Debian Ubuntu Wolfi npm

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-45149
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-9358
  • report
    https://access.redhat.com/security/cve/CVE-2026-9697
  • report
    https://access.redhat.com/security/cve/CVE-2026-6734
  • report
    https://access.redhat.com/security/cve/CVE-2026-9675
  • report
    https://access.redhat.com/security/cve/CVE-2026-44432
  • article
    https://access.redhat.com/security/cve/CVE-2026-51221
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22934.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2490024
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-6734
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-6734
  • article
    https://cna.openjsf.org/security-advisories.html
  • article
    https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2481006
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-9358
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-9358
  • article
    https://gist.github.com/bx33661/581e3a38134601c04e19b4dfc9b459b9
  • article
    https://vuldb.com/submit/813080
  • article
    https://vuldb.com/vuln/365321
  • article
    https://vuldb.com/vuln/365321/cti
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2489979
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-9675
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-9675
  • article
    https://github.com/nodejs/undici/security/advisories/GHSA-38rv-x7px-6hhq
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2490018
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-9697
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-9697
  • article
    https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2477154
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44432
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44432
  • article
    https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2483481
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-45149
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-45149
  • article
    https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2