Skip to content
OpenAdvisories
High RHSA-2026:47236 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 29, 2026 · Updated Sep 7, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 rabbitmq-server4.2 0:4.2.9-0.2.hum1

Vulnerabilities 2

  • High 8.7
    CVE-2026-59248 Public exploit

    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS

    Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a denial of service. The HPACK and QPACK prefixed-integer decoder …

    ninenines cowlib rabbitmq-server rabbitmq-server Debian Ubuntu Azure Linux Hex
  • Medium 6.9
    CVE-2026-65624

    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

    Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboy_http enforces the max_headers limit by counting…

    ninenines cowboy rabbitmq-server rabbitmq-server Debian Ubuntu Azure Linux Hex

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-59248
  • report
    https://access.redhat.com/security/cve/CVE-2026-65624
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47236.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2507959
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-59248
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-59248
  • article
    https://cna.erlef.org/cves/CVE-2026-59248.html
  • article
    https://github.com/ninenines/cowlib/commit/f582430498072a0c65ad338030321576dc13a343
  • article
    https://osv.dev/vulnerability/EEF-CVE-2026-59248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2507960
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-65624
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-65624
  • article
    https://cna.erlef.org/cves/CVE-2026-65624.html
  • article
    https://github.com/ninenines/cowboy/commit/3a34d8c1cfd94326466aa16a9017236691dc9c55
  • article
    https://osv.dev/vulnerability/EEF-CVE-2026-65624