Skip to content
OpenAdvisories
High RHSA-2026:7625 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Jun 19, 2026 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python-sentry-sdk 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+aiohttp 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+asyncpg 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+bottle 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+celery 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+django 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+falcon 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+fastapi 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+flask 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+grpcio 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+http2 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+httpx 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+pure_eval 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+pymongo 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+rq 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+sqlalchemy 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+starlette 0:2.48.0-4.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-sentry-sdk+tornado 0:2.48.0-4.1.hum1

Vulnerabilities 1

  • High 8.9
    CVE-2026-44432

    urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

    urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the official Br…

    urllib3 urllib3 open-webui katib-suggestion-hyperopt Debian Ubuntu Wolfi PyPI

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-44432
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7625.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2477154
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44432
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44432
  • article
    https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j