Red Hat Security Advisory

RHSA-2026:41240

Red Hat Hardened Images RPMs Security Update

Released 2026-07-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images curl-8.21.0-0.1.1.hum1@aarch64, curl-8.21.0-0.1.1.hum1@src, curl-8.21.0-0.1.1.hum1@x86_64 +6

Fixes 3 records

TI-2026-09063 CVE-2026-10536 · GHSA-wjq8-x4qm-6mmh

HTTP/2 stream-dependency tree UAF

HIGH 82

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and f…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00598 Published 2026-07-03 Partial fix · 8.14.2, 8.16.1 +1 CWE-416

TI-2026-08387 CVE-2026-9545 · GHSA-6v72-wfcj-jv53

exposing HTTP/3 early data

HIGH 72

In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker's impostor machine - without a valid certif…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00408 Published 2026-07-03 Partial fix · 8.14.2, 8.16.1 +1 CWE-200

TI-2026-41809 CVE-2026-58055 · GHSA-xrr7-82jr-v58x

nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length

LOW 28

nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers wh…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00253 Published 2026-06-28 Partial fix CWE-444