Red Hat Security Advisory

RHSA-2026:47236

Red Hat Hardened Images RPMs Security Update

Released 2026-07-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images rabbitmq-server4-2-main@aarch64, rabbitmq-server4-2-main@src, rabbitmq-server4-2-main@x86_64

Fixes 2 records

TI-2026-42388 CVE-2026-59248 · GHSA-f37p-pc7r-rghm

Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS

MEDIUM 43

Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a denial of service.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00292 Published 2026-07-28 Fixed in 2.19.0 CWE-770

TI-2026-46781 CVE-2026-65624 · GHSA-v9x8-262p-f2g5

Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

LOW 37

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00383 Published 2026-07-28 Fixed in 2.18.0 CWE-770