Red Hat Security Advisory

RHSA-2026:80349

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images cargo-1.99.0-1.hum1@aarch64, cargo-1.99.0-1.hum1@s390x, cargo-1.99.0-1.hum1@x86_64 +47

Fixes 1 record

TI-2026-73777 CVE-2026-92392 · GHSA-7jvw-75gf-2h34

Use-after-free in curl HTTP/2 upload handling

HIGH 70

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01284 Published 2026-10-14 Partial fix CWE-416