RHSA-2026:63514MediumCVSS 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
September 4, 2026
Last Modified
September 21, 2026

🔗 CVE IDs covered (3)

CVE-2026-13608 →CVE-2026-18924 →CVE-2026-19931 →

📋 Description

CVE-2026-13608 — curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack CVE-2026-18924 — curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections CVE-2026-19931 — curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

🎯 Affected products40

  • Red Hat Hardened Images
  • cargo-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • cargo-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • clippy-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • clippy-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-0:1.98.0-1.hum1@src as a component of Red Hat Hardened Images
  • rust-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-analyzer-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-analyzer-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-doc-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-doc-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images
  • rust-std-static-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images
  • rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images
  • rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images
  • +10 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate enforce strict mutual authentication and cryptographic verification of both endpoints before transmitting sensitive data. Implement robust TLS/SSL configurations with explicit certificate pinning or strict CA validation to prevent Man-in-the-Middle (MITM) attackers from intercepting, prematurely concluding, or manipulating the handshake. Workaround: Disable HTTP/2 Server Push (CURLMOPT_PUSHFUNCTION) and shared connection handles (CURL_LOCK_DATA_CONNECT) in libcurl clients to eliminate the vulnerable code path. If these features cannot be disabled, enforce host-based firewalls to restrict affected applications' outbound HTTPS traffic solely to trusted endpoints, neutralizing the risk of exploitation by malicious HTTP/2 servers. Workaround: To mitigate this prevent connection reuse (CURLOPT_FORBID_REUSE) for transfers using Negotiate authentication with empty credentials and strictly isolate libcurl connection pools across different security principals. For defense-in-depth, enforce network boundaries to limit outbound HTTP access, mitigating the impact of any potential cross-session data exposure while pending upstream patches.

🔗 References (7)