RHSA-2026:63514
Vulnerability from csaf_redhat - Published: 2026-09-04 06:29 - Updated: 2026-09-22 10:15Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Moderate
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
rust:
* cargo-1.98.0-1.hum1 (aarch64, x86_64)
* clippy-1.98.0-1.hum1 (aarch64, x86_64)
* rust-1.98.0-1.hum1 (aarch64, x86_64)
* rust-analyzer-1.98.0-1.hum1 (aarch64, x86_64)
* rust-debugger-common-1.98.0-1.hum1 (noarch)
* rust-doc-1.98.0-1.hum1 (aarch64, x86_64)
* rust-gdb-1.98.0-1.hum1 (noarch)
* rust-lldb-1.98.0-1.hum1 (noarch)
* rust-src-1.98.0-1.hum1 (noarch)
* rust-std-static-1.98.0-1.hum1 (aarch64, x86_64)
* rust-std-static-aarch64-unknown-none-softfloat-1.98.0-1.hum1 (noarch)
* rust-std-static-aarch64-unknown-uefi-1.98.0-1.hum1 (noarch)
* rust-std-static-i686-pc-windows-gnu-1.98.0-1.hum1 (noarch)
* rust-std-static-wasm32-unknown-unknown-1.98.0-1.hum1 (noarch)
* rust-std-static-wasm32-wasip1-1.98.0-1.hum1 (noarch)
* rust-std-static-x86_64-pc-windows-gnu-1.98.0-1.hum1 (noarch)
* rust-std-static-x86_64-unknown-none-1.98.0-1.hum1 (noarch)
* rust-std-static-x86_64-unknown-uefi-1.98.0-1.hum1 (noarch)
* rustfmt-1.98.0-1.hum1 (aarch64, x86_64)
* rust-1.98.0-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libcurl's SASL (Simple Authentication and Security Layer) negotiation for LDAP (Lightweight Directory Access Protocol) authentication when using the OpenLDAP backend. An incomplete handshake sequence can be misinterpreted as a successful cryptographic verification. A remote attacker, by performing a Man-in-the-Middle (MITM) attack, could inject a premature response to bypass complete peer validation, leading to an authentication bypass.
CWE-923 - Improper Restriction of Communication Channel to Intended EndpointsAffected products
Fixed
39 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in libcurl. When libcurl handles HTTP/2 Server Push streams and the parent handle shares connections, a use-after-free vulnerability can occur during the cleanup process. This could lead to application crashes, resulting in a denial of service.
CWE-416 - Use After FreeAffected products
Fixed
39 products, the same list as for
CVE-2026-13608
Threats
Impact
Low
A flaw was found in libcurl. This vulnerability allows an attacker to reuse an HTTP connection set up for a given hostname using Negotiate authentication. When an initial request is made with empty credentials, a subsequent user's request can be sent over a previously authenticated connection belonging to another user. This could lead to information disclosure or unauthorized access to sensitive data.
6.5 (Medium)
Affected products
Fixed
39 products, the same list as for
CVE-2026-13608
Threats
Impact
Moderate
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nrust:\n * cargo-1.98.0-1.hum1 (aarch64, x86_64)\n * clippy-1.98.0-1.hum1 (aarch64, x86_64)\n * rust-1.98.0-1.hum1 (aarch64, x86_64)\n * rust-analyzer-1.98.0-1.hum1 (aarch64, x86_64)\n * rust-debugger-common-1.98.0-1.hum1 (noarch)\n * rust-doc-1.98.0-1.hum1 (aarch64, x86_64)\n * rust-gdb-1.98.0-1.hum1 (noarch)\n * rust-lldb-1.98.0-1.hum1 (noarch)\n * rust-src-1.98.0-1.hum1 (noarch)\n * rust-std-static-1.98.0-1.hum1 (aarch64, x86_64)\n * rust-std-static-aarch64-unknown-none-softfloat-1.98.0-1.hum1 (noarch)\n * rust-std-static-aarch64-unknown-uefi-1.98.0-1.hum1 (noarch)\n * rust-std-static-i686-pc-windows-gnu-1.98.0-1.hum1 (noarch)\n * rust-std-static-wasm32-unknown-unknown-1.98.0-1.hum1 (noarch)\n * rust-std-static-wasm32-wasip1-1.98.0-1.hum1 (noarch)\n * rust-std-static-x86_64-pc-windows-gnu-1.98.0-1.hum1 (noarch)\n * rust-std-static-x86_64-unknown-none-1.98.0-1.hum1 (noarch)\n * rust-std-static-x86_64-unknown-uefi-1.98.0-1.hum1 (noarch)\n * rustfmt-1.98.0-1.hum1 (aarch64, x86_64)\n * rust-1.98.0-1.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:63514",
"url": "https://access.redhat.com/errata/RHSA-2026:63514"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19931",
"url": "https://access.redhat.com/security/cve/CVE-2026-19931"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13608",
"url": "https://access.redhat.com/security/cve/CVE-2026-13608"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18924",
"url": "https://access.redhat.com/security/cve/CVE-2026-18924"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63514.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-09-22T10:15:24+00:00",
"generator": {
"date": "2026-09-22T10:15:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:63514",
"initial_release_date": "2026-09-04T06:29:39+00:00",
"revision_history": [
{
"date": "2026-09-04T06:29:39+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-07T14:11:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-22T10:15:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-0:1.98.0-1.hum1@aarch64",
"product": {
"name": "cargo-0:1.98.0-1.hum1@aarch64",
"product_id": "cargo-0:1.98.0-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cargo@1.98.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "clippy-0:1.98.0-1.hum1@aarch64",
"product": {
"name": "clippy-0:1.98.0-1.hum1@aarch64",
"product_id": "clippy-0:1.98.0-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/clippy@1.98.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-0:1.98.0-1.hum1@aarch64",
"product": {
"name": "rust-0:1.98.0-1.hum1@aarch64",
"product_id": "rust-0:1.98.0-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust@1.98.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-analyzer-0:1.98.0-1.hum1@aarch64",
"product": {
"name": "rust-analyzer-0:1.98.0-1.hum1@aarch64",
"product_id": "rust-analyzer-0:1.98.0-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analyzer@1.98.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-doc-0:1.98.0-1.hum1@aarch64",
"product": {
"name": "rust-doc-0:1.98.0-1.hum1@aarch64",
"product_id": "rust-doc-0:1.98.0-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-doc@1.98.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-0:1.98.0-1.hum1@aarch64",
"product": {
"name": "rust-std-static-0:1.98.0-1.hum1@aarch64",
"product_id": "rust-std-static-0:1.98.0-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static@1.98.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rustfmt-0:1.98.0-1.hum1@aarch64",
"product": {
"name": "rustfmt-0:1.98.0-1.hum1@aarch64",
"product_id": "rustfmt-0:1.98.0-1.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rustfmt@1.98.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cargo-0:1.98.0-1.hum1@x86_64",
"product": {
"name": "cargo-0:1.98.0-1.hum1@x86_64",
"product_id": "cargo-0:1.98.0-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cargo@1.98.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "clippy-0:1.98.0-1.hum1@x86_64",
"product": {
"name": "clippy-0:1.98.0-1.hum1@x86_64",
"product_id": "clippy-0:1.98.0-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/clippy@1.98.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-0:1.98.0-1.hum1@x86_64",
"product": {
"name": "rust-0:1.98.0-1.hum1@x86_64",
"product_id": "rust-0:1.98.0-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust@1.98.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-analyzer-0:1.98.0-1.hum1@x86_64",
"product": {
"name": "rust-analyzer-0:1.98.0-1.hum1@x86_64",
"product_id": "rust-analyzer-0:1.98.0-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-analyzer@1.98.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-doc-0:1.98.0-1.hum1@x86_64",
"product": {
"name": "rust-doc-0:1.98.0-1.hum1@x86_64",
"product_id": "rust-doc-0:1.98.0-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-doc@1.98.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-0:1.98.0-1.hum1@x86_64",
"product": {
"name": "rust-std-static-0:1.98.0-1.hum1@x86_64",
"product_id": "rust-std-static-0:1.98.0-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static@1.98.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rustfmt-0:1.98.0-1.hum1@x86_64",
"product": {
"name": "rustfmt-0:1.98.0-1.hum1@x86_64",
"product_id": "rustfmt-0:1.98.0-1.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rustfmt@1.98.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rust-0:1.98.0-1.hum1@src",
"product": {
"name": "rust-0:1.98.0-1.hum1@src",
"product_id": "rust-0:1.98.0-1.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust@1.98.0-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-debugger-common@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-debugger-common@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-gdb@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-gdb@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-lldb@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-lldb@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-src@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-src@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-aarch64-unknown-none-softfloat@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-aarch64-unknown-none-softfloat@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-aarch64-unknown-uefi@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-aarch64-unknown-uefi@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-i686-pc-windows-gnu@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-i686-pc-windows-gnu@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-unknown-unknown@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-unknown-unknown@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasip1@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-wasm32-wasip1@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-pc-windows-gnu@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-pc-windows-gnu@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-unknown-none@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-unknown-none@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-unknown-uefi@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rust-std-static-x86_64-unknown-uefi@1.98.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64"
},
"product_reference": "cargo-0:1.98.0-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cargo-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64"
},
"product_reference": "cargo-0:1.98.0-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64"
},
"product_reference": "clippy-0:1.98.0-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "clippy-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64"
},
"product_reference": "clippy-0:1.98.0-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64"
},
"product_reference": "rust-0:1.98.0-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-0:1.98.0-1.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src"
},
"product_reference": "rust-0:1.98.0-1.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64"
},
"product_reference": "rust-0:1.98.0-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64"
},
"product_reference": "rust-analyzer-0:1.98.0-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-analyzer-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64"
},
"product_reference": "rust-analyzer-0:1.98.0-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64"
},
"product_reference": "rust-doc-0:1.98.0-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-doc-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64"
},
"product_reference": "rust-doc-0:1.98.0-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64"
},
"product_reference": "rust-std-static-0:1.98.0-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64"
},
"product_reference": "rust-std-static-0:1.98.0-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-0:1.98.0-1.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64"
},
"product_reference": "rustfmt-0:1.98.0-1.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rustfmt-0:1.98.0-1.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
},
"product_reference": "rustfmt-0:1.98.0-1.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-13608",
"cwe": {
"id": "CWE-923",
"name": "Improper Restriction of Communication Channel to Intended Endpoints"
},
"discovery_date": "2026-09-06T17:50:55.239056+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529198"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl\u0027s SASL (Simple Authentication and Security Layer) negotiation for LDAP (Lightweight Directory Access Protocol) authentication when using the OpenLDAP backend. An incomplete handshake sequence can be misinterpreted as a successful cryptographic verification. A remote attacker, by performing a Man-in-the-Middle (MITM) attack, could inject a premature response to bypass complete peer validation, leading to an authentication bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low impact flaw in libcurl\u0027s SASL negotiation for LDAP authentication could allow an attacker to bypass peer validation through a Man-in-the-Middle (MITM) attack. Exploitation requires an active network attacker to inject a premature response during the authentication handshake.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13608"
},
{
"category": "external",
"summary": "RHBZ#2529198",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529198"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13608",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13608"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13608",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13608"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-13608.html",
"url": "https://curl.se/docs/CVE-2026-13608.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-13608.json",
"url": "https://curl.se/docs/CVE-2026-13608.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3822248",
"url": "https://hackerone.com/reports/3822248"
}
],
"release_date": "2026-09-06T17:47:01.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-04T06:29:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63514"
},
{
"category": "workaround",
"details": "To mitigate enforce strict mutual authentication and cryptographic verification of both endpoints before transmitting sensitive data. Implement robust TLS/SSL configurations with explicit certificate pinning or strict CA validation to prevent Man-in-the-Middle (MITM) attackers from intercepting, prematurely concluding, or manipulating the handshake.",
"product_ids": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack"
},
{
"cve": "CVE-2026-18924",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-09-06T17:51:03.812362+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529201"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. When libcurl handles HTTP/2 Server Push streams and the parent handle shares connections, a use-after-free vulnerability can occur during the cleanup process. This could lead to application crashes, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Low impact. It affects libcurl when configured to use HTTP/2 Server Push with shared connections, a non-default and less common deployment scenario in Red Hat products. Successful exploitation would lead to a use-after-free condition during resource cleanup, primarily impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18924"
},
{
"category": "external",
"summary": "RHBZ#2529201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529201"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18924",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18924"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18924",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18924"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-18924.html",
"url": "https://curl.se/docs/CVE-2026-18924.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-18924.json",
"url": "https://curl.se/docs/CVE-2026-18924.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3916059",
"url": "https://hackerone.com/reports/3916059"
}
],
"release_date": "2026-09-06T17:47:27.820000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-04T06:29:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63514"
},
{
"category": "workaround",
"details": "Disable HTTP/2 Server Push (CURLMOPT_PUSHFUNCTION) and shared connection handles (CURL_LOCK_DATA_CONNECT) in libcurl clients to eliminate the vulnerable code path. If these features cannot be disabled, enforce host-based firewalls to restrict affected applications\u0027 outbound HTTPS traffic solely to trusted endpoints, neutralizing the risk of exploitation by malicious HTTP/2 servers.",
"product_ids": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections"
},
{
"cve": "CVE-2026-19931",
"cwe": {
"id": "CWE-488",
"name": "Exposure of Data Element to Wrong Session"
},
"discovery_date": "2026-09-06T17:50:58.049067+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529199"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcurl. This vulnerability allows an attacker to reuse an HTTP connection set up for a given hostname using Negotiate authentication. When an initial request is made with empty credentials, a subsequent user\u0027s request can be sent over a previously authenticated connection belonging to another user. This could lead to information disclosure or unauthorized access to sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in libcurl allows for information disclosure when applications reuse HTTP connections with Negotiate authentication. If an initial request is made with empty credentials, a subsequent request from another user could be sent over the previously authenticated connection, potentially exposing sensitive data. This risk is specific to applications configured to use Negotiate authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19931"
},
{
"category": "external",
"summary": "RHBZ#2529199",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529199"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19931",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19931"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19931",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19931"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-19931.html",
"url": "https://curl.se/docs/CVE-2026-19931.html"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2026-19931.json",
"url": "https://curl.se/docs/CVE-2026-19931.json"
},
{
"category": "external",
"summary": "https://hackerone.com/reports/3923520",
"url": "https://hackerone.com/reports/3923520"
}
],
"release_date": "2026-09-06T17:47:43.523000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-04T06:29:39+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63514"
},
{
"category": "workaround",
"details": "To mitigate this prevent connection reuse (CURLOPT_FORBID_REUSE) for transfers using Negotiate authentication with empty credentials and strictly isolate libcurl connection pools across different security principals. For defense-in-depth, enforce network boundaries to limit outbound HTTP access, mitigating the impact of any potential cross-session data exposure while pending upstream patches.",
"product_ids": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:cargo-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:clippy-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@src",
"Red Hat Hardened Images:rust-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-analyzer-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-debugger-common-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-doc-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-gdb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-lldb-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-src-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rust-std-static-0:1.98.0-1.hum1@x86_64",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-none-softfloat-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-aarch64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-i686-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-unknown-unknown-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-wasm32-wasip1-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-pc-windows-gnu-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-none-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:rust-std-static-x86_64-unknown-uefi-0:1.98.0-1.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@aarch64",
"Red Hat Hardened Images:rustfmt-0:1.98.0-1.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…