Red Hat Security Advisory: Red Hat build of Cryostat security update
An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Security Fix(es): * netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416) * netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674) * netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010) * io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691) * netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059) * netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043) * netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893) * netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249) * io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559) * jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512) * jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513) * eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860) * golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595) * golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828) * golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) * golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681) * golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599) * github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384) * github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385) * net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * form-data: Form field override via CRLF injection (CVE-2026-12143) * ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779) * ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736) * undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151) * undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697) * undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734) * js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625) * brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * protobufjs: Denial of Service via crafted schema (CVE-2026-44290) * protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292) * protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740) * protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The advisory covers a security update for Red Hat Hardened Images RPMs, including Rust toolchain components and related packages. Among the CVEs addressed is CVE-2026-6734, though detailed technical information specific to this CVE is not provided in the advisory. The update also addresses CVE-2026-45149, a denial of service vulnerability in the brace-expansion library versions 5.0.0 through 5.0.5, where excessive memory allocation occurs when expanding large numeric ranges. Red Hat Hardened Images ship versions of brace-expansion 1.x and 2.x, which are not affected by this flaw. The advisory includes a broad list of CWEs indicating various potential weaknesses but does not detail which apply to CVE-2026-6734. The update is distributed as version 1.96.0-1.hum1 for multiple Rust-related RPMs on aarch64 and x86_64 architectures. No known exploits in the wild have been reported for these vulnerabilities.
Potential Impact
The vulnerabilities addressed, including CVE-2026-6734, are rated high severity by Red Hat. The brace-expansion vulnerability can cause denial of service by exhausting system memory, impacting availability. The overall impact includes potential denial of service and other unspecified issues related to the multiple CWEs listed. No known active exploitation has been reported. Systems running affected versions of Red Hat Hardened Images RPMs may be vulnerable until updated.
Mitigation Recommendations
Red Hat has released updated RPM packages (version 1.96.0-1.hum1) for the affected components. Applying these updates will remediate the vulnerabilities. The vendor advisory does not indicate any alternative mitigations or workarounds for CVE-2026-6734. Users should apply the official update from Red Hat as soon as possible to address the issues. Since this is not a cloud service, remediation is the responsibility of the system administrators. Patch status is confirmed by the vendor advisory.
Red Hat Security Advisory: Red Hat build of Cryostat security update
Description
An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Security Fix(es): * netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416) * netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674) * netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010) * io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691) * netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059) * netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043) * netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893) * netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249) * io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559) * jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512) * jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513) * eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860) * golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595) * golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829) * golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828) * golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830) * golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) * golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681) * golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599) * github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384) * github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385) * net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) * mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * form-data: Form field override via CRLF injection (CVE-2026-12143) * ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779) * ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736) * undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151) * undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697) * undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734) * js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625) * brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * protobufjs: Denial of Service via crafted schema (CVE-2026-44290) * protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292) * protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740) * protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory covers a security update for Red Hat Hardened Images RPMs, including Rust toolchain components and related packages. Among the CVEs addressed is CVE-2026-6734, though detailed technical information specific to this CVE is not provided in the advisory. The update also addresses CVE-2026-45149, a denial of service vulnerability in the brace-expansion library versions 5.0.0 through 5.0.5, where excessive memory allocation occurs when expanding large numeric ranges. Red Hat Hardened Images ship versions of brace-expansion 1.x and 2.x, which are not affected by this flaw. The advisory includes a broad list of CWEs indicating various potential weaknesses but does not detail which apply to CVE-2026-6734. The update is distributed as version 1.96.0-1.hum1 for multiple Rust-related RPMs on aarch64 and x86_64 architectures. No known exploits in the wild have been reported for these vulnerabilities.
Potential Impact
The vulnerabilities addressed, including CVE-2026-6734, are rated high severity by Red Hat. The brace-expansion vulnerability can cause denial of service by exhausting system memory, impacting availability. The overall impact includes potential denial of service and other unspecified issues related to the multiple CWEs listed. No known active exploitation has been reported. Systems running affected versions of Red Hat Hardened Images RPMs may be vulnerable until updated.
Mitigation Recommendations
Red Hat has released updated RPM packages (version 1.96.0-1.hum1) for the affected components. Applying these updates will remediate the vulnerabilities. The vendor advisory does not indicate any alternative mitigations or workarounds for CVE-2026-6734. Users should apply the official update from Red Hat as soon as possible to address the issues. Since this is not a cloud service, remediation is the responsibility of the system administrators. Patch status is confirmed by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:22934
- Cve Count
- 6
- Additional Cves
- ["CVE-2026-9358","CVE-2026-9675","CVE-2026-9697","CVE-2026-44432","CVE-2026-45149"]
Threat ID: 6a340ceff198dc38c1060692
Added to database: 06/18/2026, 15:21:19 UTC
Last enriched: 08/16/2026, 17:31:47 UTC
Last updated: 09/18/2026, 01:12:42 UTC
Views: 99
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.