Loading story…
Red Hat Enterprise Linux users were alerted to multiple package-level vulnerabilities that can cause denial of service, affecting both urllib3 and Python Protobuf components distributed for the platform. One advisory reported multiple flaws in urllib3 that could be abused to disrupt application availability, while a separate advisory identified a denial-of-service vulnerability in Python Protobuf.
The notices indicate that the impact is centered on service interruption rather than code execution, but the affected libraries are widely used in Python-based applications and backend services on Red Hat Enterprise Linux systems. Organizations running exposed or business-critical workloads that depend on these packages should prioritize reviewing installed versions, applying Red Hat-provided updates, and validating that dependent applications remain stable after remediation.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
dCERT published advisory 2026-0471 for a denial-of-service vulnerability affecting the Python Protobuf component in Red Hat Enterprise Linux.
dCERT published advisory 2026-0205 covering multiple vulnerabilities in Red Hat Enterprise Linux's urllib3 component that could allow denial of service.
dCERT published advisory 2026-0197 for a denial-of-service vulnerability affecting the urllib3 component in Red Hat OpenShift and OpenShift AI. The advisory identifies the issue as impacting OpenShift-related products rather than Red Hat Enterprise Linux.
dCERT published advisory 2026-0010 covering multiple vulnerabilities affecting Red Hat Enterprise Linux. The reference identifies this as a separate RHEL advisory from later urllib3 and Python Protobuf notices.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
dcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
dCERT issued advisories for two **Red Hat Enterprise Linux** components, warning that vulnerabilities in `pcs` and `go-jose` could be exploited to cause **denial-of-service** conditions. Advisory `2026-1092` covers the `pcs` package, while advisory `2026-1245` addresses `go-jose`, indicating that separate weaknesses in commonly deployed RHEL software may allow attackers to disrupt service availability. The notices provide limited public technical detail, but they identify both issues as affecting Red Hat Enterprise Linux environments and potentially impacting system stability or application availability. Organizations running RHEL systems that rely on clustering functionality through `pcs` or authentication and cryptographic operations through `go-jose` should review the relevant vendor advisories and apply available updates or mitigations to reduce exposure to service disruption.
Jun 29, 2026
Red Hat issued security advisories covering **Linux kernel vulnerabilities** that affect multiple products, including **Red Hat Enterprise Linux (RHEL)**, **RHEL Server**, **RHEL for Real Time**, and **Red Hat CodeReady Linux Builder** across several versions and platforms. A related notice from the Canadian Centre for Cyber Security summarized advisories published during the reporting period and directed administrators to review Red Hat's official guidance. The available notices do not provide specific `CVE` identifiers, exploitation details, or attribution, but they emphasize that affected organizations should identify impacted systems and apply the relevant Red Hat updates. The advisories are presented as routine but important remediation guidance for enterprises running Red Hat-based environments where kernel-level flaws could affect system security and stability.
Jul 20, 2026
The Canadian Centre for Cyber Security issued two notices warning that Red Hat had published multiple security advisories for vulnerabilities affecting several products, with a particular focus on **Linux kernel** updates. The affected offerings include **Red Hat CodeReady Linux Builder**, **Red Hat Enterprise Linux**, **Red Hat Enterprise Linux Server**, and **Red Hat Enterprise Linux for Real Time** across multiple versions and platforms. The first notice, `AV26-318`, covered Red Hat advisories released between March 30 and April 5, while the second, `AV26-341`, covered advisories published between April 6 and 12. In both cases, the Cyber Centre urged users and administrators to review the referenced Red Hat advisories and apply the necessary updates to address the disclosed vulnerabilities.
Jul 2, 2026