Loading story…
Red Hat released Important-rated security updates for urllib3 across Red Hat Enterprise Linux 8, 9, and 10 to remediate CVE-2026-44432 and CVE-2026-44431. The more severe issue, CVE-2026-44432, is a denial-of-service flaw in the Python HTTP client library that can let a remote attacker force excessive CPU and memory consumption when urllib3 fully decompresses an HTTP response even though only a partial read was requested, or when it drains a connection after partial decompression. Red Hat assigned the bug a CVSS v3 score of 7.5 and mapped it to CWE-409.
The advisories cover multiple package streams and architectures, including python-urllib3 for RHEL 10, python3.14-urllib3 for RHEL 9 and 10, and python3.12-urllib3 for RHEL 8 and 9, with fixes delivered in versions such as 1.26.19-4.el10_2, 2.6.3-2.el10_2, 2.6.3-2.el9_8, 1.26.19-3.el9_8, and 1.26.19-3.el8_10. Red Hat said the same updates also address CVE-2026-44431, an information disclosure flaw in which sensitive headers may be forwarded across origins during redirects, and listed affected offerings including Extended Update Support, Extended Life Cycle releases, and Red Hat Ansible Automation Platform 2.5 and 2.6 as fixed.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
8 events from the most recent confirmed update back to the earliest known activity.
On July 20, 2026, Red Hat fixed CVE-2026-44432 in automation-controller for Ansible Automation Platform 2.5 on RHEL 8 and RHEL 9 via RHSA-2026:42078, and for Ansible Automation Platform 2.6 on RHEL 9 via RHSA-2026:42079.
On July 1, 2026, Red Hat marked CVE-2026-44432 fixed in Red Hat Ansible Automation Platform 2.6 for RHEL 9 via RHSA-2026:34160 for python3.12-urllib3.
Red Hat's CVE entry for CVE-2026-44432 was last modified on June 30, 2026.
On June 29, 2026, Red Hat published RHSA-2026:32992 for python3.12-urllib3 in Red Hat Enterprise Linux 8, remediating CVE-2026-44432 and CVE-2026-44431.
Red Hat reported that CVE-2026-44431 was addressed in Red Hat Enterprise Linux 9 through advisory RHSA-2026:28158. This is an additional RHEL 9 remediation event beyond the RHSA-2026:28157 and RHSA-2026:28159 updates already in the timeline.
On June 23, 2026, Red Hat issued RHSA-2026:28157 for python3.14-urllib3 and RHSA-2026:28159 for python3.12-urllib3 in Red Hat Enterprise Linux 9, fixing CVE-2026-44432 and CVE-2026-44431.
On June 22, 2026, Red Hat published RHSA-2026:27929 for python3.14-urllib3 and RHSA-2026:28000 for python-urllib3 in Red Hat Enterprise Linux 10, addressing CVE-2026-44432 and CVE-2026-44431.
Red Hat's CVE record says CVE-2026-44432, a denial-of-service flaw in urllib3 caused by excessive HTTP response decompression, was made public on May 13, 2026.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
8 references tracked. Mallory keeps watching after this page renders.
redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat Enterprise Linux users were alerted to multiple package-level vulnerabilities that can cause denial of service, affecting both **`urllib3`** and **Python Protobuf** components distributed for the platform. One advisory reported multiple flaws in **`urllib3`** that could be abused to disrupt application availability, while a separate advisory identified a denial-of-service vulnerability in **Python Protobuf**. The notices indicate that the impact is centered on service interruption rather than code execution, but the affected libraries are widely used in Python-based applications and backend services on Red Hat Enterprise Linux systems. Organizations running exposed or business-critical workloads that depend on these packages should prioritize reviewing installed versions, applying Red Hat-provided updates, and validating that dependent applications remain stable after remediation.
Jun 29, 2026
Red Hat published **Important** security updates for Apache HTTP Server packages across **Red Hat Enterprise Linux 8, 9, and 10** and related JBoss Core Services offerings, addressing multiple upstream `httpd` vulnerabilities. The updates remediate **CVE-2025-65082**, which can let Apache configuration-set variables unexpectedly override server-calculated CGI environment variables, and **CVE-2025-66200**, a `mod_userdir` + `suexec` bypass in which an attacker able to use the `RequestHeader` directive in an `.htaccess` file may cause some CGI scripts to run under an unexpected user ID. Red Hat advisories for RHEL 9 and 10 also include fixes for **CVE-2025-58098**, where Server Side Includes appends the query string to `#exec cmd`, while the RHEL 8 `httpd:2.4` module update additionally addresses **CVE-2025-55753**. The affected Apache HTTP Server ranges extend through **2.4.65**, and upstream guidance points users to **2.4.66** for remediation. Red Hat shipped patched builds including `httpd-2.4.62-7.el9_7.3` for RHEL 9 and `httpd-2.4.63-4.el10_1.3` for RHEL 10, with corresponding package updates across major architectures and lifecycle channels; the RHEL 8 advisory likewise delivers updated `httpd`, `mod_ssl`, `mod_http2`, `mod_md`, and related components. The fixes were released under advisories **RHSA-2025:23732**, **RHSA-2025:23919**, and **RHSA-2025:23932**.
Aug 21, 2026
Red Hat released **Important** security updates for OpenSSL across multiple **RHEL 9** and **RHEL 10** channels to address two high-impact vulnerabilities, **`CVE-2025-15467`** and **`CVE-2025-69419`**. The first flaw affects parsing of CMS `AuthEnvelopedData` with AEAD ciphers, where an oversized initialization vector can overflow a fixed-size stack buffer before authentication or tag verification, creating a path to denial of service and possible remote code execution. The second flaw is a memory corruption bug in PKCS#12 processing, where `BMPString` to UTF-8 conversion can trigger an out-of-bounds heap write when an application parses an attacker-controlled PKCS#12 file, potentially causing a crash or arbitrary code execution. Upstream fixes were issued in OpenSSL **3.0.19**, **3.3.6**, **3.4.4**, **3.5.5**, **3.6.1**, and **1.1.1ze** for the affected branches, while OpenSSL **1.0.2** is not affected and the OpenSSL FIPS modules are outside the vulnerable code paths. Red Hat advisories including **RHSA-2026:1496**, **RHSA-2026:1503**, **RHSA-2026:1519**, **RHSA-2026:1594**, and **RHSA-2026:1733** cover impacted products such as RHEL 9.0, 9.2, 9.4, 9.6, and 10.0 variants, along with related SAP, AUS, EUS, OpenShift, and JBoss Core Services offerings, with updated package builds released for major architectures including `x86_64`, `aarch64`, `ppc64le`, and `s390x`.
Aug 20, 2026