Red Hat Product Errata RHSA-2026:19369 - Security Advisory
Issued:
2026-05-19
Updated:
2026-05-19

RHSA-2026:19369 - Security Advisory

Synopsis

Important: rhc security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for rhc is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.

Security Fix(es):

  • golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
  • crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 9 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2456336 - CVE-2026-32282 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root
  • BZ - 2456338 - CVE-2026-32283 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

Red Hat Enterprise Linux for x86_64 9

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
x86_64
rhc-0.2.7-6.el9_8.x86_64.rpm SHA-256: 70e6b95905ac014e259b8ae77dbfce07dd038ca5e30b1efb8e613e5cf267b059
rhc-debuginfo-0.2.7-6.el9_8.x86_64.rpm SHA-256: 72e5ec488a649089b58d371aa412c13f61e498365ac38112cd4396c9e0262b14
rhc-debugsource-0.2.7-6.el9_8.x86_64.rpm SHA-256: 79d165a6e6226cf4de519f534f3f8f6675f8143eb652e900eff012f7e3795940

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
x86_64
rhc-0.2.7-6.el9_8.x86_64.rpm SHA-256: 70e6b95905ac014e259b8ae77dbfce07dd038ca5e30b1efb8e613e5cf267b059
rhc-debuginfo-0.2.7-6.el9_8.x86_64.rpm SHA-256: 72e5ec488a649089b58d371aa412c13f61e498365ac38112cd4396c9e0262b14
rhc-debugsource-0.2.7-6.el9_8.x86_64.rpm SHA-256: 79d165a6e6226cf4de519f534f3f8f6675f8143eb652e900eff012f7e3795940

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
s390x
rhc-0.2.7-6.el9_8.s390x.rpm SHA-256: 5ec51a15ca8aa81629e49048c6e325560e14805c4ff9e8ed51e90a126b7b24ed
rhc-debuginfo-0.2.7-6.el9_8.s390x.rpm SHA-256: fcce1decadf6d920ea28547c20cdd7026def818221b7ff2b87fb1b510606a6a3
rhc-debugsource-0.2.7-6.el9_8.s390x.rpm SHA-256: bebbfa71378020e5fca74aab7458ef29c109adf75df39deba4c4cf45bf86c577

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
s390x
rhc-0.2.7-6.el9_8.s390x.rpm SHA-256: 5ec51a15ca8aa81629e49048c6e325560e14805c4ff9e8ed51e90a126b7b24ed
rhc-debuginfo-0.2.7-6.el9_8.s390x.rpm SHA-256: fcce1decadf6d920ea28547c20cdd7026def818221b7ff2b87fb1b510606a6a3
rhc-debugsource-0.2.7-6.el9_8.s390x.rpm SHA-256: bebbfa71378020e5fca74aab7458ef29c109adf75df39deba4c4cf45bf86c577

Red Hat Enterprise Linux for Power, little endian 9

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
ppc64le
rhc-0.2.7-6.el9_8.ppc64le.rpm SHA-256: f7ab62b33bead90a8c14b0a03c27d5ccdf50608aa8aee9fe39e1a9a05fb2704c
rhc-debuginfo-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 69bb5ed39098c22b4e601a61c9f297b3dd205da88e36959b9e96fb4cb8ba33a9
rhc-debugsource-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 8805ae14c173ffcafdf97e1e4acce4ccc18538449a00f17c93977c3f75f91894

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
ppc64le
rhc-0.2.7-6.el9_8.ppc64le.rpm SHA-256: f7ab62b33bead90a8c14b0a03c27d5ccdf50608aa8aee9fe39e1a9a05fb2704c
rhc-debuginfo-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 69bb5ed39098c22b4e601a61c9f297b3dd205da88e36959b9e96fb4cb8ba33a9
rhc-debugsource-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 8805ae14c173ffcafdf97e1e4acce4ccc18538449a00f17c93977c3f75f91894

Red Hat Enterprise Linux for ARM 64 9

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
aarch64
rhc-0.2.7-6.el9_8.aarch64.rpm SHA-256: edca8610569451ec968dcb6f1d0a031b5b381536e6299d375f5701371a729686
rhc-debuginfo-0.2.7-6.el9_8.aarch64.rpm SHA-256: 0d21cc50da1800cd5efe2b374cc10e41179926cecc1fcf93f15b22c325cf0bd7
rhc-debugsource-0.2.7-6.el9_8.aarch64.rpm SHA-256: 1a86d1cb5f99dbc787fe399056787186f5b88535e1ffffa59042bfdfe39b285b

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
aarch64
rhc-0.2.7-6.el9_8.aarch64.rpm SHA-256: edca8610569451ec968dcb6f1d0a031b5b381536e6299d375f5701371a729686
rhc-debuginfo-0.2.7-6.el9_8.aarch64.rpm SHA-256: 0d21cc50da1800cd5efe2b374cc10e41179926cecc1fcf93f15b22c325cf0bd7
rhc-debugsource-0.2.7-6.el9_8.aarch64.rpm SHA-256: 1a86d1cb5f99dbc787fe399056787186f5b88535e1ffffa59042bfdfe39b285b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
ppc64le
rhc-0.2.7-6.el9_8.ppc64le.rpm SHA-256: f7ab62b33bead90a8c14b0a03c27d5ccdf50608aa8aee9fe39e1a9a05fb2704c
rhc-debuginfo-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 69bb5ed39098c22b4e601a61c9f297b3dd205da88e36959b9e96fb4cb8ba33a9
rhc-debugsource-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 8805ae14c173ffcafdf97e1e4acce4ccc18538449a00f17c93977c3f75f91894

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
x86_64
rhc-0.2.7-6.el9_8.x86_64.rpm SHA-256: 70e6b95905ac014e259b8ae77dbfce07dd038ca5e30b1efb8e613e5cf267b059
rhc-debuginfo-0.2.7-6.el9_8.x86_64.rpm SHA-256: 72e5ec488a649089b58d371aa412c13f61e498365ac38112cd4396c9e0262b14
rhc-debugsource-0.2.7-6.el9_8.x86_64.rpm SHA-256: 79d165a6e6226cf4de519f534f3f8f6675f8143eb652e900eff012f7e3795940

Red Hat CodeReady Linux Builder for x86_64 9

SRPM
x86_64
rhc-debuginfo-0.2.7-6.el9_8.x86_64.rpm SHA-256: 72e5ec488a649089b58d371aa412c13f61e498365ac38112cd4396c9e0262b14
rhc-debugsource-0.2.7-6.el9_8.x86_64.rpm SHA-256: 79d165a6e6226cf4de519f534f3f8f6675f8143eb652e900eff012f7e3795940
rhc-devel-0.2.7-6.el9_8.x86_64.rpm SHA-256: 74c6006e986fd8057f063e1f0a143bd4fa5b3458e5c58a1bce82e31868a1e360

Red Hat CodeReady Linux Builder for Power, little endian 9

SRPM
ppc64le
rhc-debuginfo-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 69bb5ed39098c22b4e601a61c9f297b3dd205da88e36959b9e96fb4cb8ba33a9
rhc-debugsource-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 8805ae14c173ffcafdf97e1e4acce4ccc18538449a00f17c93977c3f75f91894
rhc-devel-0.2.7-6.el9_8.ppc64le.rpm SHA-256: ea6a8991bb70feba64169523e88716cd0e313674ea575462b4d541ffd8a47349

Red Hat CodeReady Linux Builder for ARM 64 9

SRPM
aarch64
rhc-debuginfo-0.2.7-6.el9_8.aarch64.rpm SHA-256: 0d21cc50da1800cd5efe2b374cc10e41179926cecc1fcf93f15b22c325cf0bd7
rhc-debugsource-0.2.7-6.el9_8.aarch64.rpm SHA-256: 1a86d1cb5f99dbc787fe399056787186f5b88535e1ffffa59042bfdfe39b285b
rhc-devel-0.2.7-6.el9_8.aarch64.rpm SHA-256: 08cf430abe734c246b11458d9f32155f85f50fcceb4e17ba6b617d93e8aeee00

Red Hat CodeReady Linux Builder for IBM z Systems 9

SRPM
s390x
rhc-debuginfo-0.2.7-6.el9_8.s390x.rpm SHA-256: fcce1decadf6d920ea28547c20cdd7026def818221b7ff2b87fb1b510606a6a3
rhc-debugsource-0.2.7-6.el9_8.s390x.rpm SHA-256: bebbfa71378020e5fca74aab7458ef29c109adf75df39deba4c4cf45bf86c577
rhc-devel-0.2.7-6.el9_8.s390x.rpm SHA-256: 354db8f26983333f97473cd1f93af53d0613621752e763435cbd4f34006c7cd7

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8

SRPM
x86_64
rhc-debuginfo-0.2.7-6.el9_8.x86_64.rpm SHA-256: 72e5ec488a649089b58d371aa412c13f61e498365ac38112cd4396c9e0262b14
rhc-debugsource-0.2.7-6.el9_8.x86_64.rpm SHA-256: 79d165a6e6226cf4de519f534f3f8f6675f8143eb652e900eff012f7e3795940
rhc-devel-0.2.7-6.el9_8.x86_64.rpm SHA-256: 74c6006e986fd8057f063e1f0a143bd4fa5b3458e5c58a1bce82e31868a1e360

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8

SRPM
ppc64le
rhc-debuginfo-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 69bb5ed39098c22b4e601a61c9f297b3dd205da88e36959b9e96fb4cb8ba33a9
rhc-debugsource-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 8805ae14c173ffcafdf97e1e4acce4ccc18538449a00f17c93977c3f75f91894
rhc-devel-0.2.7-6.el9_8.ppc64le.rpm SHA-256: ea6a8991bb70feba64169523e88716cd0e313674ea575462b4d541ffd8a47349

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8

SRPM
s390x
rhc-debuginfo-0.2.7-6.el9_8.s390x.rpm SHA-256: fcce1decadf6d920ea28547c20cdd7026def818221b7ff2b87fb1b510606a6a3
rhc-debugsource-0.2.7-6.el9_8.s390x.rpm SHA-256: bebbfa71378020e5fca74aab7458ef29c109adf75df39deba4c4cf45bf86c577
rhc-devel-0.2.7-6.el9_8.s390x.rpm SHA-256: 354db8f26983333f97473cd1f93af53d0613621752e763435cbd4f34006c7cd7

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8

SRPM
aarch64
rhc-debuginfo-0.2.7-6.el9_8.aarch64.rpm SHA-256: 0d21cc50da1800cd5efe2b374cc10e41179926cecc1fcf93f15b22c325cf0bd7
rhc-debugsource-0.2.7-6.el9_8.aarch64.rpm SHA-256: 1a86d1cb5f99dbc787fe399056787186f5b88535e1ffffa59042bfdfe39b285b
rhc-devel-0.2.7-6.el9_8.aarch64.rpm SHA-256: 08cf430abe734c246b11458d9f32155f85f50fcceb4e17ba6b617d93e8aeee00

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
aarch64
rhc-0.2.7-6.el9_8.aarch64.rpm SHA-256: edca8610569451ec968dcb6f1d0a031b5b381536e6299d375f5701371a729686
rhc-debuginfo-0.2.7-6.el9_8.aarch64.rpm SHA-256: 0d21cc50da1800cd5efe2b374cc10e41179926cecc1fcf93f15b22c325cf0bd7
rhc-debugsource-0.2.7-6.el9_8.aarch64.rpm SHA-256: 1a86d1cb5f99dbc787fe399056787186f5b88535e1ffffa59042bfdfe39b285b

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
s390x
rhc-0.2.7-6.el9_8.s390x.rpm SHA-256: 5ec51a15ca8aa81629e49048c6e325560e14805c4ff9e8ed51e90a126b7b24ed
rhc-debuginfo-0.2.7-6.el9_8.s390x.rpm SHA-256: fcce1decadf6d920ea28547c20cdd7026def818221b7ff2b87fb1b510606a6a3
rhc-debugsource-0.2.7-6.el9_8.s390x.rpm SHA-256: bebbfa71378020e5fca74aab7458ef29c109adf75df39deba4c4cf45bf86c577

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
x86_64
rhc-0.2.7-6.el9_8.x86_64.rpm SHA-256: 70e6b95905ac014e259b8ae77dbfce07dd038ca5e30b1efb8e613e5cf267b059
rhc-debuginfo-0.2.7-6.el9_8.x86_64.rpm SHA-256: 72e5ec488a649089b58d371aa412c13f61e498365ac38112cd4396c9e0262b14
rhc-debugsource-0.2.7-6.el9_8.x86_64.rpm SHA-256: 79d165a6e6226cf4de519f534f3f8f6675f8143eb652e900eff012f7e3795940

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
aarch64
rhc-0.2.7-6.el9_8.aarch64.rpm SHA-256: edca8610569451ec968dcb6f1d0a031b5b381536e6299d375f5701371a729686
rhc-debuginfo-0.2.7-6.el9_8.aarch64.rpm SHA-256: 0d21cc50da1800cd5efe2b374cc10e41179926cecc1fcf93f15b22c325cf0bd7
rhc-debugsource-0.2.7-6.el9_8.aarch64.rpm SHA-256: 1a86d1cb5f99dbc787fe399056787186f5b88535e1ffffa59042bfdfe39b285b

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
ppc64le
rhc-0.2.7-6.el9_8.ppc64le.rpm SHA-256: f7ab62b33bead90a8c14b0a03c27d5ccdf50608aa8aee9fe39e1a9a05fb2704c
rhc-debuginfo-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 69bb5ed39098c22b4e601a61c9f297b3dd205da88e36959b9e96fb4cb8ba33a9
rhc-debugsource-0.2.7-6.el9_8.ppc64le.rpm SHA-256: 8805ae14c173ffcafdf97e1e4acce4ccc18538449a00f17c93977c3f75f91894

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
rhc-0.2.7-6.el9_8.src.rpm SHA-256: 47ac84e2f518871627c94ff921c1c6c046005e2f25003b7b69b50ee377083343
s390x
rhc-0.2.7-6.el9_8.s390x.rpm SHA-256: 5ec51a15ca8aa81629e49048c6e325560e14805c4ff9e8ed51e90a126b7b24ed
rhc-debuginfo-0.2.7-6.el9_8.s390x.rpm SHA-256: fcce1decadf6d920ea28547c20cdd7026def818221b7ff2b87fb1b510606a6a3
rhc-debugsource-0.2.7-6.el9_8.s390x.rpm SHA-256: bebbfa71378020e5fca74aab7458ef29c109adf75df39deba4c4cf45bf86c577

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.