Red Hat Product Errata RHSA-2026:62222 - Security Advisory
Issued:
2026-09-01
Updated:
2026-09-01

RHSA-2026:62222 - Security Advisory

Synopsis

Important: rest security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for rest is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The rest packages provide a library for access to the RESTful web services.

Security Fix(es):

  • librest: weak random number generation in PKCE implementation (CVE-2026-16615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2504432 - CVE-2026-16615 librest: weak random number generation in PKCE implementation

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
x86_64
rest-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: f6353ebc9e8bc65404a3013e7985ed34ddd43e062494aeb207d60d2641ddd5f4
rest-debuginfo-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: 5d98615a1dd109103ba0635ab662498e62a3658067c7bbb5fee833217a1b8e27
rest-debugsource-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: dc0badac042412a20d0e4f4878f1fddcf114e1fbad505c546cde49ae412e4ed0
rest-demo-debuginfo-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: b9b63fa7fe25e6901dd689b41c67610f4418e9a574d38fe3e3cde8158bcaa432

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
s390x
rest-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 89f1b5b77221be5c43afbffe28ac5edf6bbe6a926b5dc246d8754ecf30095c37
rest-debuginfo-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 3b62d799b301d9f2bcc547fbc93c8927726ceff4197d53203adfc11d8a729ecb
rest-debugsource-0.9.1-11.el10_0.1.s390x.rpm SHA-256: f4e76ec9a0482c013fc11d3578d6aa21a795c73d868d0ef66144b5eccc668e46
rest-demo-debuginfo-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 7b8b3ba5475959f9d44555daf05f69187209ef70f933eeea0e980882a6554322

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
ppc64le
rest-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 1ec23f44b18e0b8b3fbbeef69af939d213cbd46f1ffa18680962141ad9eb4203
rest-debuginfo-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 7370f15e060b4660e9679af6bae55077b75638c09bfc8ec1ce57ea1a9dc34a73
rest-debugsource-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 763ef74de03f4d2cd872ad4080f13073a5d0149a82efb9cdeca5a56ade155271
rest-demo-debuginfo-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 8cdca5fd4fd06daa7860e1b9e331f15399ed20dc4a4987b8f54fd3292a407c70

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
aarch64
rest-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 2c03c71cf7f29a4f998f7b5cc29a17ca298f4a6b416b886ab55edb94a044575e
rest-debuginfo-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 2d300fd72110fe37974e851291ec0f4a9fc8f6b846a6547a85f81d869b18f3b2
rest-debugsource-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 47e58344b76f00d731ef5a18ccb00caf219af02a6e729a40670a1d1e8cf82cb3
rest-demo-debuginfo-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 25f88cbaa6c13b7c99b643a4133366b05dc3c65ceb7e140b9665d81d0ea8b51d

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
rest-debuginfo-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: 5d98615a1dd109103ba0635ab662498e62a3658067c7bbb5fee833217a1b8e27
rest-debugsource-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: dc0badac042412a20d0e4f4878f1fddcf114e1fbad505c546cde49ae412e4ed0
rest-demo-debuginfo-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: b9b63fa7fe25e6901dd689b41c67610f4418e9a574d38fe3e3cde8158bcaa432
rest-devel-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: ee1a9e221c899732a9535f0f3f9a2b48082d85554b66bb2b140a16f70ddb4e3d

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
rest-debuginfo-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 7370f15e060b4660e9679af6bae55077b75638c09bfc8ec1ce57ea1a9dc34a73
rest-debugsource-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 763ef74de03f4d2cd872ad4080f13073a5d0149a82efb9cdeca5a56ade155271
rest-demo-debuginfo-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 8cdca5fd4fd06daa7860e1b9e331f15399ed20dc4a4987b8f54fd3292a407c70
rest-devel-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: a844f92fa194e67ea7d738bbb8847f6184659ff6442ed069c6eb0528eb4a2a54

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
rest-debuginfo-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 3b62d799b301d9f2bcc547fbc93c8927726ceff4197d53203adfc11d8a729ecb
rest-debugsource-0.9.1-11.el10_0.1.s390x.rpm SHA-256: f4e76ec9a0482c013fc11d3578d6aa21a795c73d868d0ef66144b5eccc668e46
rest-demo-debuginfo-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 7b8b3ba5475959f9d44555daf05f69187209ef70f933eeea0e980882a6554322
rest-devel-0.9.1-11.el10_0.1.s390x.rpm SHA-256: a94435eccd0413a6bf1e8da30a69865f673946f0fe32f8cfcec5d7f1d90d882e

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
rest-debuginfo-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 2d300fd72110fe37974e851291ec0f4a9fc8f6b846a6547a85f81d869b18f3b2
rest-debugsource-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 47e58344b76f00d731ef5a18ccb00caf219af02a6e729a40670a1d1e8cf82cb3
rest-demo-debuginfo-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 25f88cbaa6c13b7c99b643a4133366b05dc3c65ceb7e140b9665d81d0ea8b51d
rest-devel-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 9634edcd85f99e925b8a30e51bc63a72a2bb006e71e848512faa092b7c1dcf3e

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
aarch64
rest-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 2c03c71cf7f29a4f998f7b5cc29a17ca298f4a6b416b886ab55edb94a044575e
rest-debuginfo-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 2d300fd72110fe37974e851291ec0f4a9fc8f6b846a6547a85f81d869b18f3b2
rest-debugsource-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 47e58344b76f00d731ef5a18ccb00caf219af02a6e729a40670a1d1e8cf82cb3
rest-demo-debuginfo-0.9.1-11.el10_0.1.aarch64.rpm SHA-256: 25f88cbaa6c13b7c99b643a4133366b05dc3c65ceb7e140b9665d81d0ea8b51d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
s390x
rest-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 89f1b5b77221be5c43afbffe28ac5edf6bbe6a926b5dc246d8754ecf30095c37
rest-debuginfo-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 3b62d799b301d9f2bcc547fbc93c8927726ceff4197d53203adfc11d8a729ecb
rest-debugsource-0.9.1-11.el10_0.1.s390x.rpm SHA-256: f4e76ec9a0482c013fc11d3578d6aa21a795c73d868d0ef66144b5eccc668e46
rest-demo-debuginfo-0.9.1-11.el10_0.1.s390x.rpm SHA-256: 7b8b3ba5475959f9d44555daf05f69187209ef70f933eeea0e980882a6554322

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
ppc64le
rest-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 1ec23f44b18e0b8b3fbbeef69af939d213cbd46f1ffa18680962141ad9eb4203
rest-debuginfo-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 7370f15e060b4660e9679af6bae55077b75638c09bfc8ec1ce57ea1a9dc34a73
rest-debugsource-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 763ef74de03f4d2cd872ad4080f13073a5d0149a82efb9cdeca5a56ade155271
rest-demo-debuginfo-0.9.1-11.el10_0.1.ppc64le.rpm SHA-256: 8cdca5fd4fd06daa7860e1b9e331f15399ed20dc4a4987b8f54fd3292a407c70

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
rest-0.9.1-11.el10_0.1.src.rpm SHA-256: b4eac981fdb75a6bb5519ba4dd610c644e315275dd14e4055c427ad7da259627
x86_64
rest-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: f6353ebc9e8bc65404a3013e7985ed34ddd43e062494aeb207d60d2641ddd5f4
rest-debuginfo-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: 5d98615a1dd109103ba0635ab662498e62a3658067c7bbb5fee833217a1b8e27
rest-debugsource-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: dc0badac042412a20d0e4f4878f1fddcf114e1fbad505c546cde49ae412e4ed0
rest-demo-debuginfo-0.9.1-11.el10_0.1.x86_64.rpm SHA-256: b9b63fa7fe25e6901dd689b41c67610f4418e9a574d38fe3e3cde8158bcaa432

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.