Red Hat Security AdvisoryRHSA-2026:36477
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-07-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images golang1.26-1.26.5-0.1.hum1@aarch64, golang1.26-1.26.5-0.1.hum1@src, golang1.26-1.26.5-0.1.hum1@x86_64 +10
Fixes 2 records
Priority LOW 36
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2026-07-08 · Partial fix · 1.25.12, 1.26.5 +1 CWE-61
Priority LOW 30
Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00382 · Published 2026-07-08 · Partial fix · 1.25.12, 1.26.5 +1 CWE-201
