Red Hat Security Advisory

RHSA-2026:89760

container-tools:rhel8 security, bug fix, and enhancement update

Released 2026-10-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+25171+d379b437.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+25171+d379b437.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+25171+d379b437.s390x::container-tools:rhel8 +47

Fixes 2 records

TI-2026-69827 CVE-2026-78667 · GHSA-f4xw-m386-m277

Excessive CPU use in Go net/http when parsing Range headers

MEDIUM 40

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00663 Published 2026-10-08 Partial fix · 1.26.9, 1.27.2 CWE-770

TI-2026-78632 CVE-2026-111943

Go crypto/x509 accepts known compromised intermediate certificates

LOW 32

On most platforms, Go uses the given system root certificates.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00396 Published 2026-10-21 Partial fix · 1.26.10, 1.27.3 CWE-299