RHSA-2026:49509: Important: rhc security update
Important: rhc security update
Other sources
rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.Security Fix(es): crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121) crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281) golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283) crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/rhcto a version that resolves this vulnerability.Fixed in 0.2.4-8.el9_4 - Upgrade
Upgrade
redhat/rhc-debuginfoto a version that resolves this vulnerability.Fixed in 0.2.4-8.el9_4 - Upgrade
Upgrade
redhat/rhc-debugsourceto a version that resolves this vulnerability.Fixed in 0.2.4-8.el9_4 - Upgrade
Upgrade
redhat/rhcto a version that resolves this vulnerability.Fixed in 0.2.4-8.el9_4.aa - Upgrade
Upgrade
redhat/rhc-debuginfoto a version that resolves this vulnerability.Fixed in 0.2.4-8.el9_4.aa - Upgrade
Upgrade
redhat/rhc-debugsourceto a version that resolves this vulnerability.Fixed in 0.2.4-8.el9_4.aa - Upgrade
Upgrade
rhcto a version that resolves this vulnerability.Patch rhc security update
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49509?
The severity of RHSA-2026:49509 is classified as high with a rating of 7.
How do I fix RHSA-2026:49509?
To fix RHSA-2026:49509, apply the latest security update for the rhc software as provided by Red Hat.
What vulnerabilities are addressed in RHSA-2026:49509?
RHSA-2026:49509 addresses vulnerabilities related to unexpected session resumption in crypto/tls and denial of service issues in crypto/x509.
Which Red Hat products are affected by RHSA-2026:49509?
RHSA-2026:49509 affects Red Hat RHC, Red Hat RHC debuginfo, and multiple versions of Red Hat Enterprise Linux.
When was RHSA-2026:49509 published?
RHSA-2026:49509 was published on August 3, 2026.