RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes security update
An update is now available for Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.Security fix(es): golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering (CVE-2026-42502) golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136) golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681) golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811) golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Red Hat Lightspeed (formerly Insights) for Runtimes security update
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:54441?
The severity of RHSA-2026:54441 is classified as high, with a score of 7.
What vulnerabilities are addressed in RHSA-2026:54441?
RHSA-2026:54441 addresses Cross-Site Scripting vulnerabilities identified as CVE-2026-42502 and CVE-2026-27136.
How do I fix RHSA-2026:54441?
To fix RHSA-2026:54441, apply the latest security update for Red Hat Lightspeed as instructed in the update documentation.
Which software does RHSA-2026:54441 affect?
RHSA-2026:54441 affects Red Hat Lightspeed (formerly Insights) for Runtimes on RHEL 9.
When was RHSA-2026:54441 published?
RHSA-2026:54441 was published on August 12, 2026.