RHSA-2026:97699: Important: rhc security, bug fix, and enhancement update
rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.Security Fix(es): mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) Bug Fix(es) and Enhancement(s): rhc package uninstall/remove leaves /etc/rhc and /etc/rhc/workers directories on the hosts. (JIRA:RHEL-152311) [rhc]Installation in container raises warnings (JIRA:RHEL-138412) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/rhcto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9 - Upgrade
Upgrade
redhat/rhc-debuginfoto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9 - Upgrade
Upgrade
redhat/rhc-debugsourceto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9 - Upgrade
Upgrade
redhat/rhcto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9.aa - Upgrade
Upgrade
redhat/rhc-debuginfoto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9.aa - Upgrade
Upgrade
redhat/rhc-debugsourceto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9.aa - Upgrade
Upgrade
redhat/rhc-develto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9 - Upgrade
Upgrade
redhat/rhc-develto a version that resolves this vulnerability.Fixed in 0.2.7-15.el9_9.aa
Event History
Frequently Asked Questions
Which rhc package variants are included in this advisory?
The advisory covers redhat/rhc, redhat/rhc-debuginfo, redhat/rhc-debugsource, and redhat/rhc-devel.
Does the update address any removal-related operational issue?
Yes. It fixes an issue where uninstalling or removing rhc left the /etc/rhc and /etc/rhc/workers directories on the host.