RHSA-2026:53374: Important: rhc security update
Important: rhc security update
Other sources
rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.Security Fix(es): golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/rhcto a version that resolves this vulnerability.Fixed in 0.3.2-5.el10_0 - Upgrade
Upgrade
redhat/rhc-debuginfoto a version that resolves this vulnerability.Fixed in 0.3.2-5.el10_0 - Upgrade
Upgrade
redhat/rhc-debugsourceto a version that resolves this vulnerability.Fixed in 0.3.2-5.el10_0 - Upgrade
Upgrade
redhat/rhcto a version that resolves this vulnerability.Fixed in 0.3.2-5.el10_0.aa - Upgrade
Upgrade
redhat/rhc-debuginfoto a version that resolves this vulnerability.Fixed in 0.3.2-5.el10_0.aa - Upgrade
Upgrade
redhat/rhc-debugsourceto a version that resolves this vulnerability.Fixed in 0.3.2-5.el10_0.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:53374?
The severity of RHSA-2026:53374 is rated as high (7).
How do I fix RHSA-2026:53374?
To fix RHSA-2026:53374, apply the latest security update for the rhc package provided by Red Hat.
What is the risk associated with RHSA-2026:53374?
The risk associated with RHSA-2026:53374 is rated at 33, indicating a significant potential impact.
What vulnerabilities are addressed in RHSA-2026:53374?
RHSA-2026:53374 addresses a privilege escalation vulnerability caused by incorrect Punycode label processing in golang.org/x/net/idna.
Which software versions are affected by RHSA-2026:53374?
The affected software versions include various Red Hat Enterprise Linux packages, including redhat/rhc and its associated debuginfo and debugsource packages.