A denial-of-service vulnerability (CVE-2026-32280, CVSS 7.5 HIGH) exists in the Go programming language's crypto/x509 and crypto/tls packages due to an issue in certificate chain building. The vulnerability affects Go versions prior to 1.25.9 and versions 1.26.0 through 1.26.1, and is fixed in Go versions 1.25.9 and 1.26.2. The Red Hat `rhc` client tool for Red Hat Enterprise Linux 10 is impacted by this upstream Go vulnerability, requiring an update to the patched `rhc` package.
Red Hat Product Errata RHSA-2026:22130 - Security Advisory Issued: 2026-06-01 Updated: 2026-06-01 RHSA-2026:22130 - Security Advisory Overview Updated Packages Synopsis Important: rhc security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for rhc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fix(es): crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2456339 - CVE-2026-32280 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building CVEs CVE-2026-32280 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 x86_64 rhc-0.3.8-5.el10_2.x86_64.rpm SHA-256: 17af86b3e40f361a92ae7606d60a6e353e7cbf0f1af233e9e8a3bad7a9dd1e6f rhc-debuginfo-0.3.8-5.el10_2.x86_64.rpm SHA-256: 0dd8da011a1eaab858cf8f3f6424f6cd3ce7b9356d3270353c56535cab2c8d73 rhc-debugsource-0.3.8-5.el10_2.x86_64.rpm SHA-256: e7114c239e22fe4cf450a8b9d6d9c2840f51ac848cc97cc1868b26a3e0bd6581 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 x86_64 rhc-0.3.8-5.el10_2.x86_64.rpm SHA-256: 17af86b3e40f361a92ae7606d60a6e353e7cbf0f1af233e9e8a3bad7a9dd1e6f rhc-debuginfo-0.3.8-5.el10_2.x86_64.rpm SHA-256: 0dd8da011a1eaab858cf8f3f6424f6cd3ce7b9356d3270353c56535cab2c8d73 rhc-debugsource-0.3.8-5.el10_2.x86_64.rpm SHA-256: e7114c239e22fe4cf450a8b9d6d9c2840f51ac848cc97cc1868b26a3e0bd6581 Red Hat Enterprise Linux for IBM z Systems 10 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 s390x rhc-0.3.8-5.el10_2.s390x.rpm SHA-256: 9e19c9577946223e8e48bc63537dd3db05a69afde2b5d945fd316b7b81e24139 rhc-debuginfo-0.3.8-5.el10_2.s390x.rpm SHA-256: 749d185af04192eb6e807bf1df87e8ac2852d1c8bd78d9f03c84563f26ed57c2 rhc-debugsource-0.3.8-5.el10_2.s390x.rpm SHA-256: ecfb2aa63d3e2ed1fd62c8f414d60980f0628bf98c6c2aae7ee576eaf07d9f20 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 s390x rhc-0.3.8-5.el10_2.s390x.rpm SHA-256: 9e19c9577946223e8e48bc63537dd3db05a69afde2b5d945fd316b7b81e24139 rhc-debuginfo-0.3.8-5.el10_2.s390x.rpm SHA-256: 749d185af04192eb6e807bf1df87e8ac2852d1c8bd78d9f03c84563f26ed57c2 rhc-debugsource-0.3.8-5.el10_2.s390x.rpm SHA-256: ecfb2aa63d3e2ed1fd62c8f414d60980f0628bf98c6c2aae7ee576eaf07d9f20 Red Hat Enterprise Linux for Power, little endian 10 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 ppc64le rhc-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 00de92f2ecfd6a61374f5b1fdd94e2d1b96aca9d0ac44c641efcc2722a38dc07 rhc-debuginfo-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 623346621160d349ee2ed2a07dbf3b1291b2d8c5d0482fc5a207b5ca980c2f0b rhc-debugsource-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 9fdf97d87a7f98923fef9daab64cf829e6c51bd652450e818f47c5d9ff2882fc Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 ppc64le rhc-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 00de92f2ecfd6a61374f5b1fdd94e2d1b96aca9d0ac44c641efcc2722a38dc07 rhc-debuginfo-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 623346621160d349ee2ed2a07dbf3b1291b2d8c5d0482fc5a207b5ca980c2f0b rhc-debugsource-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 9fdf97d87a7f98923fef9daab64cf829e6c51bd652450e818f47c5d9ff2882fc Red Hat Enterprise Linux for ARM 64 10 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 aarch64 rhc-0.3.8-5.el10_2.aarch64.rpm SHA-256: 632142c80f319cbc608b31a87d628c83ae5087dde2d9f2459785fff0e4e44f8b rhc-debuginfo-0.3.8-5.el10_2.aarch64.rpm SHA-256: 247e3d8d1e7410b64973d7a177b287119bdc27a86ba2cca309b9578cc6aedcbd rhc-debugsource-0.3.8-5.el10_2.aarch64.rpm SHA-256: 748456d939a0f5e31aa4ce6ef5d19be7222a6bd364ac88474554aa4cdaf7ab08 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 aarch64 rhc-0.3.8-5.el10_2.aarch64.rpm SHA-256: 632142c80f319cbc608b31a87d628c83ae5087dde2d9f2459785fff0e4e44f8b rhc-debuginfo-0.3.8-5.el10_2.aarch64.rpm SHA-256: 247e3d8d1e7410b64973d7a177b287119bdc27a86ba2cca309b9578cc6aedcbd rhc-debugsource-0.3.8-5.el10_2.aarch64.rpm SHA-256: 748456d939a0f5e31aa4ce6ef5d19be7222a6bd364ac88474554aa4cdaf7ab08 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 aarch64 rhc-0.3.8-5.el10_2.aarch64.rpm SHA-256: 632142c80f319cbc608b31a87d628c83ae5087dde2d9f2459785fff0e4e44f8b rhc-debuginfo-0.3.8-5.el10_2.aarch64.rpm SHA-256: 247e3d8d1e7410b64973d7a177b287119bdc27a86ba2cca309b9578cc6aedcbd rhc-debugsource-0.3.8-5.el10_2.aarch64.rpm SHA-256: 748456d939a0f5e31aa4ce6ef5d19be7222a6bd364ac88474554aa4cdaf7ab08 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 s390x rhc-0.3.8-5.el10_2.s390x.rpm SHA-256: 9e19c9577946223e8e48bc63537dd3db05a69afde2b5d945fd316b7b81e24139 rhc-debuginfo-0.3.8-5.el10_2.s390x.rpm SHA-256: 749d185af04192eb6e807bf1df87e8ac2852d1c8bd78d9f03c84563f26ed57c2 rhc-debugsource-0.3.8-5.el10_2.s390x.rpm SHA-256: ecfb2aa63d3e2ed1fd62c8f414d60980f0628bf98c6c2aae7ee576eaf07d9f20 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 ppc64le rhc-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 00de92f2ecfd6a61374f5b1fdd94e2d1b96aca9d0ac44c641efcc2722a38dc07 rhc-debuginfo-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 623346621160d349ee2ed2a07dbf3b1291b2d8c5d0482fc5a207b5ca980c2f0b rhc-debugsource-0.3.8-5.el10_2.ppc64le.rpm SHA-256: 9fdf97d87a7f98923fef9daab64cf829e6c51bd652450e818f47c5d9ff2882fc Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 x86_64 rhc-0.3.8-5.el10_2.x86_64.rpm SHA-256: 17af86b3e40f361a92ae7606d60a6e353e7cbf0f1af233e9e8a3bad7a9dd1e6f rhc-debuginfo-0.3.8-5.el10_2.x86_64.rpm SHA-256: 0dd8da011a1eaab858cf8f3f6424f6cd3ce7b9356d3270353c56535cab2c8d73 rhc-debugsource-0.3.8-5.el10_2.x86_64.rpm SHA-256: e7114c239e22fe4cf450a8b9d6d9c2840f51ac848cc97cc1868b26a3e0bd6581 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 x86_64 rhc-0.3.8-5.el10_2.x86_64.rpm SHA-256: 17af86b3e40f361a92ae7606d60a6e353e7cbf0f1af233e9e8a3bad7a9dd1e6f rhc-debuginfo-0.3.8-5.el10_2.x86_64.rpm SHA-256: 0dd8da011a1eaab858cf8f3f6424f6cd3ce7b9356d3270353c56535cab2c8d73 rhc-debugsource-0.3.8-5.el10_2.x86_64.rpm SHA-256: e7114c239e22fe4cf450a8b9d6d9c2840f51ac848cc97cc1868b26a3e0bd6581 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 SRPM rhc-0.3.8-5.el10_2.src.rpm SHA-256: 1c7c53c38d5e3db9bd2eb8a96132c3b03fbedf5f947a1abba695c45a7b4b6a12 aarch64 rhc-0.3.8-5.el10_2.aarch64.rpm SHA-256: 632142c80f319cbc608b31a87d628c83ae5087dde2d9f2459785fff0e4e44f8b rhc-debuginfo-0.3.8-5.el10_2.aarch64.rpm SHA-256: 247e3d8d1e7410b64973d7a177b287119bdc27a86ba2cca309b9578cc6aedcbd rhc-debugsource-0.3.8-5.el10_2.aarch64.rpm SHA-256: 748456d939a0f5e31aa4ce6ef5d19be7222a6bd364ac88474554aa4cdaf7ab08 Red Hat Enterprise Linux for Power, little endian - Extended Life