Red Hat Product Errata RHSA-2026:25999 - Security Advisory Issued: 2026-06-15 Updated: 2026-06-15 RHSA-2026:25999 - Security Advisory Overview Updated Packages Synopsis Moderate: yggdrasil-worker-package-manager security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for yggdrasil-worker-package-manager is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions. Security Fix(es): golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2456336 - CVE-2026-32282 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVEs CVE-2026-32282 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 x86_64 yggdrasil-worker-package-manager-0.2.3-7.el10_2.x86_64.rpm SHA-256: b3125424773eefd0bb249b461d91568eda7ddf5efc72ea5b02adc35625233a07 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.x86_64.rpm SHA-256: 2548b30614eb37dfb13456f1646d1121e40bce3aee7dfa28c66b4ae71b432fd2 yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.x86_64.rpm SHA-256: a6529d42a9ae9b9451eacbedc2c5c2ed123b1a276877c3263cb518918aaddbb6 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 x86_64 yggdrasil-worker-package-manager-0.2.3-7.el10_2.x86_64.rpm SHA-256: b3125424773eefd0bb249b461d91568eda7ddf5efc72ea5b02adc35625233a07 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.x86_64.rpm SHA-256: 2548b30614eb37dfb13456f1646d1121e40bce3aee7dfa28c66b4ae71b432fd2 yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.x86_64.rpm SHA-256: a6529d42a9ae9b9451eacbedc2c5c2ed123b1a276877c3263cb518918aaddbb6 Red Hat Enterprise Linux for IBM z Systems 10 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 s390x yggdrasil-worker-package-manager-0.2.3-7.el10_2.s390x.rpm SHA-256: c45c5a34e0b89cce73a7dbf75d3b6c40fd64fd023415c48205e55837001ee7f7 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.s390x.rpm SHA-256: 6f6c7a76de50ab0e803d6bc2737127044041cae9c8ac1f39f95e3af9c7bcaa6a yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.s390x.rpm SHA-256: 05aef003fc9c47090e173cad01edaa2590fc0086aff5ed9571aaa9042a458bc3 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 s390x yggdrasil-worker-package-manager-0.2.3-7.el10_2.s390x.rpm SHA-256: c45c5a34e0b89cce73a7dbf75d3b6c40fd64fd023415c48205e55837001ee7f7 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.s390x.rpm SHA-256: 6f6c7a76de50ab0e803d6bc2737127044041cae9c8ac1f39f95e3af9c7bcaa6a yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.s390x.rpm SHA-256: 05aef003fc9c47090e173cad01edaa2590fc0086aff5ed9571aaa9042a458bc3 Red Hat Enterprise Linux for Power, little endian 10 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 ppc64le yggdrasil-worker-package-manager-0.2.3-7.el10_2.ppc64le.rpm SHA-256: 7c9722b9818e545ba8c45a78d8537ee64b8fecf4a8694235d38f67655bf0db7c yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.ppc64le.rpm SHA-256: 1b6848d14ac05f7f9bf8e6e68ec0e477cce3309da3f3c5788c46e196826441ec yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.ppc64le.rpm SHA-256: e2a43e5f72c31f301e86ccc4f3e39ea127396b2036063e5ad88ecf441ac2510f Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 ppc64le yggdrasil-worker-package-manager-0.2.3-7.el10_2.ppc64le.rpm SHA-256: 7c9722b9818e545ba8c45a78d8537ee64b8fecf4a8694235d38f67655bf0db7c yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.ppc64le.rpm SHA-256: 1b6848d14ac05f7f9bf8e6e68ec0e477cce3309da3f3c5788c46e196826441ec yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.ppc64le.rpm SHA-256: e2a43e5f72c31f301e86ccc4f3e39ea127396b2036063e5ad88ecf441ac2510f Red Hat Enterprise Linux for ARM 64 10 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 aarch64 yggdrasil-worker-package-manager-0.2.3-7.el10_2.aarch64.rpm SHA-256: d8f580e2afadbc9307e581130c0eeff30ede9cca42086877b70d91a8fefac309 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.aarch64.rpm SHA-256: ca183452c28b83d21d2b6e598aa83fd8e1a55f95864b76b93cd3dc0d4aebd9bd yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.aarch64.rpm SHA-256: 3e2ba4fcaadf52e5abc4724257a666fc8b5e42f73c16eef3959911c61b682d58 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 aarch64 yggdrasil-worker-package-manager-0.2.3-7.el10_2.aarch64.rpm SHA-256: d8f580e2afadbc9307e581130c0eeff30ede9cca42086877b70d91a8fefac309 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.aarch64.rpm SHA-256: ca183452c28b83d21d2b6e598aa83fd8e1a55f95864b76b93cd3dc0d4aebd9bd yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.aarch64.rpm SHA-256: 3e2ba4fcaadf52e5abc4724257a666fc8b5e42f73c16eef3959911c61b682d58 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 aarch64 yggdrasil-worker-package-manager-0.2.3-7.el10_2.aarch64.rpm SHA-256: d8f580e2afadbc9307e581130c0eeff30ede9cca42086877b70d91a8fefac309 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.aarch64.rpm SHA-256: ca183452c28b83d21d2b6e598aa83fd8e1a55f95864b76b93cd3dc0d4aebd9bd yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.aarch64.rpm SHA-256: 3e2ba4fcaadf52e5abc4724257a666fc8b5e42f73c16eef3959911c61b682d58 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 s390x yggdrasil-worker-package-manager-0.2.3-7.el10_2.s390x.rpm SHA-256: c45c5a34e0b89cce73a7dbf75d3b6c40fd64fd023415c48205e55837001ee7f7 yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.s390x.rpm SHA-256: 6f6c7a76de50ab0e803d6bc2737127044041cae9c8ac1f39f95e3af9c7bcaa6a yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.s390x.rpm SHA-256: 05aef003fc9c47090e173cad01edaa2590fc0086aff5ed9571aaa9042a458bc3 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM yggdrasil-worker-package-manager-0.2.3-7.el10_2.src.rpm SHA-256: 4be250a8d75ce3dbb0edb8223d788478331a9c379d3228979b8041ab4ec4b436 ppc64le yggdrasil-worker-package-manager-0.2.3-7.el10_2.ppc64le.rpm SHA-256: 7c9722b9818e545ba8c45a78d8537ee64b8fecf4a8694235d38f67655bf0db7c yggdrasil-worker-package-manager-debuginfo-0.2.3-7.el10_2.ppc64le.rpm SHA-256: 1b6848d14ac05f7f9bf8e6e68ec0e477cce3309da3f3c5788c46e196826441ec yggdrasil-worker-package-manager-debugsource-0.2.3-7.el10_2.ppc64le.rpm SHA-256: e2a43e5f72c31f301e86ccc4f3e39ea127396b2036063e5ad88ecf441ac2510f Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM yggdrasil-worker-p