The vulnerability CVE-2026-16615 (CVSS 6.8) in the librest library involves weak random number generation in its PKCE implementation, which could compromise the security of RESTful web service authentication. This security update affects the `rest` package for Red Hat Enterprise Linux 10 across all supported architectures. Administrators should apply the referenced Red Hat security patch to their affected systems to remediate the issue.
Red Hat Product Errata RHSA-2026:47085 - Security Advisory Issued: 2026-07-28 Updated: 2026-07-28 RHSA-2026:47085 - Security Advisory Overview Updated Packages Synopsis Important: rest security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for rest is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The rest packages provide a library for access to the RESTful web services. Security Fix(es): librest: weak random number generation in PKCE implementation (CVE-2026-16615) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2504432 - CVE-2026-16615 librest: weak random number generation in PKCE implementation CVEs CVE-2026-16615 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b x86_64 rest-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 683b4ba2480d8403945d8ce01effaf428c02806c5680f87c7ce815bd75af28e4 rest-debuginfo-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 06b16ae4f01064b54e53b4d125d12e0eef8331fd23f07d56b9faf29d429f68df rest-debugsource-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 16d1b7080fb1ae5a9d8e651e4a94b4e6d4e635e105de0c9e14c365a1b2b3a2d3 rest-demo-debuginfo-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 9e230315fa41ffdefa3bd22c4a8a46bd3102547746f21cd75b553d541a3bcb05 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b x86_64 rest-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 683b4ba2480d8403945d8ce01effaf428c02806c5680f87c7ce815bd75af28e4 rest-debuginfo-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 06b16ae4f01064b54e53b4d125d12e0eef8331fd23f07d56b9faf29d429f68df rest-debugsource-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 16d1b7080fb1ae5a9d8e651e4a94b4e6d4e635e105de0c9e14c365a1b2b3a2d3 rest-demo-debuginfo-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 9e230315fa41ffdefa3bd22c4a8a46bd3102547746f21cd75b553d541a3bcb05 Red Hat Enterprise Linux for IBM z Systems 10 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b s390x rest-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 91753d87f42b125608b866bf998a81045d6295df9849735ac5b37d6538adb20f rest-debuginfo-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 3259378218f372497a6f17accf27d9158254bf240bd519839d9d8b9fba4abd90 rest-debugsource-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 81fc6e917597d315e83e32aa7acfab4bf9ec632d3f396a56f88e9337e6d75f1a rest-demo-debuginfo-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 75e38df4cfb169f3ff5ebb7329ae20c5f1a2ed36f37568698fd4a7313bbf14c2 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b s390x rest-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 91753d87f42b125608b866bf998a81045d6295df9849735ac5b37d6538adb20f rest-debuginfo-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 3259378218f372497a6f17accf27d9158254bf240bd519839d9d8b9fba4abd90 rest-debugsource-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 81fc6e917597d315e83e32aa7acfab4bf9ec632d3f396a56f88e9337e6d75f1a rest-demo-debuginfo-0.9.1-11.el10_2.1.s390x.rpm SHA-256: 75e38df4cfb169f3ff5ebb7329ae20c5f1a2ed36f37568698fd4a7313bbf14c2 Red Hat Enterprise Linux for Power, little endian 10 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b ppc64le rest-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: f1a16a9c384f1feee1975fc5325e2c246fcede7056ff272d31c90a9c3e198773 rest-debuginfo-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: d729be4bdb5ca32c4630e2092bf50b62d751aff68fecaf5fe3d69e6ec5233c70 rest-debugsource-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: fde51790f6c2d1dba154a263c8f0e2c06fda62a24fbbcdb5ffad7c055b772bf3 rest-demo-debuginfo-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: fd6b1d8ffa471f840354f4d86d848b8d5a131c72f78325d61797a11c2f0e1dda Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b ppc64le rest-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: f1a16a9c384f1feee1975fc5325e2c246fcede7056ff272d31c90a9c3e198773 rest-debuginfo-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: d729be4bdb5ca32c4630e2092bf50b62d751aff68fecaf5fe3d69e6ec5233c70 rest-debugsource-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: fde51790f6c2d1dba154a263c8f0e2c06fda62a24fbbcdb5ffad7c055b772bf3 rest-demo-debuginfo-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: fd6b1d8ffa471f840354f4d86d848b8d5a131c72f78325d61797a11c2f0e1dda Red Hat Enterprise Linux for ARM 64 10 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b aarch64 rest-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 8ff83c9905b9c8e62a979c02d2a17acd92154bc1b8471d463c05fc32d764d34f rest-debuginfo-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 053f2713347b00583655deb35434c9833f0076259cd751085b309be4b0681f66 rest-debugsource-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: a78fb3c910c1da3abd4bce3bc380acfd9ed66823c1cb7eb2c05ca0f207fc75bb rest-demo-debuginfo-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 17722a09fedaf23ba700167bea0fae3701265852076f9cd360cc3315ddd33b4f Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM rest-0.9.1-11.el10_2.1.src.rpm SHA-256: 99835c539f813097e4bfc0a33d99ec120feac98a815180350133b2fa88ea6c2b aarch64 rest-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 8ff83c9905b9c8e62a979c02d2a17acd92154bc1b8471d463c05fc32d764d34f rest-debuginfo-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 053f2713347b00583655deb35434c9833f0076259cd751085b309be4b0681f66 rest-debugsource-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: a78fb3c910c1da3abd4bce3bc380acfd9ed66823c1cb7eb2c05ca0f207fc75bb rest-demo-debuginfo-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 17722a09fedaf23ba700167bea0fae3701265852076f9cd360cc3315ddd33b4f Red Hat CodeReady Linux Builder for x86_64 10 SRPM x86_64 rest-debuginfo-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 06b16ae4f01064b54e53b4d125d12e0eef8331fd23f07d56b9faf29d429f68df rest-debugsource-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 16d1b7080fb1ae5a9d8e651e4a94b4e6d4e635e105de0c9e14c365a1b2b3a2d3 rest-demo-debuginfo-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 9e230315fa41ffdefa3bd22c4a8a46bd3102547746f21cd75b553d541a3bcb05 rest-devel-0.9.1-11.el10_2.1.x86_64.rpm SHA-256: 772990763552854f0cdaaf97ac5c6c1271e9cc590ee86b01ae27d31497573991 Red Hat CodeReady Linux Builder for Power, little endian 10 SRPM ppc64le rest-debuginfo-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: d729be4bdb5ca32c4630e2092bf50b62d751aff68fecaf5fe3d69e6ec5233c70 rest-debugsource-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: fde51790f6c2d1dba154a263c8f0e2c06fda62a24fbbcdb5ffad7c055b772bf3 rest-demo-debuginfo-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: fd6b1d8ffa471f840354f4d86d848b8d5a131c72f78325d61797a11c2f0e1dda rest-devel-0.9.1-11.el10_2.1.ppc64le.rpm SHA-256: 93e49db93549305c9c6ee8fb676ccc10446bdf7f910f5e846fa3cdd89c5f52ae Red Hat CodeReady Linux Builder for ARM 64 10 SRPM aarch64 rest-debuginfo-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 053f2713347b00583655deb35434c9833f0076259cd751085b309be4b0681f66 rest-debugsource-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: a78fb3c910c1da3abd4bce3bc380acfd9ed66823c1cb7eb2c05ca0f207fc75bb rest-demo-debuginfo-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 17722a09fedaf23ba700167bea0fae3701265852076f9cd360cc3315ddd33b4f rest-devel-0.9.1-11.el10_2.1.aarch64.rpm SHA-256: 218a97fc936910ee60e3b72