RHSA-2026:36510HighCVSS 7.8
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-39822 — os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-42505 — crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2026:36510
- externalhttps://images.redhat.com/
- externalhttps://access.redhat.com/security/cve/CVE-2026-39822
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://access.redhat.com/security/cve/CVE-2026-42505
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36510.json