Red Hat Product Errata RHSA-2026:27732 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27732 - Security Advisory Overview Updated Packages Synopsis Moderate: yggdrasil-worker-package-manager security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for yggdrasil-worker-package-manager is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that match one of the provided allow-pattern regular expressions. Security Fix(es): golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2456336 - CVE-2026-32282 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVEs CVE-2026-32282 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c x86_64 yggdrasil-worker-package-manager-0.2.3-6.el10_0.x86_64.rpm SHA-256: b9756223a573abba311a2e6ac28e3072ecf768aa29d6e3037c26665e9d2ff592 yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.x86_64.rpm SHA-256: a07ca9614c8e40594a4fd561a8368fc581942476e376166865d7d14298146c08 yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.x86_64.rpm SHA-256: 7b51dec168c11c539983995b4ea1f88ed50d25be9ea64fb280b8c0e501a3227e Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c s390x yggdrasil-worker-package-manager-0.2.3-6.el10_0.s390x.rpm SHA-256: a3fd58758f3c8df50c5eba6910ddb78c28303c9709ae3dfba69fdce49ceeecbf yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.s390x.rpm SHA-256: 1154604e139d359246770059484e82b9c81b2809d5b357c97722efb9f5feda41 yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.s390x.rpm SHA-256: 8875cba361dbd7a763d32b019f3d32cace4c9ae26618b69c143b727bb918ebef Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c ppc64le yggdrasil-worker-package-manager-0.2.3-6.el10_0.ppc64le.rpm SHA-256: 02d6e19ee3c3a31c46436d713a4e960fadc538a237c2f9f104f8a87e8f099182 yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.ppc64le.rpm SHA-256: b397fc2ba868d4a91b2e16f38cc8ed42efff2c33cd3c29490ff9bc75078aa792 yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.ppc64le.rpm SHA-256: 5fbf9547fde811ec50b5a2952c33e5a4e863b8e8e9d6820e1270772b755dcb42 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c aarch64 yggdrasil-worker-package-manager-0.2.3-6.el10_0.aarch64.rpm SHA-256: 2d537e24d8c5f2bd0959b1566aea752ce9e528de7f4e807e812214b18b5162b2 yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.aarch64.rpm SHA-256: 28a6847db2e5ade0268cedf93784077d70f64c7915d7d62ebabec048d276accc yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.aarch64.rpm SHA-256: d5c5148e7a7e83a094da4496df001303480f60e39d170642097670eb20c2e1f8 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c aarch64 yggdrasil-worker-package-manager-0.2.3-6.el10_0.aarch64.rpm SHA-256: 2d537e24d8c5f2bd0959b1566aea752ce9e528de7f4e807e812214b18b5162b2 yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.aarch64.rpm SHA-256: 28a6847db2e5ade0268cedf93784077d70f64c7915d7d62ebabec048d276accc yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.aarch64.rpm SHA-256: d5c5148e7a7e83a094da4496df001303480f60e39d170642097670eb20c2e1f8 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c s390x yggdrasil-worker-package-manager-0.2.3-6.el10_0.s390x.rpm SHA-256: a3fd58758f3c8df50c5eba6910ddb78c28303c9709ae3dfba69fdce49ceeecbf yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.s390x.rpm SHA-256: 1154604e139d359246770059484e82b9c81b2809d5b357c97722efb9f5feda41 yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.s390x.rpm SHA-256: 8875cba361dbd7a763d32b019f3d32cace4c9ae26618b69c143b727bb918ebef Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c ppc64le yggdrasil-worker-package-manager-0.2.3-6.el10_0.ppc64le.rpm SHA-256: 02d6e19ee3c3a31c46436d713a4e960fadc538a237c2f9f104f8a87e8f099182 yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.ppc64le.rpm SHA-256: b397fc2ba868d4a91b2e16f38cc8ed42efff2c33cd3c29490ff9bc75078aa792 yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.ppc64le.rpm SHA-256: 5fbf9547fde811ec50b5a2952c33e5a4e863b8e8e9d6820e1270772b755dcb42 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 SRPM yggdrasil-worker-package-manager-0.2.3-6.el10_0.src.rpm SHA-256: 0e9843c43386d546b70112b9e556a451c395e72a42235174a79264915fcd956c x86_64 yggdrasil-worker-package-manager-0.2.3-6.el10_0.x86_64.rpm SHA-256: b9756223a573abba311a2e6ac28e3072ecf768aa29d6e3037c26665e9d2ff592 yggdrasil-worker-package-manager-debuginfo-0.2.3-6.el10_0.x86_64.rpm SHA-256: a07ca9614c8e40594a4fd561a8368fc581942476e376166865d7d14298146c08 yggdrasil-worker-package-manager-debugsource-0.2.3-6.el10_0.x86_64.rpm SHA-256: 7b51dec168c11c539983995b4ea1f88ed50d25be9ea64fb280b8c0e501a3227e The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .