Red Hat Product Errata RHSA-2026:60315 - Security Advisory Issued: 2026-08-26 Updated: 2026-08-26 RHSA-2026:60315 - Security Advisory Overview Updated Packages Synopsis Important: rhc security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for rhc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fix(es): golang.org/x/net/idna: golang: net/ http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821) crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2480756 - CVE-2026-39821 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing BZ - 2484207 - CVE-2026-27145 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries CVEs CVE-2026-27145 CVE-2026-39821 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef x86_64 rhc-0.2.4-9.el9_4.x86_64.rpm SHA-256: 966e37acf0462e65f2f1fef39eab605b6e6162fc83327c6810763c22ef855053 rhc-debuginfo-0.2.4-9.el9_4.x86_64.rpm SHA-256: 7774f22193d36de022a14d5db5ac80ef7e06d20863cf6ec9f68df05649903ab3 rhc-debugsource-0.2.4-9.el9_4.x86_64.rpm SHA-256: d2874489ef6e402c92a9a22ed446a7c40c8b08d94d98ec2ae88b273d51fe9f81 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef ppc64le rhc-0.2.4-9.el9_4.ppc64le.rpm SHA-256: 54a26dcc3f53787fa4fc072a8da7b6b08b253fbf004a6593d3a038cf7ff41202 rhc-debuginfo-0.2.4-9.el9_4.ppc64le.rpm SHA-256: 6f95c05b55ab51358796250616a3967aad70f354957fffd105e1a47db77751be rhc-debugsource-0.2.4-9.el9_4.ppc64le.rpm SHA-256: b88206e090e0440a918bbdb6dda3ec42089edf09b5854d97cbd4faa624280343 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef x86_64 rhc-0.2.4-9.el9_4.x86_64.rpm SHA-256: 966e37acf0462e65f2f1fef39eab605b6e6162fc83327c6810763c22ef855053 rhc-debuginfo-0.2.4-9.el9_4.x86_64.rpm SHA-256: 7774f22193d36de022a14d5db5ac80ef7e06d20863cf6ec9f68df05649903ab3 rhc-debugsource-0.2.4-9.el9_4.x86_64.rpm SHA-256: d2874489ef6e402c92a9a22ed446a7c40c8b08d94d98ec2ae88b273d51fe9f81 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef aarch64 rhc-0.2.4-9.el9_4.aarch64.rpm SHA-256: 2f88971e9bf288acb1f7adc3ceca130d20c882cf6290a63425812ee689ffe5ce rhc-debuginfo-0.2.4-9.el9_4.aarch64.rpm SHA-256: ae83a256356d12f43f7c621293fbb767211896af39bb829575a666ca34f42096 rhc-debugsource-0.2.4-9.el9_4.aarch64.rpm SHA-256: 360ac3bfa57db5f68fdaed3d1b1177c0b201dd88ea514033ab9b5688a4826edd Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef s390x rhc-0.2.4-9.el9_4.s390x.rpm SHA-256: c38d3d8bc65d20ce1928107b2ac845325396fe04a9a836ad48c7952f391bfdde rhc-debuginfo-0.2.4-9.el9_4.s390x.rpm SHA-256: ec1655f99d7c6c31ec6c1d42055b44bad78e5f895c83c7d00e58ce0fb69dac99 rhc-debugsource-0.2.4-9.el9_4.s390x.rpm SHA-256: e98ac21a3fed70d7c3d93bd77ef72997e978957f0ed266a70fe13a2f798c00b8 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef x86_64 rhc-0.2.4-9.el9_4.x86_64.rpm SHA-256: 966e37acf0462e65f2f1fef39eab605b6e6162fc83327c6810763c22ef855053 rhc-debuginfo-0.2.4-9.el9_4.x86_64.rpm SHA-256: 7774f22193d36de022a14d5db5ac80ef7e06d20863cf6ec9f68df05649903ab3 rhc-debugsource-0.2.4-9.el9_4.x86_64.rpm SHA-256: d2874489ef6e402c92a9a22ed446a7c40c8b08d94d98ec2ae88b273d51fe9f81 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef aarch64 rhc-0.2.4-9.el9_4.aarch64.rpm SHA-256: 2f88971e9bf288acb1f7adc3ceca130d20c882cf6290a63425812ee689ffe5ce rhc-debuginfo-0.2.4-9.el9_4.aarch64.rpm SHA-256: ae83a256356d12f43f7c621293fbb767211896af39bb829575a666ca34f42096 rhc-debugsource-0.2.4-9.el9_4.aarch64.rpm SHA-256: 360ac3bfa57db5f68fdaed3d1b1177c0b201dd88ea514033ab9b5688a4826edd Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef ppc64le rhc-0.2.4-9.el9_4.ppc64le.rpm SHA-256: 54a26dcc3f53787fa4fc072a8da7b6b08b253fbf004a6593d3a038cf7ff41202 rhc-debuginfo-0.2.4-9.el9_4.ppc64le.rpm SHA-256: 6f95c05b55ab51358796250616a3967aad70f354957fffd105e1a47db77751be rhc-debugsource-0.2.4-9.el9_4.ppc64le.rpm SHA-256: b88206e090e0440a918bbdb6dda3ec42089edf09b5854d97cbd4faa624280343 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 SRPM rhc-0.2.4-9.el9_4.src.rpm SHA-256: b6748b8cd0f3d4b0313fa0b229743f15683d40fbb06285d101f55681b58188ef s390x rhc-0.2.4-9.el9_4.s390x.rpm SHA-256: c38d3d8bc65d20ce1928107b2ac845325396fe04a9a836ad48c7952f391bfdde rhc-debuginfo-0.2.4-9.el9_4.s390x.rpm SHA-256: ec1655f99d7c6c31ec6c1d42055b44bad78e5f895c83c7d00e58ce0fb69dac99 rhc-debugsource-0.2.4-9.el9_4.s390x.rpm SHA-256: e98ac21a3fed70d7c3d93bd77ef72997e978957f0ed266a70fe13a2f798c00b8 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .