Red Hat Product Errata RHSA-2026:62578 - Security Advisory Issued: 2026-09-02 Updated: 2026-09-02 RHSA-2026:62578 - Security Advisory Overview Updated Packages Synopsis Important: go-fdo-server security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for go-fdo-server is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This package provides a server-side implementation of the FIDO Device Onboard (FDO) specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location. Security Fix(es): crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810) encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) net/ http: golang: Go net/ http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Fixes BZ - 2456335 - CVE-2026-33810 crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application BZ - 2515815 - CVE-2026-33818 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal BZ - 2515820 - CVE-2026-56860 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution BZ - 2515827 - CVE-2026-56853 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service BZ - 2515839 - CVE-2026-56862 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages CVEs CVE-2026-33810 CVE-2026-33818 CVE-2026-56853 CVE-2026-56860 CVE-2026-56862 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM go-fdo-server-1.0.1-2.el10_2.4.src.rpm SHA-256: d830a67e10341b66f74b07d28aace46855cca1f6288b644bfbad70fafa640120 x86_64 go-fdo-server-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 867fff6af3ce5ca485333b39d2cf3e646cb61c9ef114d4a32b307dfaee8900a2 go-fdo-server-debuginfo-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 31d249242c66e5f72c87e2b9abd19de55c439daba5369c25b0a2068050f41a91 go-fdo-server-debugsource-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: fb2d114e7eaef4acaa382b53f323a594296d054e9c4105acc0f882c4d0387c4f go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 546af8a5ac52d8a3eae5c85b671df0780109ab7a797ceba0dd5722d1820fc59e go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm SHA-256: a7220762f3049889a1eb9b483a7f9d2fb47f6e9d35e37d366ef703382e49fede go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 9a74cadcc32c6c76d27f6b5a8c3f4bcba61f4c7332ee5a18e52c92df85d46415 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM go-fdo-server-1.0.1-2.el10_2.4.src.rpm SHA-256: d830a67e10341b66f74b07d28aace46855cca1f6288b644bfbad70fafa640120 x86_64 go-fdo-server-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 867fff6af3ce5ca485333b39d2cf3e646cb61c9ef114d4a32b307dfaee8900a2 go-fdo-server-debuginfo-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 31d249242c66e5f72c87e2b9abd19de55c439daba5369c25b0a2068050f41a91 go-fdo-server-debugsource-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: fb2d114e7eaef4acaa382b53f323a594296d054e9c4105acc0f882c4d0387c4f go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 546af8a5ac52d8a3eae5c85b671df0780109ab7a797ceba0dd5722d1820fc59e go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm SHA-256: a7220762f3049889a1eb9b483a7f9d2fb47f6e9d35e37d366ef703382e49fede go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 9a74cadcc32c6c76d27f6b5a8c3f4bcba61f4c7332ee5a18e52c92df85d46415 Red Hat Enterprise Linux for ARM 64 10 SRPM go-fdo-server-1.0.1-2.el10_2.4.src.rpm SHA-256: d830a67e10341b66f74b07d28aace46855cca1f6288b644bfbad70fafa640120 aarch64 go-fdo-server-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: f483712d604dbfc4cef186349bf5b2e952441d0062533fb2467f22d888bfab5f go-fdo-server-debuginfo-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: 66ad08fa8bd0fbbdcfdd59270e089e44c39906ba2934afba1667eca7b1cb4098 go-fdo-server-debugsource-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: 10c453a4fdab23aa24ca5fb2df97435a92ddb98598cd9254c6f1dcc32e1e3fe0 go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 546af8a5ac52d8a3eae5c85b671df0780109ab7a797ceba0dd5722d1820fc59e go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm SHA-256: a7220762f3049889a1eb9b483a7f9d2fb47f6e9d35e37d366ef703382e49fede go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 9a74cadcc32c6c76d27f6b5a8c3f4bcba61f4c7332ee5a18e52c92df85d46415 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM go-fdo-server-1.0.1-2.el10_2.4.src.rpm SHA-256: d830a67e10341b66f74b07d28aace46855cca1f6288b644bfbad70fafa640120 aarch64 go-fdo-server-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: f483712d604dbfc4cef186349bf5b2e952441d0062533fb2467f22d888bfab5f go-fdo-server-debuginfo-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: 66ad08fa8bd0fbbdcfdd59270e089e44c39906ba2934afba1667eca7b1cb4098 go-fdo-server-debugsource-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: 10c453a4fdab23aa24ca5fb2df97435a92ddb98598cd9254c6f1dcc32e1e3fe0 go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 546af8a5ac52d8a3eae5c85b671df0780109ab7a797ceba0dd5722d1820fc59e go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm SHA-256: a7220762f3049889a1eb9b483a7f9d2fb47f6e9d35e37d366ef703382e49fede go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 9a74cadcc32c6c76d27f6b5a8c3f4bcba61f4c7332ee5a18e52c92df85d46415 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM go-fdo-server-1.0.1-2.el10_2.4.src.rpm SHA-256: d830a67e10341b66f74b07d28aace46855cca1f6288b644bfbad70fafa640120 aarch64 go-fdo-server-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: f483712d604dbfc4cef186349bf5b2e952441d0062533fb2467f22d888bfab5f go-fdo-server-debuginfo-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: 66ad08fa8bd0fbbdcfdd59270e089e44c39906ba2934afba1667eca7b1cb4098 go-fdo-server-debugsource-1.0.1-2.el10_2.4.aarch64.rpm SHA-256: 10c453a4fdab23aa24ca5fb2df97435a92ddb98598cd9254c6f1dcc32e1e3fe0 go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 546af8a5ac52d8a3eae5c85b671df0780109ab7a797ceba0dd5722d1820fc59e go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm SHA-256: a7220762f3049889a1eb9b483a7f9d2fb47f6e9d35e37d366ef703382e49fede go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 9a74cadcc32c6c76d27f6b5a8c3f4bcba61f4c7332ee5a18e52c92df85d46415 Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM go-fdo-server-1.0.1-2.el10_2.4.src.rpm SHA-256: d830a67e10341b66f74b07d28aace46855cca1f6288b644bfbad70fafa640120 x86_64 go-fdo-server-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 867fff6af3ce5ca485333b39d2cf3e646cb61c9ef114d4a32b307dfaee8900a2 go-fdo-server-debuginfo-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 31d249242c66e5f72c87e2b9abd19de55c439daba5369c25b0a2068050f41a91 go-fdo-server-debugsource-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: fb2d114e7eaef4acaa382b53f323a594296d054e9c4105acc0f882c4d0387c4f go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 546af8a5ac52d8a3eae5c85b671df0780109ab7a797ceba0dd5722d1820fc59e go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm SHA-256: a7220762f3049889a1eb9b483a7f9d2fb47f6e9d35e37d366ef703382e49fede go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 9a74cadcc32c6c76d27f6b5a8c3f4bcba61f4c7332ee5a18e52c92df85d46415 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 SRPM go-fdo-server-1.0.1-2.el10_2.4.src.rpm SHA-256: d830a67e10341b66f74b07d28aace46855cca1f6288b644bfbad70fafa640120 x86_64 go-fdo-server-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 867fff6af3ce5ca485333b39d2cf3e646cb61c9ef114d4a32b307dfaee8900a2 go-fdo-server-debuginfo-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: 31d249242c66e5f72c87e2b9abd19de55c439daba5369c25b0a2068050f41a91 go-fdo-server-debugsource-1.0.1-2.el10_2.4.x86_64.rpm SHA-256: fb2d114e7eaef4acaa382b53f323a594296d054e9c4105acc0f882c4d0387c4f go-fdo-server-manufacturer-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 546af8a5ac52d8a3eae5c85b671df0780109ab7a797ceba0dd5722d1820fc59e go-fdo-server-owner-1.0.1-2.el10_2.4.noarch.rpm SHA-256: a7220762f3049889a1eb9b483a7f9d2fb47f6e9d35e37d366ef703382e49fede go-fdo-server-rendezvous-1.0.1-2.el10_2.4.noarch.rpm SHA-256: 9a74cadcc32c6c76d27f6b5a8c3f4bcba61f4c7332ee5a18e52c92df85d46415 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 SRP