Red Hat Product Errata RHSA-2026:63127 - Security Advisory Issued: 2026-09-03 Updated: 2026-09-03 RHSA-2026:63127 - Security Advisory Overview Updated Packages Synopsis Important: rhc security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for rhc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fix(es): encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2515815 - CVE-2026-33818 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal BZ - 2515820 - CVE-2026-56860 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution BZ - 2515839 - CVE-2026-56862 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages CVEs CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 x86_64 rhc-0.3.8-7.el10_2.x86_64.rpm SHA-256: 59d23b01b89f8dd0c629f5f4d54d006f5ab656f5e48cf4c4729f2fa7e322dc66 rhc-debuginfo-0.3.8-7.el10_2.x86_64.rpm SHA-256: ee865680dc1779b980aab4890200c61dbe2d6802edbe1bd77edb292768532330 rhc-debugsource-0.3.8-7.el10_2.x86_64.rpm SHA-256: 409fa3c59d438eda9c069d6b8286f52c5854c9a62b9d40ea52559815fc1fd62a Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 x86_64 rhc-0.3.8-7.el10_2.x86_64.rpm SHA-256: 59d23b01b89f8dd0c629f5f4d54d006f5ab656f5e48cf4c4729f2fa7e322dc66 rhc-debuginfo-0.3.8-7.el10_2.x86_64.rpm SHA-256: ee865680dc1779b980aab4890200c61dbe2d6802edbe1bd77edb292768532330 rhc-debugsource-0.3.8-7.el10_2.x86_64.rpm SHA-256: 409fa3c59d438eda9c069d6b8286f52c5854c9a62b9d40ea52559815fc1fd62a Red Hat Enterprise Linux for IBM z Systems 10 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 s390x rhc-0.3.8-7.el10_2.s390x.rpm SHA-256: 0a987578f43af397711e10d7d5866b69e021d3b6dcc972e0634d102f8f2e9f90 rhc-debuginfo-0.3.8-7.el10_2.s390x.rpm SHA-256: 279efa66ce922a41c7225e3d4aebe359bec35c433d932bcf6efcc2d075c9995e rhc-debugsource-0.3.8-7.el10_2.s390x.rpm SHA-256: 1e2fd7fc9f886df7397ba3b8b4259970eef88ae19fcf21099b60294dfd9626d9 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 s390x rhc-0.3.8-7.el10_2.s390x.rpm SHA-256: 0a987578f43af397711e10d7d5866b69e021d3b6dcc972e0634d102f8f2e9f90 rhc-debuginfo-0.3.8-7.el10_2.s390x.rpm SHA-256: 279efa66ce922a41c7225e3d4aebe359bec35c433d932bcf6efcc2d075c9995e rhc-debugsource-0.3.8-7.el10_2.s390x.rpm SHA-256: 1e2fd7fc9f886df7397ba3b8b4259970eef88ae19fcf21099b60294dfd9626d9 Red Hat Enterprise Linux for Power, little endian 10 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 ppc64le rhc-0.3.8-7.el10_2.ppc64le.rpm SHA-256: ef85870d461c8f19f3726ddf1e50b4c80332c280f33db2a6f717adcae56e7556 rhc-debuginfo-0.3.8-7.el10_2.ppc64le.rpm SHA-256: e991becbee535051bbaa9ad705aafc575a4477c216533156ff3c0c1c4c360d5b rhc-debugsource-0.3.8-7.el10_2.ppc64le.rpm SHA-256: f093447d38f906649475870316742ffec970cd9ce0404347fbd50a885829f44b Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 ppc64le rhc-0.3.8-7.el10_2.ppc64le.rpm SHA-256: ef85870d461c8f19f3726ddf1e50b4c80332c280f33db2a6f717adcae56e7556 rhc-debuginfo-0.3.8-7.el10_2.ppc64le.rpm SHA-256: e991becbee535051bbaa9ad705aafc575a4477c216533156ff3c0c1c4c360d5b rhc-debugsource-0.3.8-7.el10_2.ppc64le.rpm SHA-256: f093447d38f906649475870316742ffec970cd9ce0404347fbd50a885829f44b Red Hat Enterprise Linux for ARM 64 10 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 aarch64 rhc-0.3.8-7.el10_2.aarch64.rpm SHA-256: 67b1c6e6a87ef6de2d1d82dac9d64610f4d90e01e9690ca1163e54ca3feece02 rhc-debuginfo-0.3.8-7.el10_2.aarch64.rpm SHA-256: 7f3852bd7f3c67cc8202fb042eeb75b2322e06cf38b502ec07822dc326dc52b2 rhc-debugsource-0.3.8-7.el10_2.aarch64.rpm SHA-256: 18d7ab1b5d71f995169489f25d6d8f612e76ed5d4846a04f1433ff984e01bbfe Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 aarch64 rhc-0.3.8-7.el10_2.aarch64.rpm SHA-256: 67b1c6e6a87ef6de2d1d82dac9d64610f4d90e01e9690ca1163e54ca3feece02 rhc-debuginfo-0.3.8-7.el10_2.aarch64.rpm SHA-256: 7f3852bd7f3c67cc8202fb042eeb75b2322e06cf38b502ec07822dc326dc52b2 rhc-debugsource-0.3.8-7.el10_2.aarch64.rpm SHA-256: 18d7ab1b5d71f995169489f25d6d8f612e76ed5d4846a04f1433ff984e01bbfe Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 aarch64 rhc-0.3.8-7.el10_2.aarch64.rpm SHA-256: 67b1c6e6a87ef6de2d1d82dac9d64610f4d90e01e9690ca1163e54ca3feece02 rhc-debuginfo-0.3.8-7.el10_2.aarch64.rpm SHA-256: 7f3852bd7f3c67cc8202fb042eeb75b2322e06cf38b502ec07822dc326dc52b2 rhc-debugsource-0.3.8-7.el10_2.aarch64.rpm SHA-256: 18d7ab1b5d71f995169489f25d6d8f612e76ed5d4846a04f1433ff984e01bbfe Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 s390x rhc-0.3.8-7.el10_2.s390x.rpm SHA-256: 0a987578f43af397711e10d7d5866b69e021d3b6dcc972e0634d102f8f2e9f90 rhc-debuginfo-0.3.8-7.el10_2.s390x.rpm SHA-256: 279efa66ce922a41c7225e3d4aebe359bec35c433d932bcf6efcc2d075c9995e rhc-debugsource-0.3.8-7.el10_2.s390x.rpm SHA-256: 1e2fd7fc9f886df7397ba3b8b4259970eef88ae19fcf21099b60294dfd9626d9 Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 ppc64le rhc-0.3.8-7.el10_2.ppc64le.rpm SHA-256: ef85870d461c8f19f3726ddf1e50b4c80332c280f33db2a6f717adcae56e7556 rhc-debuginfo-0.3.8-7.el10_2.ppc64le.rpm SHA-256: e991becbee535051bbaa9ad705aafc575a4477c216533156ff3c0c1c4c360d5b rhc-debugsource-0.3.8-7.el10_2.ppc64le.rpm SHA-256: f093447d38f906649475870316742ffec970cd9ce0404347fbd50a885829f44b Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 x86_64 rhc-0.3.8-7.el10_2.x86_64.rpm SHA-256: 59d23b01b89f8dd0c629f5f4d54d006f5ab656f5e48cf4c4729f2fa7e322dc66 rhc-debuginfo-0.3.8-7.el10_2.x86_64.rpm SHA-256: ee865680dc1779b980aab4890200c61dbe2d6802edbe1bd77edb292768532330 rhc-debugsource-0.3.8-7.el10_2.x86_64.rpm SHA-256: 409fa3c59d438eda9c069d6b8286f52c5854c9a62b9d40ea52559815fc1fd62a Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 SRPM rhc-0.3.8-7.el10_2.src.rpm SHA-256: 8e6b1a080c50fbd4c2263c2562a3db12d4d51e7fb760202c75c321f5006a7ba1 x86_64 rhc-0.3.8-7.el10_2.x86_64.rpm SHA-256: 59d23b01b89f8dd0c629f5f4d54d006f5ab656f5e48cf4c4729f2fa7e322dc66 rhc-debuginfo-0.3.8-7.el10_2.x86_64.rpm SHA-256: ee865680dc1779b980aab4890200c61dbe2d6802edbe1bd77edb292768532330 rhc-debugsource-0.3.8-7.el10_2.x86_64.rpm SHA-256: 409fa3c59d438eda9c069d6b8286f52c5854c9a62b9d40ea52559815fc1fd62a Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 SRPM rhc-0.3.8-7.el10_2.