RHSA-2026:54836HighCVSS 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
August 14, 2026
Last Modified
August 19, 2026

🔗 CVE IDs covered (6)

CVE-2026-33818 →CVE-2026-56853 →CVE-2026-56858 →CVE-2026-56859 →CVE-2026-56860 →CVE-2026-56862 →

📋 Description

CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-56853 — net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56858 — html/template: golang: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

🎯 Affected products5

  • Red Hat Hardened Images
  • golang1-25-main@aarch64 as a component of Red Hat Hardened Images
  • golang1-25-main@noarch as a component of Red Hat Hardened Images
  • golang1-25-main@src as a component of Red Hat Hardened Images
  • golang1-25-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 References (10)