Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Customer Portal Software Security Update

published 5 months ago

Summary

Red Hat has released a security update for its customer portal software to fix a security issue. This update is important because it prevents unauthorized access to sensitive customer data. We recommend that you apply the update as soon as possible to ensure the security of your customer information.

What to do

Update redhat rhc to version 1:0.2.7-6.el9_8.
Update redhat rhc-debuginfo to version 1:0.2.7-6.el9_8.
Update redhat rhc-debugsource to version 1:0.2.7-6.el9_8.
Update redhat rhc-devel to version 1:0.2.7-6.el9_8.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:9::appstream	redhat	rhc	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	rhc-debuginfo	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	rhc-debugsource	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8
Red Hat:enterprise_linux:9::appstream	redhat	rhc-devel	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8
Red Hat:enterprise_linux:9::crb	redhat	rhc	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8
Red Hat:enterprise_linux:9::crb	redhat	rhc-debuginfo	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8
Red Hat:enterprise_linux:9::crb	redhat	rhc-debugsource	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8
Red Hat:enterprise_linux:9::crb	redhat	rhc-devel	< 1:0.2.7-6.el9_8 Fix: upgrade to 1:0.2.7-6.el9_8

Original advisory text

Red Hat Security Advisory: rhc security update

References

https://access.redhat.com/errata/RHSA-2026:19369 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2456336 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2456338 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19369.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-32282 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-32282 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-32282 Vendor Advisory
https://go.dev/cl/763761 Third Party Advisory
https://go.dev/issue/78293 Third Party Advisory
https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU Third Party Advisory
https://pkg.go.dev/vuln/GO-2026-4864 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-32283 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-32283 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-32283 Vendor Advisory
https://go.dev/cl/763767 Third Party Advisory
https://go.dev/issue/78334 Third Party Advisory
https://pkg.go.dev/vuln/GO-2026-4870 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Timeline

Published20 May 2026

Updated22 May 2026

First seen22 May 2026

Sources

RHSA-2026:19369 · OSV

Track software like this

Free during beta