This Red Hat security advisory covers a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically golang1.25 packages for aarch64 and x86_64 architectures. The advisory references multiple CVEs including CVE-2026-33811 and CVE-2026-39826, with associated CWEs CWE-1341 and CWE-1289. The update includes several golang1.25 RPMs at version 1.25.11-2.hum1. The advisory does not provide detailed vulnerability descriptions or CVSS scores. It is a high severity update addressing multiple vulnerabilities in the golang1.25 packages distributed by Red Hat.

The vulnerabilities addressed are considered high severity, indicating potential significant security risks if unpatched. However, no known exploits in the wild have been reported. The impact likely affects systems using the affected golang1.25 RPMs in Red Hat Hardened Images on aarch64 and x86_64 architectures. Specific impacts are not detailed in the advisory.

An update to the golang1.25 RPM packages is available from Red Hat as part of the Hardened Images RPMs update (version 1.25.11-2.hum1). Users should apply this update following Red Hat's official guidance at https://images.redhat.com/. Patch status is confirmed by the availability of this update. No additional mitigation steps are specified in the advisory.