This Red Hat security advisory (RHSA-2026:23262) announces an update to Red Hat Hardened Images RPMs, specifically golang1.25 packages (version 1.25.11-2.hum1) for aarch64 and x86_64 architectures. The update addresses multiple CVEs including CVE-2026-33811 and CVE-2026-39826 among others. The CVSS vector for CVE-2026-33811 indicates network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The advisory does not explicitly state which versions are fixed or provide direct patch links, but references the updated RPM packages. The vendor advisory directs users to https://images.redhat.com/ for update application instructions. No known exploits in the wild have been reported.

The vulnerabilities addressed have a high severity with a significant impact on system availability. The CVSS vector for CVE-2026-33811 shows that an attacker can remotely cause denial of service without requiring privileges or user interaction. There is no confidentiality or integrity impact reported. No known exploits in the wild have been identified at this time.

Red Hat has released updated RPM packages for golang1.25 as part of the Hardened Images update. Users should apply these updates following the instructions at https://images.redhat.com/. Since this is an official Red Hat security advisory with updated packages available, applying the provided updates is the recommended remediation. No additional mitigation steps are indicated by the vendor advisory.