Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This Red Hat security advisory announces an update to Red Hat Hardened Images RPMs, specifically the golang1.26 package set, to address security issues identified by CVE-2026-94444 and CVE-2026-94447. The update includes new versions of golang1.26 and related packages for aarch64 and x86_64 architectures, as well as noarch packages. The advisory does not detail the specific vulnerability mechanics but references CWE-354, which relates to Improper Handling of Exceptional Conditions. The advisory provides links for applying the update and does not indicate any known exploits in the wild.

The vulnerabilities addressed by this update potentially affect Red Hat Hardened Images using golang1.26 RPMs. The severity is assessed as medium. There is no indication of active exploitation or specific impact scenarios in the advisory. The update mitigates the identified security issues by providing patched package versions.

A fix is available through the updated golang1.26 RPM packages listed in the advisory. Users of Red Hat Hardened Images should apply the updates as per the instructions at https://images.redhat.com/. No additional mitigation steps are indicated or required beyond applying the official update.