Linux · Security advisory · June 24, 2026

RHSA-2026:22309: Security update for 2 packages

RHSA-2026:22309, released June 24, 2026, fixes 2 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0063
50th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
rhcRHEL 91:0.2.7-7.el9_8
rhc-develRHEL 91:0.2.7-7.el9_8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-32280 Unexpected work during chain building in crypto/x509 9.1 0.0063 None reported
High CVE-2026-32281 Inefficient policy validation in crypto/x509 9.1 0.0036 None reported
Showing 1 to 2 of 2 1