Red Hat RHSA-2026:47085 Security Advisory: CVE-2026-16615 Weak RNG in PKCE

Vulnerability Overview Vulnerability ID: RHSA-2026:47085 Release Date: 2026-07-28 Update Date: 2026-07-28 Vulnerability Type: Security Update Description: This vulnerability involves a weak random number generation issue in the PKCE implementation (CVE-2026-16615). Affected Products Affected Products: - Red Hat Enterprise Linux for x86_64 10 - Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 - Red Hat Enterprise Linux for IBM z Systems 10 - Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 - Red Hat Enterprise Linux for Power, little endian - Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 - Red Hat Enterprise Linux for ARM 64 - Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 - Red Hat CodeReady Linux Builder for x86_64 - Red Hat CodeReady Linux Builder for Power, little endian - Red Hat CodeReady Linux Builder for ARM 64 - Red Hat CodeReady Linux Builder for IBM z Systems 10 - Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 Remediation Remediation: Apply security updates for the products listed above. Detailed Steps: Visit https://access.redhat.com/articles/11258 for detailed update guidelines. Vulnerability Details CVE ID: CVE-2026-16615 Description: There is an issue with weak random number generation in the PKCE implementation. References Red Hat Security Updates Specific Affected Packages Red Hat Enterprise Linux for x86_64 10: - - - - - Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2: - - - - - Red Hat Enterprise Linux for IBM z Systems 10: - - - - - Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2: - - - - - Red Hat Enterprise Linux for Power, little endian: - - - - - Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2: - - - - - Red Hat Enterprise Linux for ARM 64: - - - - - Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2: - - - - - Red Hat CodeReady Linux Builder for x86_64: - - - - Red Hat CodeReady Linux Builder for Power, little endian: - - - - Red Hat CodeReady Linux Builder for ARM 64: - - - - Red Hat CodeReady Linux Builder for IBM z Systems 10: - - - - Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2: - - - - Summary This security update covers multiple Red Hat products and primarily addresses a weak random number generation issue in the PKCE implementation. Users are advised to apply security updates for the relevant products as soon as possible to remediate this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat RHSA-2026:47085 Security Advisory: CVE-2026-16615 Weak RNG in PKCE

More from this source