Red Hat Security AdvisoryRHSA-2026:36873
Submariner v0.20 security fixes and container updates
Released 2026-07-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/nettest-rhel9 +5
Fixes 11 records
Priority MEDIUM 51
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00902 · Published 2026-02-05 · Partial fix · 1.24.13, 1.25.7 +1 CWE-295
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02292 · Published 2026-01-28 · Partial fix · 1.24.12, 1.25.6 CWE-770
Priority MEDIUM 42
containerd is an open-source container runtime.
CVSS 4.0CRITICAL 9.4· Local · No auth · No interaction · EPSS 0.00176 · Published 2026-07-01 · Partial fix · 1.7.33, 2.0.10 +3 CWE-20
Priority MEDIUM 41
CoreDNS is a DNS server that chains plugins.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01241 · Published 2026-03-06 · Partial fix · 1.14.2 CWE-337
Priority MEDIUM 41
CoreDNS is a DNS server that chains plugins.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01194 · Published 2025-06-06 · Fixed in 1.12.2 CWE-770
Priority LOW 39
quic-go is an implementation of the QUIC protocol in Go.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00465 · Published 2025-10-10 · Partial fix · 0.49.1, 0.54.1 CWE-617
Priority LOW 36
containerd is an open-source container runtime.
CVSS 4.0HIGH 8.4· Network · Low privileges · No interaction · EPSS 0.00353 · Published 2026-07-01 · Partial fix · 2.1.9, 2.2.5 +1 CWE-20
Priority LOW 36
CoreDNS is a DNS server that chains plugins.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00494 · Published 2026-01-08 · Partial fix · 1.14.0 CWE-770
Priority LOW 34
CoreDNS is a DNS server that chains plugins.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.0042 · Published 2026-03-06 · Partial fix · 1.14.2 CWE-367
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-12-02 · Partial fix · 1.24.11, 1.25.5 CWE-295
Priority LOW 29
Billy is an interface filesystem abstraction for Go.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00389 · Published 2026-06-01 · Partial fix · 5.9.0, 6.0.0-alpha.1 CWE-674
THREATIST.IORead the docs