TI-2026-26183 CVE-2026-33811 · GHSA-497x-jcxf-m478
Crash when handling long CNAME response in net
Priority MEDIUM 40
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
RHSA-2026:38504
container-tools:rhel8 security update
Released 2026-07-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+24510+6ea3880e.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24510+6ea3880e.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+24510+6ea3880e.s390x::container-tools:rhel8 +47
Fixes 3 records
TI-2026-41169 CVE-2026-57231 · GHSA-4hq8-gpf5-8p68
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
Priority LOW 33
Podman is a tool for managing OCI containers and pods.
TI-2026-28717 CVE-2026-39835 · GHSA-78mq-xcr3-xm33
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Priority LOW 25
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate.