THREATIST.IORead the docs Red Hat Web Terminal Operator 1.16.1 release.
Released 2026-07-20 · Red Hat rating Important · View on Red Hat →
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.