Red Hat Security AdvisoryRHSA-2026:54401
rhc security update
Released 2026-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.6) rhc-devel-1:0.2.7-1.el9_6.5
- Red Hat Enterprise Linux AppStream EUS (v.9.6) rhc-1:0.2.7-1.el9_6.5
Fixes 2 records
Priority MEDIUM 47
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.01834 · Published 2026-05-22 · Partial fix · 1.25.13, 1.26.6 +2 CWE-1289
Priority LOW 30
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00591 · Published 2026-06-02 · Partial fix · 1.25.11, 1.26.4
