TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4
Memory exhaustion in query parameter parsing in net/url
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
RHSA-2026:5853
osbuild-composer security update
Released 2026-03-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-6.el8_6, osbuild-composer-core-46.3-6.el8_6, osbuild-composer-dnf-json-46.3-6.el8_6 +1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) osbuild-composer-46.3-6.el8_6, osbuild-composer-core-46.3-6.el8_6, osbuild-composer-dnf-json-46.3-6.el8_6 +1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) osbuild-composer-46.3-6.el8_6, osbuild-composer-core-46.3-6.el8_6, osbuild-composer-dnf-json-46.3-6.el8_6 +1
Fixes 2 records
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.