TI-2026-30782 CVE-2026-42499 · GHSA-xq5j-9r39-c3vf
Quadratic string concatenation in consumePhrase in net/mail
Priority MEDIUM 40
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
RHSA-2026:63636
Red Hat build of MicroShift 4.19.46 security update
Released 2026-09-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 microshift-4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9, microshift-ai-model-serving-4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9, microshift-ai-model-serving-release-info-4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9 +12
Fixes 2 records
TI-2026-26186 CVE-2026-33814
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.