Read the docs
Red Hat Security Advisory

RHSA-2026:65838

OpenShift Container Platform 4.13.71 packages and security update

Released 2026-09-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2025-41709 CVE-2025-68121 · GHSA-h355-32pf-p2xm

Unexpected session resumption in crypto/tls

Priority MEDIUM 51

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00902 Published 2026-02-05 Partial fix · 1.24.13, 1.25.7 +1 CWE-295
TI-2026-30782 CVE-2026-42499 · GHSA-xq5j-9r39-c3vf

Quadratic string concatenation in consumePhrase in net/mail

Priority MEDIUM 40

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00798 Published 2026-05-07 Partial fix · 1.25.10, 1.26.3
TI-2026-28702 CVE-2026-39820 · GHSA-p9h5-jm8x-mjm5

Quadratic string concatentation in consumeComment in net/mail

Priority MEDIUM 40

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00784 Published 2026-05-07 Partial fix · 1.25.10, 1.26.3 CWE-770
TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8

Go JOSE affect by a panic in JWE decryption

Priority MEDIUM 40

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00663 Published 2026-04-06 Partial fix · 4.1.4, 3.0.5 CWE-248
TI-2026-24809 CVE-2026-32280 · GHSA-m4pr-4j3g-9v7v

Unexpected work during chain building in crypto/x509

Priority MEDIUM 40

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00626 Published 2026-04-08 Partial fix · 1.25.9, 1.26.2 CWE-770
TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8

Incorrect parsing of IPv6 host literals in net/url

Priority MEDIUM 40

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00827 Published 2026-03-06 Partial fix · 1.25.8, 1.26.1 CWE-425