RHSA-2026:42048HighCVSS 8.2
Red Hat Security Advisory: Red Hat Web Terminal Operator 1.16.1 release.
🔗 CVE IDs covered (5)
📋 Description
CVE-2026-32281 — crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32282 — golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-33811 — net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-39821 — golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-42504 — mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header
🔗 References (13)
- selfhttps://access.redhat.com/errata/RHSA-2026:42048
- externalhttps://access.redhat.com/security/cve/CVE-2026-32281
- externalhttps://access.redhat.com/security/cve/CVE-2026-32282
- externalhttps://access.redhat.com/security/cve/CVE-2026-33811
- externalhttps://access.redhat.com/security/cve/CVE-2026-39821
- externalhttps://access.redhat.com/security/cve/CVE-2026-42504
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://redhat.atlassian.net/browse/WTO-411
- externalhttps://redhat.atlassian.net/browse/WTO-422
- externalhttps://redhat.atlassian.net/browse/WTO-426
- externalhttps://redhat.atlassian.net/browse/WTO-435
- externalhttps://redhat.atlassian.net/browse/WTO-451
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42048.json