RLSA-2026:3840 Important: image-builder security update

🗓️ 21 May 2026 16:30:00Reported by GoogleType

osv🔗 osv.dev👁 16 Views

Image-builder security update fixes CVEs: x509 certificate attack, memory exhaustion in net/url, and TLS session resumption.

Reporter	Title	Published	Views	Family All 4280
RedhatCVE	CVE-2025-61726	2 Feb 202620:32	–	redhatcve
RedhatCVE	CVE-2025-61729	11 Dec 202504:50	–	redhatcve
RedhatCVE	CVE-2025-68121	12 Feb 202611:01	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.3	12 Mar 202614:43	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.9	12 Mar 202614:45	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.51 bug fix and security update	19 Mar 202602:31	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.51 security and extras update	18 Mar 202602:32	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	17 Mar 202604:01	–	redhat
RedHat Linux	golang: net/url: Memory exhaustion in query parameter parsing in net/url	17 Mar 202604:01	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	17 Mar 202604:01	–	redhat

Source	Link
errata	www.errata.rockylinux.org/RLSA-2026:3840
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

21 May 2026 17:00Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.01945