Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CLEANSTART-2026-PC73667 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.89.0-r2

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ER76776 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 2.12.0-r2

Multiple security vulnerabilities affect the kubewatch package. These issues are resolved in later releases. See references for individual vulnerability details...

Fedora 43 : apptainer (2026-f8ab642466)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f8ab642466 advisory. Update to upstream 1.5.2. Also fixes CVE-2026-27145 because golang was new enough. Tenable has extracted the preceding description block directly from the...

OPENSUSE-SU-2026:20976-1 Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, secrets-store-csi-driver-provider-azure-fips, vault-csi-provider-fips, cloud-provider-aws, crossplane-provider-aws-servicediscovery-fips, crossplane-provider-aws-elbv2, spilo, gitlab-pages, kubevirt-cdi-controller,...

UBUNTU-CVE-2026-27145

x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number...