RHSA-2026:59549 Red Hat Security Advisory: ignition security update

Bulletin has no description...

RHSA-2026:59546 Red Hat Security Advisory: ignition security update

Bulletin has no description...

RHSA-2026:57845 Red Hat Security Advisory: Red Hat build of MicroShift 4.16.69 security update

Bulletin has no description...

RHSA-2026:57649 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2026:57456 Red Hat Security Advisory: OpenShift Container Platform 4.21.30 packages and security update

Bulletin has no description...

RHSA-2026:57361 Red Hat Security Advisory: OpenShift Container Platform 4.22.11 packages and security update

Bulletin has no description...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

RHSA-2026:49712 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2026:49702 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2026:32987 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:22121 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2026:22120 Red Hat Security Advisory: golang security update

Bulletin has no description...

RHSA-2026:22112 Red Hat Security Advisory: go-toolset:rhel8 security update

Bulletin has no description...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 packages and security update

Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

Exploits and vulnerabilities in Q2 2026

The vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of...