VDB
RHSA-2026%3A12282
RHSA-2026%3A12282
PUBLISHED
CVSS 7.5 HIGH
net/url: Incorrect parsing of IPv6 host literals in net/url
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-deployer@sha256:5db949e486796824aa831027be65199f34e041c07f602ca43848ced92f516146_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-deployer@sha256:5db949e486796824aa831027be65199f34e041c07f602ca43848ced92f516146_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-console@sha256:0059bcc5702d689d40be5736b0872222231e6585a8873e7937b3faffee5cdc6c_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-console@sha256:0059bcc5702d689d40be5736b0872222231e6585a8873e7937b3faffee5cdc6c_amd64, *, registry.redhat.io/openshift4/ose-console@sha256:0059bcc5702d689d40be5736b0872222231e6585a8873e7937b3faffee5cdc6c_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:a223892726dfb8775c4cded5ddc3a58d8011b859fcb99e14176bf395c01f8f69_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:df9dbc198769ac0612b056c05e5e4e34bebc60fe2b150d126e7b5007951d2d22_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:df9dbc198769ac0612b056c05e5e4e34bebc60fe2b150d126e7b5007951d2d22_amd64 |
| Red Hat | registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:d6d93a43fe65063401165886c38eebed441c77639950e8d41e640cda98fe5f34_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:d6d93a43fe65063401165886c38eebed441c77639950e8d41e640cda98fe5f34_amd64, registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:d6d93a43fe65063401165886c38eebed441c77639950e8d41e640cda98fe5f34_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-k8s-prometheus-adapter@sha256:b6622ea295238f6701ce95f1f904579a336883750c3b22941a8cc7478b8e5da0_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-k8s-prometheus-adapter@sha256:b6622ea295238f6701ce95f1f904579a336883750c3b22941a8cc7478b8e5da0_amd64, *, registry.redhat.io/openshift4/ose-k8s-prometheus-adapter@sha256:b6622ea295238f6701ce95f1f904579a336883750c3b22941a8cc7478b8e5da0_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:dc0c1ceb92db106c56b07f6da3e7f446be33acb1520d033df3924ac73065bcba_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:dc0c1ceb92db106c56b07f6da3e7f446be33acb1520d033df3924ac73065bcba_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-operator-registry@sha256:58253e46addc4d488c523f8df98d171e3ecc86bbaf5d84f4cc55d568e3ec95f7_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-operator-registry@sha256:58253e46addc4d488c523f8df98d171e3ecc86bbaf5d84f4cc55d568e3ec95f7_amd64, registry.redhat.io/openshift4/ose-operator-registry@sha256:58253e46addc4d488c523f8df98d171e3ecc86bbaf5d84f4cc55d568e3ec95f7_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:c2928f6d727369a79f3c1b2047e5f61788f12b1809dbda5adfd1527169fc30c5_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:c2928f6d727369a79f3c1b2047e5f61788f12b1809dbda5adfd1527169fc30c5_amd64, registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:c2928f6d727369a79f3c1b2047e5f61788f12b1809dbda5adfd1527169fc30c5_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:ce62139adfbd8400cd38d6e3e1eb1eb8d37de3c765ce51b33fc45777b8e5b7ae_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:ce62139adfbd8400cd38d6e3e1eb1eb8d37de3c765ce51b33fc45777b8e5b7ae_amd64, *, registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:ce62139adfbd8400cd38d6e3e1eb1eb8d37de3c765ce51b33fc45777b8e5b7ae_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:68511930dbb8ca8a06aab80248a3151ef8338696395c7dba67f040918369bd72_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:68511930dbb8ca8a06aab80248a3151ef8338696395c7dba67f040918369bd72_amd64, registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:68511930dbb8ca8a06aab80248a3151ef8338696395c7dba67f040918369bd72_amd64, registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:68511930dbb8ca8a06aab80248a3151ef8338696395c7dba67f040918369bd72_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:7ff04d0ecbb622f1fb61cd47c0713d225c581ebbfcc8cd0e1577308058ce6828_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:7ff04d0ecbb622f1fb61cd47c0713d225c581ebbfcc8cd0e1577308058ce6828_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2d4a9ce5b2ef89b370bc1e43ae991f74238b5825ee780050b08ab47c5e543fbd_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2d4a9ce5b2ef89b370bc1e43ae991f74238b5825ee780050b08ab47c5e543fbd_amd64, *, registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2d4a9ce5b2ef89b370bc1e43ae991f74238b5825ee780050b08ab47c5e543fbd_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel8@sha256:b86a444ebf488764fe7ae5399befceac88c45ea771d8a09a6148f8457b009b85_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel8@sha256:b86a444ebf488764fe7ae5399befceac88c45ea771d8a09a6148f8457b009b85_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-container-networking-plugins-rhel8@sha256:8cd01664c53cbe177366ef8c434bf37bc65961f13a2b318454b89c6bc76fa2ad_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:d5de164c0ec31545bcfdc9c09ddd7da5e9682da050e721200b6bdb3ec88a7e20_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:d5de164c0ec31545bcfdc9c09ddd7da5e9682da050e721200b6bdb3ec88a7e20_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:d71bc2dcb5d82edd48fa437a57f0ef8ef71415f6038dd6d4a81aebe28ee5d425_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:d71bc2dcb5d82edd48fa437a57f0ef8ef71415f6038dd6d4a81aebe28ee5d425_amd64, registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:d71bc2dcb5d82edd48fa437a57f0ef8ef71415f6038dd6d4a81aebe28ee5d425_amd64, * |
| Red Hat | registry.redhat.io/openshift4/network-tools-rhel8@sha256:0c3bcae29fc35ec43200062cdc2132a532fd05ea6ab852b94c078bd021106554_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/network-tools-rhel8@sha256:0c3bcae29fc35ec43200062cdc2132a532fd05ea6ab852b94c078bd021106554_amd64, registry.redhat.io/openshift4/network-tools-rhel8@sha256:0c3bcae29fc35ec43200062cdc2132a532fd05ea6ab852b94c078bd021106554_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-kube-proxy@sha256:d40beff891cfee2b1355bb66ed994fd4b14fd4e9701386fc0d664b415cacf166_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-console-operator@sha256:4b8394bfb17147ac6f2f60b5ca1073654b6614f1a7bf96f12d235df68f850712_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-console-operator@sha256:4b8394bfb17147ac6f2f60b5ca1073654b6614f1a7bf96f12d235df68f850712_amd64, registry.redhat.io/openshift4/ose-console-operator@sha256:4b8394bfb17147ac6f2f60b5ca1073654b6614f1a7bf96f12d235df68f850712_amd64 |
…and 175 more
Timeline
- May 6, 2026 CVE Published
- May 7, 2026 Distribution Patch
- May 7, 2026 Distribution Patch
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
- Jun 11, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:12282 advisory
- https://access.redhat.com/security/cve/CVE-2025-61726 advisory
- https://access.redhat.com/security/cve/CVE-2025-61728 advisory
- https://access.redhat.com/security/cve/CVE-2025-61731 advisory
- https://access.redhat.com/security/cve/CVE-2025-61732 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-25679 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12282.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2434432 issue
- https://www.cve.org/CVERecord?id=CVE-2025-61726 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61726 advisory
- https://go.dev/cl/736712 advisory
- https://go.dev/issue/77101 advisory
- https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc advisory
- https://pkg.go.dev/vuln/GO-2026-4341 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2434431 issue
- https://www.cve.org/CVERecord?id=CVE-2025-61728 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61728 advisory
…and 40 more