VDB
RHSA-2026%3A1896
RHSA-2026%3A1896
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:27bf2a6e7e899fb487c94acb88638d6e46f151245e2ba8badcbe9ce56ca3c632_s390x as a component of Red Hat OpenShift Builds 1.6.4 | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:27bf2a6e7e899fb487c94acb88638d6e46f151245e2ba8badcbe9ce56ca3c632_s390x, registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:27bf2a6e7e899fb487c94acb88638d6e46f151245e2ba8badcbe9ce56ca3c632_s390x, registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:27bf2a6e7e899fb487c94acb88638d6e46f151245e2ba8badcbe9ce56ca3c632_s390x |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b0adf55b4cb988d3a3df00617552c772edbc337d6c5d8d3b1aa53ff4f44656fc_amd64 as a component of Red Hat OpenShift Builds 1.6.5 | *, *, * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:7bf6d9341cb8fb552dcfead668dcd7dfaab51c4ca9ec85c75d5d020b0778c66b_ppc64le as a component of Red Hat OpenShift Builds 1.6.4 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:7bf6d9341cb8fb552dcfead668dcd7dfaab51c4ca9ec85c75d5d020b0778c66b_ppc64le, *, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:7bf6d9341cb8fb552dcfead668dcd7dfaab51c4ca9ec85c75d5d020b0778c66b_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:ad4bdc1a0203da3ebb8da2ed493e6b8c1fa14754ebdd6b2a918645418d71ef63_s390x as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:ad4bdc1a0203da3ebb8da2ed493e6b8c1fa14754ebdd6b2a918645418d71ef63_s390x, registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:ad4bdc1a0203da3ebb8da2ed493e6b8c1fa14754ebdd6b2a918645418d71ef63_s390x |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:980996b221397062a18dc9d3890a2557be551aadd6cd462300dc84c1963e82bd_ppc64le as a component of Red Hat OpenShift Builds 1.6.5 | *, *, * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:19cc75d7b0faa973137a0337837a67f9c8a8b4f5a96a8519785ba00872a024db_arm64 as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:19cc75d7b0faa973137a0337837a67f9c8a8b4f5a96a8519785ba00872a024db_arm64, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:19cc75d7b0faa973137a0337837a67f9c8a8b4f5a96a8519785ba00872a024db_arm64, * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:dcc0ecbc2d27bce81f7b3ab3e406b7b7ab1c7a52d9d489c4e2ffaba310b03972_s390x as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:dcc0ecbc2d27bce81f7b3ab3e406b7b7ab1c7a52d9d489c4e2ffaba310b03972_s390x, *, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:dcc0ecbc2d27bce81f7b3ab3e406b7b7ab1c7a52d9d489c4e2ffaba310b03972_s390x |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:588547b296ff5ce40e84567ae25c143a68cfbdf636a079f358511e6e3dd71f6a_ppc64le as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:588547b296ff5ce40e84567ae25c143a68cfbdf636a079f358511e6e3dd71f6a_ppc64le, *, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:588547b296ff5ce40e84567ae25c143a68cfbdf636a079f358511e6e3dd71f6a_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:d0ad5ea494052b0ed4147426d112d50cf13104200be900e3a09808956e5f37dd_s390x as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:d0ad5ea494052b0ed4147426d112d50cf13104200be900e3a09808956e5f37dd_s390x, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:d0ad5ea494052b0ed4147426d112d50cf13104200be900e3a09808956e5f37dd_s390x |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:aac9e0e1878349cf8cf5a802889950a994ffad888bb7be52a6e6f602e7e157dc_amd64 as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:aac9e0e1878349cf8cf5a802889950a994ffad888bb7be52a6e6f602e7e157dc_amd64, registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:aac9e0e1878349cf8cf5a802889950a994ffad888bb7be52a6e6f602e7e157dc_amd64, * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:363a5878d883440579525740aafadbf2c9a91b6a9aff3cc8523c9ad3377d4515_arm64 as a component of Red Hat OpenShift Builds 1.6.4 | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9@sha256:363a5878d883440579525740aafadbf2c9a91b6a9aff3cc8523c9ad3377d4515_arm64, *, * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2dcd54268c729dc5aed1e9b25e6a7a0651e33c812f2454484b213cb45687b008_ppc64le as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2dcd54268c729dc5aed1e9b25e6a7a0651e33c812f2454484b213cb45687b008_ppc64le, registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:2dcd54268c729dc5aed1e9b25e6a7a0651e33c812f2454484b213cb45687b008_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9a57129097c5d57f437062a969523ffbe5d27345878b748d8bfc6c11886b7c3d_arm64 as a component of Red Hat OpenShift Builds 1.6.4 | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9a57129097c5d57f437062a969523ffbe5d27345878b748d8bfc6c11886b7c3d_arm64, *, registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9a57129097c5d57f437062a969523ffbe5d27345878b748d8bfc6c11886b7c3d_arm64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b0adf55b4cb988d3a3df00617552c772edbc337d6c5d8d3b1aa53ff4f44656fc_amd64 as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b0adf55b4cb988d3a3df00617552c772edbc337d6c5d8d3b1aa53ff4f44656fc_amd64, registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:b0adf55b4cb988d3a3df00617552c772edbc337d6c5d8d3b1aa53ff4f44656fc_amd64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2f700dedf81a497e1cf3372618e6bee81b224fff16f77c46031f299c8620cd4e_ppc64le as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2f700dedf81a497e1cf3372618e6bee81b224fff16f77c46031f299c8620cd4e_ppc64le, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2f700dedf81a497e1cf3372618e6bee81b224fff16f77c46031f299c8620cd4e_ppc64le, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:2f700dedf81a497e1cf3372618e6bee81b224fff16f77c46031f299c8620cd4e_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:980996b221397062a18dc9d3890a2557be551aadd6cd462300dc84c1963e82bd_ppc64le as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:980996b221397062a18dc9d3890a2557be551aadd6cd462300dc84c1963e82bd_ppc64le, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:980996b221397062a18dc9d3890a2557be551aadd6cd462300dc84c1963e82bd_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:980996b221397062a18dc9d3890a2557be551aadd6cd462300dc84c1963e82bd_ppc64le as a component of Red Hat OpenShift Builds 1.6.4 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:980996b221397062a18dc9d3890a2557be551aadd6cd462300dc84c1963e82bd_ppc64le, *, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:980996b221397062a18dc9d3890a2557be551aadd6cd462300dc84c1963e82bd_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9a57129097c5d57f437062a969523ffbe5d27345878b748d8bfc6c11886b7c3d_arm64 as a component of Red Hat OpenShift Builds 1.6.5 | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9a57129097c5d57f437062a969523ffbe5d27345878b748d8bfc6c11886b7c3d_arm64, registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9a57129097c5d57f437062a969523ffbe5d27345878b748d8bfc6c11886b7c3d_arm64, registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9@sha256:9a57129097c5d57f437062a969523ffbe5d27345878b748d8bfc6c11886b7c3d_arm64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b79b7b1d350388d4b2ca8405a8edd74c9f2b4513f582127e44bfdf29b2e3679a_s390x as a component of Red Hat OpenShift Builds 1.6.4 | *, registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b79b7b1d350388d4b2ca8405a8edd74c9f2b4513f582127e44bfdf29b2e3679a_s390x, registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b79b7b1d350388d4b2ca8405a8edd74c9f2b4513f582127e44bfdf29b2e3679a_s390x |
…and 93 more
Timeline
- Feb 4, 2026 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 5, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:1896 advisory
- https://access.redhat.com/security/cve/CVE-2025-61729 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/builds_for_red_hat_openshift/1.6 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1896.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418462 issue
- https://www.cve.org/CVERecord?id=CVE-2025-61729 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 advisory
- https://go.dev/cl/725920 advisory
- https://go.dev/issue/76445 advisory
- https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 advisory
- https://pkg.go.dev/vuln/GO-2025-4155 advisory