VDB
RHSA-2026%3A1938
RHSA-2026%3A1938
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:2fe055109b2edf1910d408acf6ac01ef24e0db1c2aecd83e858110eb235ccad9_arm64 as a component of Red Hat OpenShift Builds 1.7.2 | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:2fe055109b2edf1910d408acf6ac01ef24e0db1c2aecd83e858110eb235ccad9_arm64, *, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:2fe055109b2edf1910d408acf6ac01ef24e0db1c2aecd83e858110eb235ccad9_arm64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:b0471d2271b97ec831bdca77d583ebca0ffd14b10bb20d6ff3c38d69d5ccf573_ppc64le as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2400f72a39fa2427fcfc063b0446906a84f5eafcdf625a0d11417cb78b1cbdbf_ppc64le as a component of Red Hat OpenShift Builds 1.7.2 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2400f72a39fa2427fcfc063b0446906a84f5eafcdf625a0d11417cb78b1cbdbf_ppc64le, *, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:2400f72a39fa2427fcfc063b0446906a84f5eafcdf625a0d11417cb78b1cbdbf_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:270c8a89aeed36b4d3b274adb30c9c665e8c6ee8153b0064a09b7c385f9b8621_s390x as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel9@sha256:418d08c8d29b17aa1d75bbb0cf0df7160de721796c1ac72712708c2af9b4f2d6_ppc64le as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:5d1a89a16f5f009ff4908c3456810c757c8855afa39902d7e9cba0c4bc34ea06_ppc64le as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:25b7aae296854a42d5594b43969002a0ab3da401fe3c46ab0fd056a250830007_s390x as a component of Red Hat OpenShift Builds 1.7.1 | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:25b7aae296854a42d5594b43969002a0ab3da401fe3c46ab0fd056a250830007_s390x, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:25b7aae296854a42d5594b43969002a0ab3da401fe3c46ab0fd056a250830007_s390x, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:25b7aae296854a42d5594b43969002a0ab3da401fe3c46ab0fd056a250830007_s390x |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e36382a6869b97ccc40a9d750728d110a343330c5130e2ac5a9d510ba6104b84_s390x as a component of Red Hat OpenShift Builds 1.7.2 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e36382a6869b97ccc40a9d750728d110a343330c5130e2ac5a9d510ba6104b84_s390x, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:e36382a6869b97ccc40a9d750728d110a343330c5130e2ac5a9d510ba6104b84_s390x |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0b7357fea04ae79da416bcb41ace643795b17ba1a424f5208f4014cb946c7b96_ppc64le as a component of Red Hat OpenShift Builds 1.7.1 | *, registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0b7357fea04ae79da416bcb41ace643795b17ba1a424f5208f4014cb946c7b96_ppc64le, registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:0b7357fea04ae79da416bcb41ace643795b17ba1a424f5208f4014cb946c7b96_ppc64le |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:e68464e70c7947879aeefa73e78a797c59c7a1d9442e571849eb8b5e6e4fb41d_arm64 as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel9-operator@sha256:f33a2ff3cd1cbeb3c3404edb33314f6b59d8d3f7dda6b3b870ab9f3e545d8143_s390x as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:2fe055109b2edf1910d408acf6ac01ef24e0db1c2aecd83e858110eb235ccad9_arm64 as a component of Red Hat OpenShift Builds 1.7.1 | *, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:2fe055109b2edf1910d408acf6ac01ef24e0db1c2aecd83e858110eb235ccad9_arm64, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:2fe055109b2edf1910d408acf6ac01ef24e0db1c2aecd83e858110eb235ccad9_arm64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:9c992a428197cbbc762c72c1d46d6ecd50eb97f721062d095981d599341209e0_amd64 as a component of Red Hat OpenShift Builds 1.7.2 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:9c992a428197cbbc762c72c1d46d6ecd50eb97f721062d095981d599341209e0_amd64, *, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:9c992a428197cbbc762c72c1d46d6ecd50eb97f721062d095981d599341209e0_amd64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:25b7aae296854a42d5594b43969002a0ab3da401fe3c46ab0fd056a250830007_s390x as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a0e4fd71af27314a8459d00ced0c1295be9771e3000a4bf3aa5ab2881ae7c1a6_arm64 as a component of Red Hat OpenShift Builds 1.7.2 | *, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9@sha256:a0e4fd71af27314a8459d00ced0c1295be9771e3000a4bf3aa5ab2881ae7c1a6_arm64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:acd08505de171d725be119bd4c5c9216d836896797aab9bafa009a6b52758e97_arm64 as a component of Red Hat OpenShift Builds 1.7.2 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:acd08505de171d725be119bd4c5c9216d836896797aab9bafa009a6b52758e97_arm64, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9@sha256:acd08505de171d725be119bd4c5c9216d836896797aab9bafa009a6b52758e97_arm64 |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:ec64bb8be274454c0854dac68ddfac2cf3ab1650fd7e6cfdcda95b0f98f07b66_amd64 as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-webhook-rhel9@sha256:da6096a3652765dc0f6d36cd3a643413575f622116b7f6258df3b05eca98adb6_amd64 as a component of Red Hat OpenShift Builds 1.7.4 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:5d1a89a16f5f009ff4908c3456810c757c8855afa39902d7e9cba0c4bc34ea06_ppc64le as a component of Red Hat OpenShift Builds 1.7.1 | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:5d1a89a16f5f009ff4908c3456810c757c8855afa39902d7e9cba0c4bc34ea06_ppc64le, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9@sha256:5d1a89a16f5f009ff4908c3456810c757c8855afa39902d7e9cba0c4bc34ea06_ppc64le, * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:20c0ef9d1bb1b7cd0a1deb217ed800fba03f63e68cf355afc1700d45bc921d7e_arm64 as a component of Red Hat OpenShift Builds 1.7.1 | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel9@sha256:20c0ef9d1bb1b7cd0a1deb217ed800fba03f63e68cf355afc1700d45bc921d7e_arm64, *, * |
…and 130 more
Timeline
- Feb 4, 2026 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 25, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:1938 advisory
- https://access.redhat.com/security/cve/CVE-2025-61729 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1938.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418462 issue
- https://www.cve.org/CVERecord?id=CVE-2025-61729 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 advisory
- https://go.dev/cl/725920 advisory
- https://go.dev/issue/76445 advisory
- https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 advisory
- https://pkg.go.dev/vuln/GO-2025-4155 advisory