VDB

RHSA-2026:54549

RHSA-2026:54549 PUBLISHED CVSS 9.100000381469727 CRITICAL

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.

Risk Scores

CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hathugo-0:0.165.0-0.1.hum1@src as a component of Red Hat Hardened Images0.165.0-0.1.hum1
Red Hathugo-0:0.165.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images0.165.0-0.1.hum1
Red Hathugo-main@aarch64 as a component of Red Hat Hardened Images*
Red Hathugo-0:0.165.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images0.165.0-0.1.hum1
Red Hathugo-main@x86_64 as a component of Red Hat Hardened Images*
Red Hathugo-main@src as a component of Red Hat Hardened Images*

Timeline

  • Aug 13, 2026 CVE Published
  • Sep 30, 2026 CVE Updated
  • Sep 30, 2026 Distribution Patch
  • Sep 30, 2026 Distribution Patch
  • Sep 30, 2026 Security Advisory
  • Sep 30, 2026 Security Advisory
  • Sep 30, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›