VDB
RHSA-2026:56340
RHSA-2026:56340
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ee6505e36b31ecc38b080c2e56b7b26afd3c7db9b30d17947e6bcb6cf7f0e44e_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:11caeb0f6c63f361d12e2c223aa0e1e363c79d8495a008f5b996184dfdd15d57_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:4970ca74fcbc6aaf9f64812f37e31426444d041345541d498b12a819cbe29299_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:9ffa7e5a2ed3f92a6eb30792dc878add38b41f7ce5ca03a6f1a2c8b12300070a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:527395e13fedf00d5ffa4a2c70602cab213ff9c826940a529150d6b1df4f7395_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:21c630e1de77a6e18b0b774ebfc5ccef2191fef60da0c7914d0a81d5be236ea3_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d9bc0d110bbc7b7ec8a2401f34cde12e470980086bb04fc532a9885917c06b7f_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e2a0befa5c4dbcb56ef33f46ccdb27d5e02f8f5facdbf2fa0b9c6e6dd53a476e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:902fe34ead11574878df61323db6ac53f3ad55d13d40f72b8d514ea0356e1a81_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/vector-rhel9@sha256:01853cca36a1042f42860bb89048c4a09de76b2cfac412fd78e38fd74376ca39_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:958178be4fc3798cdd531660e14514c370ac334b8a27a31a8f08db3244f17341_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:deefcb8674d1899581331ba7899baedb7f9c5355b2b3e4f11b5414b1ae58a8be_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1c687dff9904d440a9efefc95bd82ac1cf10df5c030ee8a3164621bc84e447fc_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ceb52082d9002ba1762e6653bc39b4253f05a7cd58a42c664c7a658e6133a7e8_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:de70e3309c799110feacba1b6d64bf153818e21790500da6ea75c05f276bedcd_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:c237813ec28c79232f1f8d5bb2f875157323d10ddceddf3f722cd885c3c5c4d5_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:66b2f52b2abd9e3a1fcd1ef4aa926a0f8613730918a2b7743ce61d1ce9b103c7_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:f980269a8879cd0dced67eec6e2ec9f708b347e4d49981fafccc6c795f73e4cf_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a6a946b8e424db855be70e94c1cab3e5dcf56be8b5caec8d48b3b4579310a25a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
| Red Hat | registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:18ea59f76a1ddd747712fbb3314f55cfdefb4e12a39ad9f0d22c26d25e8b04b4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5 | * |
…and 14 more
Timeline
- Aug 18, 2026 CVE Published
- Sep 30, 2026 CVE Updated
- Sep 30, 2026 Distribution Patch
- Sep 30, 2026 Distribution Patch
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
- Sep 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:56340 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-27136 advisory
- https://access.redhat.com/security/cve/CVE-2026-32281 advisory
- https://access.redhat.com/security/cve/CVE-2026-32282 advisory
- https://access.redhat.com/security/cve/CVE-2026-33811 advisory
- https://access.redhat.com/security/cve/CVE-2026-33813 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-39821 advisory
- https://access.redhat.com/security/cve/CVE-2026-42151 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-42502 advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 advisory
- https://access.redhat.com/security/cve/CVE-2026-56852 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56340.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2480761 issue
- https://www.cve.org/CVERecord?id=CVE-2026-25681 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-25681 advisory
…and 87 more