VDB
RHSA-2026:89131
RHSA-2026:89131
PUBLISHED
CVSS 6.800000190734863 MEDIUM
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:1c17a5b8dcd0f6b4e15739081c94d12f0c53768805b09d73a5ea5bd559a1fede_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10@sha256:749afbd994db8b75a0e3bb50982a597b2da94e2dc10c2014715ccb49ddf7154c_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:0b7b0906619eabc1ac3a161e5762ec11684086ec9a7915bda1a8dfc6863ad9f9_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:c850f527fec1a7216018e8fdabe6b9d9e9964d61a713f15c828dd8d1f89a3d7a_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | Red Hat OpenShift Builds | |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-operator-bundle@sha256:029d766c4d9f339659da8b20644df820cf3e4ee61cc618adf3735138945c77ec_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:5b80425db95d99298fb5fdea03e3ef79efd4d9d925ef8a644cc5f8a7abe48843_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:1f8f7e8416de4f14810c18ede8f96486457062a9323d465a439cbf27ffaadd57_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-rhel10@sha256:fc27c2ae87fbc55217886fc61ec74b8ea9ca7e9623d7889229391e371e7dcaa4_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:4db4f485f670768f43f68f70bbb27d1b2700b50524a9184a0c82f077ec7a6d4f_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a1dedecf6558d8555d934cf6490153a01927ef40341254efb6c1e9a9b7f50e95_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:fde178513f2675c124141e159e07544cd808cd3b7df597c9bad45630c54e553d_ppc64le as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:a9ab23e52fe82ee888461eb632e3003696603f2ae2d9c106eb5c61e3d8e8225b_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel10@sha256:e2376bab4746300665bedd93e6f96116d4885cc73ab8aab78adbba64a83a5eb8_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10@sha256:f0c1290d70b77a3b7bc83b183abb870438b564bcb4f0597a215d2487d691f4c9_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:b450a0b7fae15cc775527d2bf5ae7058a3a0d298832297e7856180466d11e466_amd64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel10@sha256:6f0d07bf9d18d5569a167140c5d72557e8bd11ee6419f4449dad24a9c084abbe_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10@sha256:bb0b42eb07ef9c8e1a1e45d6cd2821718be104dae1ef839d5d5f526fc881d87e_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-image-processing-rhel10@sha256:3c6347cb8f716d7f5a8817fd42f5c1b226f26c2d7198790886d03585dcf57979_s390x as a component of Red Hat OpenShift Builds 1.9.2 | * |
| Red Hat | registry.redhat.io/openshift-builds/openshift-builds-rhel10-operator@sha256:35b3ebc5c1228b2da2813b5fb57a2e6ef6daa60ff7fd6c2dddd62cb5f68a5e3e_arm64 as a component of Red Hat OpenShift Builds 1.9.2 | * |
…and 18 more
Timeline
- Oct 24, 2026 CVE Published
- Nov 1, 2026 CVE Updated
- Nov 1, 2026 Distribution Patch
- Nov 1, 2026 Distribution Patch
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
- Nov 1, 2026 Security Advisory
References
- https://access.redhat.com/security/cve/CVE-2026-78669 advisory
- https://access.redhat.com/security/cve/CVE-2026-84304 advisory
- https://access.redhat.com/security/cve/CVE-2026-84445 advisory
- https://access.redhat.com/security/cve/CVE-2026-97031 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://access.redhat.com/errata/RHSA-2026:89131 advisory
- https://access.redhat.com/security/cve/CVE-2026-111943 advisory
- https://access.redhat.com/security/cve/CVE-2026-114406 advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 advisory
- https://access.redhat.com/security/cve/CVE-2026-39821 advisory
- https://access.redhat.com/security/cve/CVE-2026-40161 advisory
- https://access.redhat.com/security/cve/CVE-2026-40938 advisory
- https://access.redhat.com/security/cve/CVE-2026-46600 advisory
- https://access.redhat.com/security/cve/CVE-2026-56851 advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 advisory
- https://access.redhat.com/security/cve/CVE-2026-78667 advisory
…and 121 more