RHSA-2026:33524HighCVSS 8.2
Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.4.1 enhancement update
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-39821 — golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-46595 — golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:33524
- externalhttps://access.redhat.com/security/cve/CVE-2026-39821
- externalhttps://access.redhat.com/security/cve/CVE-2026-46595
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/red_hat_enterprise_linux_ai/3.4/html/release_notes/rhelai-34-stable-release-notes_release-notes
- externalhttps://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33524.json