2467820 – (CVE-2026-39820) CVE-2026-39820 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

Bug 2467820 (CVE-2026-39820) - CVE-2026-39820 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

Summary: CVE-2026-39820 net/mail: golang: Go net/mail: Denial of Service via crafted e...

Keywords:
Status:	NEW
Alias:	CVE-2026-39820
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2026-05-07 20:01 UTC by OSIDB Bzimport
Modified:	2026-09-03 12:17 UTC (History)
CC List:	153 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2026:22112	None	None	None	2026-06-01 01:04:33 UTC
Red Hat Product Errata	RHSA-2026:22120	None	None	None	2026-06-01 00:44:01 UTC
Red Hat Product Errata	RHSA-2026:22121	None	None	None	2026-06-01 01:00:44 UTC
Red Hat Product Errata	RHSA-2026:49702	None	None	None	2026-08-03 15:59:22 UTC
Red Hat Product Errata	RHSA-2026:49712	None	None	None	2026-08-03 17:33:54 UTC
Red Hat Product Errata	RHSA-2026:54552	None	None	None	2026-08-19 15:34:56 UTC
Red Hat Product Errata	RHSA-2026:54883	None	None	None	2026-08-19 13:42:21 UTC
Red Hat Product Errata	RHSA-2026:56852	None	None	None	2026-08-26 15:18:05 UTC
Red Hat Product Errata	RHSA-2026:57401	None	None	None	2026-08-26 15:27:16 UTC
Red Hat Product Errata	RHSA-2026:57482	None	None	None	2026-08-26 15:16:12 UTC
Red Hat Product Errata	RHSA-2026:57649	None	None	None	2026-08-20 18:48:21 UTC
Red Hat Product Errata	RHSA-2026:57845	None	None	None	2026-08-26 00:21:05 UTC
Red Hat Product Errata	RHSA-2026:57914	None	None	None	2026-08-26 10:47:56 UTC
Red Hat Product Errata	RHSA-2026:59830	None	None	None	2026-09-03 12:17:09 UTC
Red Hat Product Errata	RHSA-2026:60018	None	None	None	2026-09-03 09:05:43 UTC
Red Hat Product Errata	RHSA-2026:61253	None	None	None	2026-08-31 04:07:29 UTC
Red Hat Product Errata	RHSA-2026:62406	None	None	None	2026-09-02 07:10:09 UTC
Red Hat Product Errata	RHSA-2026:62407	None	None	None	2026-09-02 06:46:14 UTC
Red Hat Product Errata	RHSA-2026:62753	None	None	None	2026-09-02 16:55:51 UTC
Red Hat Product Errata	RHSA-2026:62754	None	None	None	2026-09-02 16:39:26 UTC
Red Hat Product Errata	RHSA-2026:62803	None	None	None	2026-09-02 19:13:33 UTC
Red Hat Product Errata	RHSA-2026:63022	None	None	None	2026-09-03 05:31:24 UTC

Description OSIDB Bzimport 2026-05-07 20:01:51 UTC

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

Comment 2 errata-xmlrpc 2026-06-01 00:43:55 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:22120 https://access.redhat.com/errata/RHSA-2026:22120

Comment 3 errata-xmlrpc 2026-06-01 01:00:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:22121 https://access.redhat.com/errata/RHSA-2026:22121

Comment 4 errata-xmlrpc 2026-06-01 01:04:26 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:22112 https://access.redhat.com/errata/RHSA-2026:22112

Comment 5 errata-xmlrpc 2026-08-03 15:59:15 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:49702 https://access.redhat.com/errata/RHSA-2026:49702

Comment 6 errata-xmlrpc 2026-08-03 17:33:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:49712 https://access.redhat.com/errata/RHSA-2026:49712

Comment 8 errata-xmlrpc 2026-08-19 13:42:13 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:54883 https://access.redhat.com/errata/RHSA-2026:54883

Comment 9 errata-xmlrpc 2026-08-19 15:34:48 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:54552 https://access.redhat.com/errata/RHSA-2026:54552

Comment 10 errata-xmlrpc 2026-08-20 18:48:14 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:57649 https://access.redhat.com/errata/RHSA-2026:57649

Comment 11 errata-xmlrpc 2026-08-26 00:20:59 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.16

Via RHSA-2026:57845 https://access.redhat.com/errata/RHSA-2026:57845

Comment 12 errata-xmlrpc 2026-08-26 10:47:48 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:57914 https://access.redhat.com/errata/RHSA-2026:57914

Comment 13 errata-xmlrpc 2026-08-26 15:16:05 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:57482 https://access.redhat.com/errata/RHSA-2026:57482

Comment 14 errata-xmlrpc 2026-08-26 15:17:58 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.16

Via RHSA-2026:56852 https://access.redhat.com/errata/RHSA-2026:56852

Comment 15 errata-xmlrpc 2026-08-26 15:27:09 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:57401 https://access.redhat.com/errata/RHSA-2026:57401

Comment 16 errata-xmlrpc 2026-08-31 04:07:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:61253 https://access.redhat.com/errata/RHSA-2026:61253

Comment 17 errata-xmlrpc 2026-09-02 06:46:05 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:62407 https://access.redhat.com/errata/RHSA-2026:62407

Comment 18 errata-xmlrpc 2026-09-02 07:10:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:62406 https://access.redhat.com/errata/RHSA-2026:62406

Comment 19 errata-xmlrpc 2026-09-02 16:39:19 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:62754 https://access.redhat.com/errata/RHSA-2026:62754

Comment 20 errata-xmlrpc 2026-09-02 16:55:43 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:62753 https://access.redhat.com/errata/RHSA-2026:62753

Comment 21 errata-xmlrpc 2026-09-02 19:13:25 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:62803 https://access.redhat.com/errata/RHSA-2026:62803

Comment 22 errata-xmlrpc 2026-09-03 05:31:16 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:63022 https://access.redhat.com/errata/RHSA-2026:63022

Comment 23 errata-xmlrpc 2026-09-03 09:05:36 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2026:60018 https://access.redhat.com/errata/RHSA-2026:60018

Comment 24 errata-xmlrpc 2026-09-03 12:17:02 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.12

Via RHSA-2026:59830 https://access.redhat.com/errata/RHSA-2026:59830

Note You need to log in before you can comment on or make changes to this bug.

aazores
abarbaro
akhatavk
akoudelk
alcohan
alizardo
amctagga
anjoseph
anpicker
ansmith
anthomas
aoconnor
aos-team-art-private
aruklets
asdas
bbrownin
bdettelb
bniver
ckandaga
cmah
crizzo
dakwon
dhanak
dkeler
doconnor
dpaolell
drosa
dschmidt
dsimansk
dymurray
eaguilar
ebaron
eborisov
eglynn
ehelms
erezende
fdeutsch
flucifre
gbenhaim
ggainey
gmeno
gparvin
groman
hasun
ibolton
jbalunas
jbritton
jcantril
jchui
jdelft
jfula
jhe
jjoyce
jkoehler
jlanda
jmatsuok
jmatthew
jmontleo
jolong
jowilson
jpasqual
jprabhak
jpretori
jschluet
jtolenti
jupierce
juwatts
kingland
kshier
ktsao
kverlaen
lball
lbragsta
lchilton
lgamliel
lgarciaa
lhh
lphiri
lwan
manissin
mbenjamin
mbiarnes
mburns
mdellweg
mgarciac
mhackett
mhess
mhulan
mnovotny
mwringe
nboldt
ngough
niyer
nmoumoul
nyancey
oaljalju
ometelka
oramraz
osousa
pahickey
pcreech
peholase
pgaikwad
pjindal
ppalepu
ppostler
prdhamdh
psrna
ptisnovs
pvasanth
rchan
rekumar
rfreiman
rhaigner
rhel-process-autobot
rjohnson
rojacob
sakbas
sausingh
sbratsla
sdawley
sfeifer
sghai
sidsharm
simaishi
slucidi
smallamp
smcdonal
smullick
sostapov
sseago
stcannon
stirabos
suppawar
syedriko
teagle
thason
tmalecek
twaugh
tzivkovi
vereddy
veshanka
vlaad
vle
vvoronko
vwilson
watson-tool-maintainers
wenshen
whayutin
wtam
xdharmai
xiyuan
yguenane