Fedora Account System
Red Hat Associate
Red Hat Customer
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:30853 https://access.redhat.com/errata/RHSA-2026:30853
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:30854 https://access.redhat.com/errata/RHSA-2026:30854
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:30855 https://access.redhat.com/errata/RHSA-2026:30855
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:34357 https://access.redhat.com/errata/RHSA-2026:34357
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:34359 https://access.redhat.com/errata/RHSA-2026:34359
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:35827 https://access.redhat.com/errata/RHSA-2026:35827
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:35828 https://access.redhat.com/errata/RHSA-2026:35828
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:35826 https://access.redhat.com/errata/RHSA-2026:35826
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:35831 https://access.redhat.com/errata/RHSA-2026:35831
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:35830 https://access.redhat.com/errata/RHSA-2026:35830
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:35829 https://access.redhat.com/errata/RHSA-2026:35829
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.22 Via RHSA-2026:34789 https://access.redhat.com/errata/RHSA-2026:34789
This issue has been addressed in the following products: RHEM 1.0 for RHEL 9 Via RHSA-2026:36796 https://access.redhat.com/errata/RHSA-2026:36796
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:37436 https://access.redhat.com/errata/RHSA-2026:37436
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:37435 https://access.redhat.com/errata/RHSA-2026:37435
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:38995 https://access.redhat.com/errata/RHSA-2026:38995
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:39005 https://access.redhat.com/errata/RHSA-2026:39005
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:39573 https://access.redhat.com/errata/RHSA-2026:39573
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:39879 https://access.redhat.com/errata/RHSA-2026:39879
This issue has been addressed in the following products: RHEM 1.1 for RHEL 10 RHEM 1.1 for RHEL 9 Via RHSA-2026:41019 https://access.redhat.com/errata/RHSA-2026:41019
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:41930 https://access.redhat.com/errata/RHSA-2026:41930
This issue has been addressed in the following products: Red Hat Ansible Automation Platform 2.7 for RHEL 9 Red Hat Ansible Automation Platform 2.7 for RHEL 10 Via RHSA-2026:42080 https://access.redhat.com/errata/RHSA-2026:42080
This issue has been addressed in the following products: Red Hat Ansible Automation Platform 2.5 for RHEL 9 Red Hat Ansible Automation Platform 2.5 for RHEL 8 Via RHSA-2026:42078 https://access.redhat.com/errata/RHSA-2026:42078
This issue has been addressed in the following products: Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.16 for RHEL 9 Via RHSA-2026:42082 https://access.redhat.com/errata/RHSA-2026:42082
This issue has been addressed in the following products: Red Hat Ansible Automation Platform 2.6 for RHEL 9 Red Hat Ansible Automation Platform 2.6 for RHEL 10 Via RHSA-2026:42079 https://access.redhat.com/errata/RHSA-2026:42079
This issue has been addressed in the following products: Red Hat Satellite 6.17 for RHEL 9 Via RHSA-2026:42150 https://access.redhat.com/errata/RHSA-2026:42150
This issue has been addressed in the following products: Red Hat Satellite 6.18 for RHEL 9 Via RHSA-2026:42151 https://access.redhat.com/errata/RHSA-2026:42151
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:46395 https://access.redhat.com/errata/RHSA-2026:46395
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:49702 https://access.redhat.com/errata/RHSA-2026:49702
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:49712 https://access.redhat.com/errata/RHSA-2026:49712
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:51112 https://access.redhat.com/errata/RHSA-2026:51112
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:51187 https://access.redhat.com/errata/RHSA-2026:51187
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:52826 https://access.redhat.com/errata/RHSA-2026:52826
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:53374 https://access.redhat.com/errata/RHSA-2026:53374
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:53413 https://access.redhat.com/errata/RHSA-2026:53413
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:53412 https://access.redhat.com/errata/RHSA-2026:53412
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:53415 https://access.redhat.com/errata/RHSA-2026:53415
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Extended Lifecycle Support Via RHSA-2026:54191 https://access.redhat.com/errata/RHSA-2026:54191
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:54401 https://access.redhat.com/errata/RHSA-2026:54401
This issue has been addressed in the following products: Red Hat OpenStack Platform 16.2 Via RHSA-2026:54757 https://access.redhat.com/errata/RHSA-2026:54757
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.20 Via RHSA-2026:54580 https://access.redhat.com/errata/RHSA-2026:54580
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:56143 https://access.redhat.com/errata/RHSA-2026:56143
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:56223 https://access.redhat.com/errata/RHSA-2026:56223
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:57541 https://access.redhat.com/errata/RHSA-2026:57541
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:57649 https://access.redhat.com/errata/RHSA-2026:57649
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:59546 https://access.redhat.com/errata/RHSA-2026:59546
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:59549 https://access.redhat.com/errata/RHSA-2026:59549
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:59562 https://access.redhat.com/errata/RHSA-2026:59562
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2026:57845 https://access.redhat.com/errata/RHSA-2026:57845
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:60315 https://access.redhat.com/errata/RHSA-2026:60315
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:60354 https://access.redhat.com/errata/RHSA-2026:60354
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:61245 https://access.redhat.com/errata/RHSA-2026:61245
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:61253 https://access.redhat.com/errata/RHSA-2026:61253
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:63134 https://access.redhat.com/errata/RHSA-2026:63134
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:65359 https://access.redhat.com/errata/RHSA-2026:65359
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:65153 https://access.redhat.com/errata/RHSA-2026:65153
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:65534 https://access.redhat.com/errata/RHSA-2026:65534
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:65886 https://access.redhat.com/errata/RHSA-2026:65886
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:66016 https://access.redhat.com/errata/RHSA-2026:66016
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2026:62549 https://access.redhat.com/errata/RHSA-2026:62549
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:66432 https://access.redhat.com/errata/RHSA-2026:66432
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:67159 https://access.redhat.com/errata/RHSA-2026:67159
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:67287 https://access.redhat.com/errata/RHSA-2026:67287
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:67160 https://access.redhat.com/errata/RHSA-2026:67160
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:67149 https://access.redhat.com/errata/RHSA-2026:67149
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:67319 https://access.redhat.com/errata/RHSA-2026:67319
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.21 Via RHSA-2026:66350 https://access.redhat.com/errata/RHSA-2026:66350
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:67517 https://access.redhat.com/errata/RHSA-2026:67517
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:68504 https://access.redhat.com/errata/RHSA-2026:68504
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2026:65851 https://access.redhat.com/errata/RHSA-2026:65851
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Via RHSA-2026:69235 https://access.redhat.com/errata/RHSA-2026:69235
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.19 Via RHSA-2026:68534 https://access.redhat.com/errata/RHSA-2026:68534
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:72276 https://access.redhat.com/errata/RHSA-2026:72276
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:72737 https://access.redhat.com/errata/RHSA-2026:72737
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Via RHSA-2026:72805 https://access.redhat.com/errata/RHSA-2026:72805
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2026:70585 https://access.redhat.com/errata/RHSA-2026:70585
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.12 Via RHSA-2026:70645 https://access.redhat.com/errata/RHSA-2026:70645
This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.18 Via RHSA-2026:70614 https://access.redhat.com/errata/RHSA-2026:70614
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:76809 https://access.redhat.com/errata/RHSA-2026:76809
This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:76795 https://access.redhat.com/errata/RHSA-2026:76795