[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
registry.redhat.io/openshift4/ose-cli-rhel9	stage	digest	fcb2150 → 6d6cb79

---

crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates

CVE-2026-111943

More information

Details

A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitimate servers during secure connections. This flaw can enable an attacker to conduct a man-in-the-middle (MitM) attack to intercept or alter confidential communications.

Severity

Important

References

• https://access.redhat.com/security/cve/CVE-2026-111943
• https://bugzilla.redhat.com/show_bug.cgi?id=2556068
• https://access.redhat.com/security/vulnerabilities/RHSB-2026-012
• https://www.cve.org/CVERecord?id=CVE-2026-111943
• https://nvd.nist.gov/vuln/detail/CVE-2026-111943
• https://github.com/golang/go/issues/82345
• https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU
• https://pkg.go.dev/vuln/GO-2026-6809

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 18.33%. Comparing base (25b79c6) to head (7acffd9).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #412   +/-   ##
=======================================
  Coverage   18.33%   18.33%           
=======================================
  Files           3        3           
  Lines          60       60           
=======================================
  Hits           11       11           
  Misses         49       49           

Flag	Coverage Δ
unit	18.33% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[JasonPowr]

/test