kubectl (1.33.13-ubuntu20.04u9) focal; urgency=low

  * [HIGH] CVE-2026-25681 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cr...
  * [HIGH] CVE-2026-27136 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - Parsing arbitrary HTML which is then rendered using Render can result...
  * [HIGH] CVE-2026-33814 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Servi...
  * [HIGH] CVE-2026-39821 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation vi...
  * [HIGH] CVE-2026-42502 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - Parsing arbitrary HTML which is then rendered using Render can result...
  * [MEDIUM] CVE-2025-47911 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html
  * [MEDIUM] CVE-2025-58190 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - golang.org/x/net/html: Infinite parsing loop in golang.org/x/net
  * [MEDIUM] CVE-2026-25680 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excess...
  * [MEDIUM] CVE-2026-42506 in golang.org/x/net (v0.38.0), golang.org/x/net (v0.38.0) - golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via...
  * [UNKNOWN] CVE-2026-39824 in golang.org/x/sys (v0.31.0), golang.org/x/sys (v0.31.0) - Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
 -- azcu-bot <azcu-publishing@microsoft.com>  Wed, 01 Jul 2026 00:00:00 +0000

