UBUNTU-CVE-2026-94571

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirecturl and redirectprefix fields. The RFC 3986 URL validator percent-encodes control characters before validating, and thus newlines passed structural checks, but Octavia stored...

CVE-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

CVE-2026-73551

Envoy is an open-source edge and service proxy for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 , its URL normalization does not recognize dot and dotdot path segments carrying semicolon parameters . A request such as /user/..;foo=bar/admin is not canonicalized to /admi...

CVE-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

EUVD-2026-84104

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts RFC-valid opaque header bytes but evaluates saferegex values with RE2's UTF-8 subject semantics. A downstream client can preserve a prohibit...

K000163346: GnuTLS vulnerability CVE-2026-3833

Security Advisory Description A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploi...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the templated policy processing. An attacker can gain unauthorized access, escalate privileges, or issue unauthorized certificates by injecting wildcard or syntax-significant characters into identity data...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the templated policy processing. An attacker can gain unauthorized access, escalate privileges, or issue unauthorized certificates by injecting wildcard or syntax-significant characters into identity data...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the templated policy processing. An attacker can gain unauthorized access, escalate privileges, or issue unauthorized certificates by injecting wildcard or syntax-significant characters into identity data...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the templated policy processing. An attacker can gain unauthorized access, escalate privileges, or issue unauthorized certificates by injecting wildcard or syntax-significant characters into identity data...

sudo: Sudo: Policy bypass allows unauthorized program execution via execveat

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the policy-intersection. An attacker can exhaust system resources and cause service disruption by submitting specially crafted WS-Policy documents that trigger excessive...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the parsing process of WS-Policy documents containing deeply nested policy elements. An attacker can cause the application to exhaust the thread stack and crash the parser by submitting specially crafted...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the processing of WS-Policy documents containing excessive content within policy assertions. An attacker can cause memory exhaustion by submitting specially crafted documents...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a total timeout in the remote policy fetch process. An attacker can cause the application to hang indefinitely by making a server respond extremely slowly, there...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the normalization. An attacker can exhaust system resources by submitting a specially crafted WS-Policy document containing repeated policy references that trigger exponential...

CVE-2026-91866

A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU for a long time denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91867

When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitely and tie up the calling thread denial of service. Users are recommended to upgrade to version 3.2.4, which fixes thi...

CVE-2026-91863

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...