CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2

CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2. A patched version of the package is available...

AZL-93111 CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2

CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2. A patched version of the package is available...

CVE-2026-39824 affecting package azurelinux-image-tools for versions less than 1.4.0-1

CVE-2026-39824 affecting package azurelinux-image-tools for versions less than 1.4.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.3.0-2

CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.3.0-2. A patched version of the package is available...

AZL-87387 CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.4.0-2

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1

CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1

CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2

CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2. A patched version of the package is available...

AZL-78680 CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic...