14 matches found
CVE-2026-84445 affecting package azurelinux-image-tools for versions less than 1.6.0-3
CVE-2026-84445 affecting package azurelinux-image-tools for versions less than 1.6.0-3. An upgraded version of the package is available that resolves this issue...
CVE-2026-84304 affecting package azurelinux-image-tools for versions less than 1.6.0-3
CVE-2026-84304 affecting package azurelinux-image-tools for versions less than 1.6.0-3. An upgraded version of the package is available that resolves this issue...
CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2
CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2. A patched version of the package is available...
AZL-93111 CVE-2026-56852 affecting package azurelinux-image-tools for versions less than 1.5.0-2
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2
CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2. A patched version of the package is available...
CVE-2026-39824 affecting package azurelinux-image-tools for versions less than 1.4.0-1
CVE-2026-39824 affecting package azurelinux-image-tools for versions less than 1.4.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.3.0-2
CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.3.0-2. A patched version of the package is available...
AZL-87387 CVE-2026-39821 affecting package azurelinux-image-tools for versions less than 1.4.0-2
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...
CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1
CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1
CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...
AZL-86430 CVE-2026-33814 affecting package azurelinux-image-tools for versions less than 1.4.0-2
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...
AZL-82115 CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each header field-value independently and aggregates members across values. This allows an attacker to amplify cpu and allocations by sending many baggage: header lines...
CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2
CVE-2026-27141 affecting package azurelinux-image-tools for versions less than 1.2.0-2. A patched version of the package is available...