SUSE SLES15 Security Update : ignition (SUSE-SU-2026:3300-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3300-1 advisory. This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labe...

Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. CVE-2026-56852: golang.org/x/text/unicode/norm: handling input...

SUSE-SU-2026:3342-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling inp...

Security update for yq

This update for yq fixes the following issues: Update to v4.53.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1267199. CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inpu...

OPENSUSE-SU-2026:21454-1 Security update for yq

This update for yq fixes the following issues: Changes in yq: - Update the golang.org/x/net dependency to version v0.57.0 to fix CVE-2026-39821 for good bsc1267199. - update to v4.53.3 Add --ini-preserve-quotes flag for INI round-trip quote preservation. Fix: reset INI decoder state on init. Fix:...

Linux Distros Unpatched Vulnerability : CVE-2026-56852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Note that Nessus relies on the presence of the package...

CVE-2026-56852

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852 Infinite loop on invalid input in golang.org/x/text

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CLEANSTART-2026-SO86245 Security fixes for CVE-2025-61729, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27137, CVE-2026-27138, CVE-2026-27142, CVE-2026-27145, CVE-2026-39821, CVE-2026-39822, CVE-2026-42502, CVE-2026-42504, CVE-2026-42505, CVE-2026-42506, CVE-2026-42507, CVE-2026-46600, CVE-2026-56852 applied in versions: 0.20.2-r1, 0.22.1-r2, 0.23.0-r0

Multiple security vulnerabilities affect the trust-manager package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VY16523 Security fixes for CVE-2026-39822, CVE-2026-42505, CVE-2026-46600, CVE-2026-56852 applied in versions: 0.8.0-r1

Multiple security vulnerabilities affect the wave package. These issues are resolved in later releases. See references for individual vulnerability details...