103 matches found
Important: ecs-init
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
Important: ecs-init
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
SUSE SLES16 Security Update : amazon-ecs-init (SUSE-SU-2026:24265-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24265-1 advisory. - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers...
openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:22145-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22145-1 advisory. - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers bsc1279042. -...
amazon-ecs-init-1.108.0-1.1 on GA media (moderate)
amazon-ecs-init-1.108.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12107-1 Rating: moderate Cross-References: CVE-2026-84445 CVE-2026-89090 CVSS scores: CVE-2026-84445 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-84445 SUSE : 8.7...
Security update for amazon-ecs-init (important)
openSUSE security update: security update for amazon-ecs-init ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22145-1 Rating: important References: bsc1279042 bsc1280679 Cross-References: CVE-2026-84445 CVE-2026-89090 CVSS scores: CVE-2026-84445 SUS...
SUSE-SU-2026:24265-1 Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers bsc1279042. - CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream...
OPENSUSE-SU-2026:22145-1 Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers bsc1279042. - CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream...
OPENSUSE-SU-2026:12107-1 amazon-ecs-init-1.108.0-1.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.108.0-1.1 package on the GA media of openSUSE Tumbleweed...
openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:22035-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22035-1 advisory. - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs...
Security update for amazon-ecs-init (important)
openSUSE security update: security update for amazon-ecs-init ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22035-1 Rating: important References: bsc1276744 bsc1279231 bsc1279329 Cross-References: CVE-2026-41178 CVE-2026-84303 CVE-2026-84304 CVSS...
OPENSUSE-SU-2026:22035-1 Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276744. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue...
SUSE-SU-2026:24150-1 Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276744. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue...
amazon-ecs-init-1.107.0-1.1 on GA media (moderate)
amazon-ecs-init-1.107.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11914-1 Rating: moderate Cross-References: CVE-2026-41178 CVE-2026-84304 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-84304 SUSE : 7.5...
OPENSUSE-SU-2026:11914-1 amazon-ecs-init-1.107.0-1.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-105623
These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...
openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:21574-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21574-1 advisory. This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf:...
OPENSUSE-SU-2026:21574-1 Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed bsc1267794. Other...
SUSE-SU-2026:23234-1 Security update for amazon-ecs-init
This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed bsc1267794. Other...
amazon-ecs-init-1.106.0-1.1 on GA media (moderate)
amazon-ecs-init-1.106.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11443-1 Rating: moderate Cross-References: CVE-2026-10722 CVSS scores: CVE-2026-10722 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-10722 SUSE : 8.7...