openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:22200-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22200-1 advisory. Changes in cadvisor: CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285500...

Linux Distros Unpatched Vulnerability : CVE-2026-119191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer...

AlmaLinux 9.2 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793355720)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793355720 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an...

CVE-2026-119191

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer, BIT STRING decoding, maxDepth to process the relevant input or security decision. node-forge decoded ASN.1 stored inside BIT STRING...

EUVD-2026-113348

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer, BIT STRING decoding, maxDepth to process the relevant input or security decision. node-forge decoded ASN.1 stored inside BIT STRING...

CVE-2026-119191

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer, BIT STRING decoding, maxDepth to process the relevant input or security decision. node-forge decoded ASN.1 stored inside BIT STRING...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793284553)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793284553 advisory. - When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793290409)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793290409 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not ...

OPENSUSE-SU-2026:22200-1 Security update for cadvisor

This update for cadvisor fixes the following issues: Changes in cadvisor: CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285500 CVE-2026-97032: golang.org/x/net/http2: HTTP/2 server crash due to HPACK encoder race bsc1287575...

Dnspython Dns.name.from_wire_parser() Excessive CPU Use

Impact A maliciously crafted DNS message may cause dns.name.fromwireparser to use excessive CPU for DNS name decompression. Applications that process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required. Patches This problem is fixed in dnspython...

AlmaLinux 9.6 [TuxCare] Security Update: delve Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793215478)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793215478 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be...

dnspython dns.name.from_wire_parser() excessive CPU use

Impact A maliciously crafted DNS message may cause dns.name.fromwireparser to use excessive CPU for DNS name decompression. Applications that process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required. Patches This problem is fixed in dnspython...

GHSA-45C3-73F7-PV4M dnspython dns.name.from_wire_parser() excessive CPU use

Impact A maliciously crafted DNS message may cause dns.name.fromwireparser to use excessive CPU for DNS name decompression. Applications that process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required. Patches This problem is fixed in dnspython...

OPENSUSE-SU-2026:22194-1 Security update for coredns

This update for coredns fixes the following issues: Changes in coredns: - Update to 1.15.0: Fixes VUL-0: CVE-2026-78669: excessive CPU consumption in HTTP/2 boo1285501 and CVE-2026-97032: HTTP/2 server crash due to HPACK encoder race boo1287577 by bumping vendored golang.org/x/net to v0.60.0. Dro...

PT-2026-127227

Name of the Vulnerable Software and Affected Versions opentelemetry-propagator-jaeger versions prior to 1.45.0 Description The JaegerPropagator.extract function in opentelemetry-propagator-jaeger processes inbound uberctx- baggage values without enforcing entry, per-entry byte, or total-byte...

SUSE SLES15 Security Update : aws-iam-authenticator (SUSE-SU-2026:4891-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4891-1 advisory. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669:...

SUSE-SU-2026:4891-1 Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Chang...

Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues: CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272130. CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes bsc1285302. Changes f...

CLEANSTART-2026-EL32711 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the argo-cd package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CVE-2026-114605 dnspython dns.name.from_wire_parser() excessive CPU use

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...