ROOT-APP-GOBINARY-CVE-2026-63209 CVE-2026-63209 in github.com/klauspost/compress - Patched by Root

Root has patched CVE-2026-63209 in the github.com/klauspost/compress package for Root:Go. Multiple fixed versions available...

Compress/s2: Integer Overflow Or Wraparound And Out-of-bounds Write In Compress

Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in "s2.NewDict" allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding "MaxInt64". When "Dict.Encode" is subsequently called, the overflowed...

GHSA-259R-337F-4RFW Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress

Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently called, the overflowed negati...

Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress

Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently called, the overflowed negati...

openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:22117-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22117-1 advisory. Changes in cadvisor: - update to 0.60.6: workflows: mirror release tags to lib/ module tags fs/zfs: fall back to VFS when zfs stats are unavailable...

SUSE-SU-2026:4661-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283672. Changes for google-osconfig-agent: Update to version...

OPENSUSE-SU-2026:22117-1 Security update for cadvisor

This update for cadvisor fixes the following issues: Changes in cadvisor: - update to 0.60.6: workflows: mirror release tags to lib/ module tags fs/zfs: fall back to VFS when zfs stats are unavailable storage/stdout: nil-check Cpu, Network, and Memory stats Treat memory-only NUMA nodes as valid...

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:22039-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22039-1 advisory. This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an...

Security update for distribution (important)

openSUSE security update: security update for distribution ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22039-1 Rating: important References: bsc1283762 Cross-References: CVE-2026-63209 CVSS scores: CVE-2026-63209 SUSE : 7.5...

SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2026:4554-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4554-1 advisory. This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in...

SUSE-SU-2026:24153-1 Security update for distribution

This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283762...

go-grpc-compression has a zstd decompression bombing vulnerability

Impact A malicious user could cause a denial of service DoS when using a specially crafted gRPC request. The decompression mechanism for zstd did not respect the limits imposed by gRPC, allowing rapid memory usage increases. Versions v1.1.4 through to v1.2.2 made use of the Decoder.DecodeAll...