ROOT-APP-GOBINARY-CVE-2026-56852 CVE-2026-56852 in golang.org/x/text - Patched by Root

Root has patched CVE-2026-56852 in the golang.org/x/text package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-56851 CVE-2026-56851 in golang.org/x/text - Patched by Root

Root has patched CVE-2026-56851 in the golang.org/x/text package for Root:Go. Multiple fixed versions available...

CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The golang.org/x/text library, specifically within the x/text/secure/precis component, contains a vulnerability where the Nickname profile can panic due to an out-of-bounds slice error . This occurs when the software attempts to transform crafted input into a short destination buffer. Exploitatio...

GO-2026-6629 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

Security Bulletin: Vulnerability in golang.org/x/text bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the golang.org/x/text library, which is affected by a denial of service vulnerability. CVE-2026-56852. Vulnerability Details CVEID:CVE-2026-56852 DESCRIPTION: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

Rocky Linux 8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4694)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204694 advisory. containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters CVE-2020-10749 QEMU: slirp: networking out-of-bounds read...

podman security update

5.8.2-9.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-9 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 7:5.8.2-8 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 7:5.8.2-7 - Rebuild for golang C...

Oracle Linux 10 : podman (ELSA-2026-70201)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70201 advisory. - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 - rebuild for CVE-2026-33810 Tenable has extracted the preceding...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

RHEL 8 : rhc (RHSA-2026:69258)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69258 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

SUSE-SU-2026:3962-1 Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issue: - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of truncated/invalid UTF-8 input can lead to infinite loop bsc1271995...

CVE-2026-49329: Inefficient Algorithmic Complexity

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-'...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text.

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text. CVE-2026-56852 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-56852 DESCRIPTION: A norm.Iter can enter an infinite loop when handli...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...