26 matches found
istioctl-1.30.4-1.1 on GA media (moderate)
istioctl-1.30.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11630-1 Rating: moderate Cross-References: CVE-2026-48521 CVE-2026-50572 CVE-2026-73511 CVE-2026-73512 CVE-2026-73513 CVE-2026-73546 CVE-2026-73547 CVE-2026-73548 CVE-2026-73549 CVE-2026-73550 CVE-2026-73551 CVE-2026-73552...
PT-2026-83484
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy matches raw request paths, whereas servlet backends like Apache Tomcat strip semicolon matrix...
PT-2026-83491
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An unauthenticated client can trigger an out-of-memory condition by exploiting how the proxy handles HTTP/...
PT-2026-83493
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy HTTP RBAC accepts RFC-valid opaque header bytes but evaluates safe regex values using RE2's UTF-8...
PT-2026-83488
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The ext authz filter incorrectly assumes that a request always contains a :path pseudoheader when applying...
PT-2026-83486
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description When the optional oghttp2 upstream HTTP/2 codec is enabled, the software accepts a response trailer HEADER...
PT-2026-83487
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The /stats?format=html admin endpoint uses StatsHtmlRender, which fails to HTML-encode statistic names. A...
PT-2026-83485
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description When Capsule Protocol is enabled, the HttpDatagramHandler caches the current RequestDecoder. During stream...
OPENSUSE-SU-2026:11630-1 istioctl-1.30.4-1.1 on GA media
These are all security issues fixed in the istioctl-1.30.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-83494
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An inconsistent canonicalization process occurs when ignore path parameters in path matching is enabled. T...
PT-2026-83482
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The HTTP external-authorization client can retain a stale request callback after a request is rejected. Wh...
PT-2026-83481
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy's ProdClusterManagerFactory::allocateConnPool function dereferences transport socket options when...
PT-2026-83490
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy fails to properly handle scoped IPv6 addresses when using Utility::copyInternetAddressAndPort and QU...
PT-2026-83492
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description URL normalization fails to recognize dot . and dot-dot .. path segments when they contain semicolon...
PT-2026-83489
Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An unauthenticated HTTP/2 client can exploit the way the proxy forwards data for configured non-WebSocket...
istioctl-1.30.2-1.1 on GA media (moderate)
istioctl-1.30.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11141-1 Rating: moderate Cross-References: CVE-2026-47204 CVE-2026-47205 CVE-2026-47207 CVE-2026-47220 CVE-2026-47221 CVE-2026-47692 CVE-2026-47775 CVE-2026-47778 CVE-2026-48042 CVE-2026-48044 CVE-2026-48090 CVE-2026-48497...
OPENSUSE-SU-2026:11141-1 istioctl-1.30.2-1.1 on GA media
These are all security issues fixed in the istioctl-1.30.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-53346
These are all security issues fixed in the istioctl-1.30.2-1.1 package on the GA media of openSUSE Tumbleweed...
istioctl-1.28.4-1.1 on GA media (moderate)
istioctl-1.28.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10220-1 Rating: moderate Cross-References: CVE-2025-61732 CVE-2025-68121 CVSS scores: CVE-2025-61732 SUSE : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2025-61732 SUSE : 9.4...