940 matches found
GO-2026-6912 KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt
KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption in kubevirt.io/kubevirt...
openSUSE 16: kubevirt1.9-container-disk / kubevirt1.9-libguestfs-tools / etc (openSUSE-SU-2026:22180-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22180-1 advisory. - CVE-2026-13622: virt-handler migration proxy follows symlinks allowing container escape to host bsc1272840. - CVE-2026-78659:...
Security update for kubevirt1.9 (important)
openSUSE security update: security update for kubevirt1.9 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22180-1 Rating: important References: bsc1272840 bsc1285255 bsc1286984 bsc1287039 bsc1287143 bsc1287446 Cross-References: CVE-2026-13622...
OPENSUSE-SU-2026:22180-1 Security update for kubevirt1.9
This update for kubevirt1.9 fixes the following issues: - CVE-2026-13622: virt-handler migration proxy follows symlinks allowing container escape to host bsc1272840. - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers bsc1286984. - CVE-2026-78660:...
AZL-112064 CVE-2026-97045 affecting package kubevirt-openvmm 1.9.0-1
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
AZL-111847 CVE-2026-97045 affecting package cloud-provider-kubevirt 0.5.1-10
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
AZL-112043 CVE-2026-97045 affecting package kubevirt 1.8.4-4
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
AZL-112070 CVE-2026-78661 affecting package kubevirt-openvmm 1.9.0-1
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-111844 CVE-2026-78661 affecting package cloud-provider-kubevirt 0.5.1-10
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-112040 CVE-2026-78661 affecting package kubevirt 1.8.4-4
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...
AZL-112067 CVE-2026-116591 affecting package kubevirt-openvmm 1.9.0-1
compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable ...
GO-2026-6686 vulnerabilities
Vulnerabilities for packages: gosu, amazon-ecs-agent, envoy-gateway, neuvector-scanner, kubevirt-cdi-importer-fips, undock, xeol-fips, k8s-image-swapper-fips, crossplane-function-kcl-fips, ctop-fips, act, rancher, crossplane-function-kcl, packer-fips, k3s, rke2-runtime, umoci, neuvector,...
CVE-2026-78659 affecting package kubevirt for versions less than 1.8.4-4
CVE-2026-78659 affecting package kubevirt for versions less than 1.8.4-4. A patched version of the package is available...
CVE-2026-78669 affecting package kubevirt for versions less than 1.8.4-4
CVE-2026-78669 affecting package kubevirt for versions less than 1.8.4-4. A patched version of the package is available...
CVE-2026-107324 affecting package kubevirt for versions less than 1.8.4-4
CVE-2026-107324 affecting package kubevirt for versions less than 1.8.4-4. A patched version of the package is available...
CVE-2026-78663 affecting package kubevirt for versions less than 1.8.4-4
CVE-2026-78663 affecting package kubevirt for versions less than 1.8.4-4. A patched version of the package is available...
CVE-2026-78660 affecting package kubevirt for versions less than 1.8.4-4
CVE-2026-78660 affecting package kubevirt for versions less than 1.8.4-4. A patched version of the package is available...
CVE-2026-97032 affecting package kubevirt for versions less than 1.8.4-4
CVE-2026-97032 affecting package kubevirt for versions less than 1.8.4-4. A patched version of the package is available...