Security update for distribution
This update for distribution rebuilds it against the current go security release.
- Actualiza a 3.1.1-150400.9.43.1
PatchFirst · Vulnerabilidades recientes
Vulnerabilidad publicada para distribution en los últimos 30 días: 1. En el catálogo KEV: 0.
Vulnerabilidades: 5
This update for distribution rebuilds it against the current go security release.
This update for distribution fixes the following issues: Security issues fixed: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260283). - CVE-2026-33540: information disclosure via improper validation of authentication realm URL (bsc#1261793). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265788). - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262951). - CVE-2026-35172: information disclosure
This update for distribution rebuilds it against the current go security release.
This update for distribution rebuilds it against the current go security release.
This update for distribution rebuilds it against the current go security release.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.