Security update for distribution
This update for distribution rebuilds it against the current go security release.
- Update to 3.1.1-150400.9.43.1
Published Updated
PatchFirst · Latest vulnerabilities
distribution vulnerabilities
Vulnerability published for distribution in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 6
Security update for distribution
This update for distribution fixes the following issues: Security issues fixed: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260283). - CVE-2026-33540: information disclosure via improper validation of authentication realm URL (bsc#1261793). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265788). - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262951). - CVE-2026-35172: information disclosure
- Update to 3.1.1-150400.9.41.1
Published UpdatedSecurity update for distribution
This update for distribution rebuilds it against the current go security release.
- Update to 2.8.3-150400.9.38.1
Published UpdatedSecurity update for distribution
This update for distribution rebuilds it against the current go security release.
- Update to 2.8.3-150400.9.36.1
Published UpdatedSecurity update for distribution
This update for distribution rebuilds it against the current go security release.
- Update to 2.8.3-150400.9.34.1
Published UpdatedSecurity update for distribution
This update for distribution fixes the following issues: The package is rebuild with more recent go go1.24, fixing respective security issues (bsc#1244471)
- Update to 2.8.3-150400.9.27.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.