Security update for distribution
This update for distribution rebuilds it against the current go security release.
- Обновитесь до 3.1.1-150400.9.43.1
PatchFirst · Свежие уязвимости
За последние 30 дней в distribution опубликовано уязвимостей: 1; в каталоге KEV: 0.
Уязвимостей: 6
This update for distribution rebuilds it against the current go security release.
This update for distribution fixes the following issues: Security issues fixed: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260283). - CVE-2026-33540: information disclosure via improper validation of authentication realm URL (bsc#1261793). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265788). - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262951). - CVE-2026-35172: information disclosure
This update for distribution rebuilds it against the current go security release.
This update for distribution rebuilds it against the current go security release.
This update for distribution rebuilds it against the current go security release.
This update for distribution fixes the following issues: The package is rebuild with more recent go go1.24, fixing respective security issues (bsc#1244471)
Сопоставьте установленный стек и версии со свежими базами уязвимостей.