Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4891-1

Опубликовано: 23 окт. 2026
Источник: suse-cvrf

Описание

Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issues:

  • CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272130).
  • CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285302).

Changes for aws-iam-authenticator:

  • Updated to version 0.7.22

Список пакетов

SUSE Linux Enterprise Module for Public Cloud 15 SP4
aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6
aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7
aws-iam-authenticator-0.7.22-150000.1.23.1

Ссылки

Описание

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP4:aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5:aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6:aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7:aws-iam-authenticator-0.7.22-150000.1.23.1
Ссылки

Описание

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.

Затронутые продукты
SUSE Linux Enterprise Module for Public Cloud 15 SP4:aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5:aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6:aws-iam-authenticator-0.7.22-150000.1.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7:aws-iam-authenticator-0.7.22-150000.1.23.1
Ссылки
Уязвимость SUSE-SU-2026:4891-1