Описание
Recommended update for cadvisor
This update for cadvisor fixes the following issues:
Changes in cadvisor:
- CVE-2026-78669, bsc#1285500, cadvisor: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes
Список пакетов
openSUSE Leap 16.0
cadvisor-0.60.6-bp160.2.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1285500
- SUSE CVE CVE-2026-78669 page
Описание
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.
Затронутые продукты
openSUSE Leap 16.0:cadvisor-0.60.6-bp160.2.1
Ссылки
- CVE-2026-78669
- SUSE Bug 1284772