Описание
Security update for ignition
This update for ignition fixes the following issue
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265751).
Список пакетов
openSUSE Leap 16.0
ignition-2.21.0-160000.4.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1265751
- SUSE CVE CVE-2026-33814 page
Описание
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
Затронутые продукты
openSUSE Leap 16.0:ignition-2.21.0-160000.4.1
Ссылки
- CVE-2026-33814
- SUSE Bug 1264506
- SUSE Bug 1268758