Important: opentelemetry-collector security update

Important: opentelemetry-collector security update

ELSA-2026-23228: image-builder security update (IMPORTANT)

ELSA-2026-22937: image-builder security update (IMPORTANT)

Important: osbuild-composer security update

Important: osbuild-composer security update

ELSA-2026-22714: osbuild-composer security update (IMPORTANT)

ELSA-2026-22450: osbuild-composer security update (IMPORTANT)

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.

Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls

If one side of the TLS connection sends multiple key update messages p ...

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Incorrect parsing of IPv6 host literals in net/url

url.Parse insufficiently validated the host/authority component and ac ...

Уязвимость golang

Important: go-fdo-client security update