Количество 155
Количество 155
RLSA-2026:36317
Important: skopeo security update
RLSA-2026:29981
Moderate: golang security, bug fix, and enhancement update
ELSA-2026-36317
ELSA-2026-36317: skopeo security update (IMPORTANT)
openSUSE-SU-2026:21319-1
Security update for go1.25-openssl
openSUSE-SU-2026:20977-1
Security update for go1.25
openSUSE-SU-2026:20976-1
Security update for go1.26
SUSE-SU-2026:2327-1
Security update for go1.26
SUSE-SU-2026:2326-1
Security update for go1.25
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
CVE-2026-33811
Crash when handling long CNAME response in net
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ...
openSUSE-SU-2026:21436-1
Security update for rclone
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encode ...
SUSE-SU-2026:3102-1
Security update for go1.26-openssl
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2026:36317 Important: skopeo security update | 23 дня назад | ||
| RLSA-2026:29981 Moderate: golang security, bug fix, and enhancement update | около 1 месяца назад | ||
| ELSA-2026-36317 ELSA-2026-36317: skopeo security update (IMPORTANT) | 24 дня назад | ||
 | openSUSE-SU-2026:21319-1 Security update for go1.25-openssl | 18 дней назад | ||
| openSUSE-SU-2026:20977-1 Security update for go1.25 | около 1 месяца назад | ||
| openSUSE-SU-2026:20976-1 Security update for go1.26 | около 1 месяца назад | ||
| SUSE-SU-2026:2327-1 Security update for go1.26 | около 2 месяцев назад | ||
| SUSE-SU-2026:2326-1 Security update for go1.25 | около 2 месяцев назад | ||
 | CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-33811 Crash when handling long CNAME response in net | 1% Низкий | 3 месяца назад | |
| CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME re ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
| openSUSE-SU-2026:21436-1 Security update for rclone | 8 дней назад | ||
| CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 9.6 | 1% Низкий | 2 месяца назад |
| CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 8.2 | 1% Низкий | 2 месяца назад |
| CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 9.6 | 1% Низкий | 2 месяца назад |
| CVE-2026-39821 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | CVSS3: 10 | 1% Низкий | 2 месяца назад |
| CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encode ... | CVSS3: 9.6 | 1% Низкий | 2 месяца назад |
| SUSE-SU-2026:3102-1 Security update for go1.26-openssl | 14 дней назад |
Уязвимостей на страницу