Количество 167
Количество 167
BDU:2026-15293
Уязвимость пакета golang-x-net языка программирования Golang, связанная с неправильной проверкой небезопасной эквивалентности входных данных, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код
ALT-PU-2026-10774
ALT-PU-2026-10774: package `etcd` update to version 3.5.32-alt1
ALT-PU-2026-13559
ALT-PU-2026-13559: package `golang` update to version 1.26.7-alt1
ALT-PU-2026-9801
ALT-PU-2026-9801: package `mimir` update to version 3.1.1-alt1
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
CVE-2026-39821
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encode ...
openSUSE-SU-2026:21562-1
Security update for go-sendxmpp
openSUSE-SU-2026:21494-1
Security update for gh
openSUSE-SU-2026:21433-1
Security update for hauler
openSUSE-SU-2026:21432-1
Security update for gh
openSUSE-SU-2026:21413-1
Security update for google-cloud-sap-agent
openSUSE-SU-2026:21157-1
Security update for golang-github-prometheus-alertmanager
openSUSE-SU-2026:20994-1
Security update for helm
openSUSE-SU-2026:20888-1
Security update for apptainer
openSUSE-SU-2026:20853-1
Security update for hauler
SUSE-SU-2026:3473-1
Security update for aws-iam-authenticator
SUSE-SU-2026:3472-1
Security update for google-cloud-sap-agent
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-15293 Уязвимость пакета golang-x-net языка программирования Golang, связанная с неправильной проверкой небезопасной эквивалентности входных данных, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код | CVSS3: 8.2 | 2% Низкий | 5 месяцев назад |
 | ALT-PU-2026-10774 ALT-PU-2026-10774: package `etcd` update to version 3.5.32-alt1 | CVSS3: 9.6 | 4 месяца назад | |
| ALT-PU-2026-13559 ALT-PU-2026-13559: package `golang` update to version 1.26.7-alt1 | CVSS3: 9.6 | 2 месяца назад | |
| ALT-PU-2026-9801 ALT-PU-2026-9801: package `mimir` update to version 3.1.1-alt1 | CVSS3: 9.6 | 4 месяца назад | |
 | CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 9.6 | 2% Низкий | 5 месяцев назад |
 | CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 8.2 | 2% Низкий | 5 месяцев назад |
| CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". | CVSS3: 9.6 | 2% Низкий | 5 месяцев назад |
 | CVE-2026-39821 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | CVSS3: 10 | 2% Низкий | 5 месяцев назад |
| CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encode ... | CVSS3: 9.6 | 2% Низкий | 5 месяцев назад |
 | openSUSE-SU-2026:21562-1 Security update for go-sendxmpp | 2% Низкий | 3 месяца назад | |
| openSUSE-SU-2026:21494-1 Security update for gh | 2% Низкий | 3 месяца назад | |
| openSUSE-SU-2026:21433-1 Security update for hauler | 2% Низкий | 3 месяца назад | |
| openSUSE-SU-2026:21432-1 Security update for gh | 2% Низкий | 3 месяца назад | |
| openSUSE-SU-2026:21413-1 Security update for google-cloud-sap-agent | 2% Низкий | 3 месяца назад | |
| openSUSE-SU-2026:21157-1 Security update for golang-github-prometheus-alertmanager | 2% Низкий | 4 месяца назад | |
| openSUSE-SU-2026:20994-1 Security update for helm | 2% Низкий | 4 месяца назад | |
| openSUSE-SU-2026:20888-1 Security update for apptainer | 2% Низкий | 5 месяцев назад | |
| openSUSE-SU-2026:20853-1 Security update for hauler | 2% Низкий | 5 месяцев назад | |
| SUSE-SU-2026:3473-1 Security update for aws-iam-authenticator | 2% Низкий | 3 месяца назад | |
| SUSE-SU-2026:3472-1 Security update for google-cloud-sap-agent | 2% Низкий | 3 месяца назад |
Уязвимостей на страницу