Update Info

openSUSE-2026-340


Security update for cadvisor


Type: security
Severity: important
Issued: 2026-09-21
Description:
This update for cadvisor fixes the following issues:

- update vendor.tar to fix the following issues in dependency google.golang.org/grpc:
  * CVE-2026-84445: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (boo#1279044)
  * CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA frame fragmentation (boo#1279224)
  * CVE-2026-84303: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (boo#1279320)


              

Packages


  • cadvisor-0.60.5-bp157.2.9.1