Withdrawn by the publisher.

Affected: CleanStart: gitness

Multiple security vulnerabilities affect the gitness package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details.

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Affected: Go: golang.org/x/oauth2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Security update for restic

gunicorn: HTTP Request Smuggling in benoitc/gunicorn golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh jinja2: Jinja sandbox breakout through attr filter selecting format method

Security update for ignition

Affected: Ubuntu:16.04:LTS: golang-golang-x-oauth2, Ubuntu:18.04:LTS: golang-golang-x-oauth2, Ubuntu:20.04:LTS: golang-golang-x-oauth2, Ubuntu:22.04:LTS: golang-golang-x-oauth2, Ubuntu:24.04:LTS: golang-golang-x-oauth2, Ubuntu:25.10: golang-golang-x-oauth2, Ubuntu:26.04:LTS: golang-golang-x-oauth2

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Advanced Cluster Securityausnutzen, um einen Denial of Service Angriff durchzuführen.