OPENSUSE-SU-2026:11630-1
Vulnerability from csaf_opensuse - Published: 2026-08-28 00:00 - Updated: 2026-09-22 09:43Summary
istioctl-1.30.4-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: istioctl-1.30.4-1.1 on GA media
Description of the patch: These are all security issues fixed in the istioctl-1.30.4-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11630
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-48521
Threats
Impact
important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "istioctl-1.30.4-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the istioctl-1.30.4-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11630",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11630-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48521 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48521/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-50572 page",
"url": "https://www.suse.com/security/cve/CVE-2026-50572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73511 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73512 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73513 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73546 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73547 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73547/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73548 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73549 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73550 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73551 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73552 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73552/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73553 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73553/"
}
],
"title": "istioctl-1.30.4-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-22T09:43:25Z",
"generator": {
"date": "2026-08-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11630-1",
"initial_release_date": "2026-08-28T00:00:00Z",
"revision_history": [
{
"date": "2026-08-28T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:26:06Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:28:19Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:21:52Z",
"number": "4",
"summary": "unknown changes"
},
{
"date": "2026-09-19T08:20:13Z",
"number": "5",
"summary": "unknown changes"
},
{
"date": "2026-09-19T15:43:45Z",
"number": "6",
"summary": "unknown changes"
},
{
"date": "2026-09-20T21:49:29Z",
"number": "7",
"summary": "unknown changes"
},
{
"date": "2026-09-22T09:43:25Z",
"number": "8",
"summary": "unknown changes"
}
],
"status": "final",
"version": "8"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "istioctl-0:1.30.4-1.1.aarch64",
"product": {
"name": "istioctl-0:1.30.4-1.1.aarch64",
"product_id": "istioctl-0:1.30.4-1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl@1.30.4-1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"product": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"product_id": "istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-bash-completion@1.30.4-1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"product": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"product_id": "istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-zsh-completion@1.30.4-1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "istioctl-0:1.30.4-1.1.ppc64le",
"product": {
"name": "istioctl-0:1.30.4-1.1.ppc64le",
"product_id": "istioctl-0:1.30.4-1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl@1.30.4-1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"product": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"product_id": "istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-bash-completion@1.30.4-1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"product": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"product_id": "istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-zsh-completion@1.30.4-1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "istioctl-0:1.30.4-1.1.s390x",
"product": {
"name": "istioctl-0:1.30.4-1.1.s390x",
"product_id": "istioctl-0:1.30.4-1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl@1.30.4-1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "istioctl-bash-completion-0:1.30.4-1.1.s390x",
"product": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.s390x",
"product_id": "istioctl-bash-completion-0:1.30.4-1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-bash-completion@1.30.4-1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"product": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"product_id": "istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-zsh-completion@1.30.4-1.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "istioctl-0:1.30.4-1.1.x86_64",
"product": {
"name": "istioctl-0:1.30.4-1.1.x86_64",
"product_id": "istioctl-0:1.30.4-1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl@1.30.4-1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"product": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"product_id": "istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-bash-completion@1.30.4-1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "istioctl-zsh-completion-0:1.30.4-1.1.x86_64",
"product": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.x86_64",
"product_id": "istioctl-zsh-completion-0:1.30.4-1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/istioctl-zsh-completion@1.30.4-1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-0:1.30.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64"
},
"product_reference": "istioctl-0:1.30.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-0:1.30.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le"
},
"product_reference": "istioctl-0:1.30.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-0:1.30.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x"
},
"product_reference": "istioctl-0:1.30.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-0:1.30.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64"
},
"product_reference": "istioctl-0:1.30.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64"
},
"product_reference": "istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le"
},
"product_reference": "istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x"
},
"product_reference": "istioctl-bash-completion-0:1.30.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-bash-completion-0:1.30.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64"
},
"product_reference": "istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64"
},
"product_reference": "istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le"
},
"product_reference": "istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x"
},
"product_reference": "istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "istioctl-zsh-completion-0:1.30.4-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
},
"product_reference": "istioctl-zsh-completion-0:1.30.4-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-48521",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48521"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s ProdClusterManagerFactory::allocateConnPool dereferences transport_socket_options while selecting an HTTP/3 connection pool without first checking whether the pointer is null. LoadBalancerContext implementations used by synthetic, mirror, health-check, and async-client calls can return no transport-socket options. With auto_config and HTTP/3 enabled, routine traffic reaching one of those contexts can crash an Envoy worker. The relevant scope boundary is that the affected branch requires HTTP/3 in the protocol set and a context that supplies no transport-socket options. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48521",
"url": "https://www.suse.com/security/cve/CVE-2026-48521"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-48521"
},
{
"cve": "CVE-2026-50572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-50572"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s HTTP external-authorization client can retain a stale request callback after a request is rejected. When RawHttpClientImpl::onSuccess later processes the authorization response, it can invoke callbacks_ after the callback owner has been destroyed, causing a use-after-free and process crash under production traffic. The relevant scope boundary is that the vulnerable path uses the HTTP ext_authz client; the advisory does not establish the same trigger for unrelated filters. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-50572",
"url": "https://www.suse.com/security/cve/CVE-2026-50572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-50572"
},
{
"cve": "CVE-2026-73511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73511"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy normally matches the raw request path, while servlet backends such as Apache Tomcat strip semicolon matrix parameters from each path segment before resolving the resource. Envoy\u0027s ignore_path_parameters_in_path_matching option instead truncates at the first semicolon and still does not match per-segment backend behavior. A remote client can use a parameterized protected segment, or a parameter on an earlier segment, to make Envoy select an unprotected fallback while the backend resolves the protected resource. The relevant scope boundary is that the bypass requires both a path-based Envoy decision and a backend that strips semicolon parameters per segment. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73511",
"url": "https://www.suse.com/security/cve/CVE-2026-73511"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-73511"
},
{
"cve": "CVE-2026-73512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73512"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the ActiveStream and updates EnvoyQuicServerStream but does not update the handler\u0027s cached pointer. A subsequent HTTP/3 datagram can call decodeData through the freed decoder, causing invalid virtual dispatch and a process crash. The relevant scope boundary is that hTTP/3 datagrams and Capsule Protocol must be enabled, and the request must enter a stream-recreation path such as an internal redirect. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73512",
"url": "https://www.suse.com/security/cve/CVE-2026-73512"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-73512"
},
{
"cve": "CVE-2026-73513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73513"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s optional oghttp2 upstream HTTP/2 codec accepts a response trailer HEADERS frame without END_STREAM. Envoy completes and deferred-deletes the ActiveRequest while oghttp2 keeps the stream open, leaving ClientStreamImpl with a dangling response_decoder_ reference. A later frame on the stream can dispatch through the freed object and crash the process. The relevant scope boundary is that the default nghttp2 codec rejects the malformed trailers, and the trigger is upstream-only with oghttp2 enabled. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73513",
"url": "https://www.suse.com/security/cve/CVE-2026-73513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-73513"
},
{
"cve": "CVE-2026-73546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73546"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s /stats?format=html admin endpoint uses StatsHtmlRender, which sanitizes string statistic values but emits statistic names without HTML encoding. A data-plane component such as grpc_stats with stats_for_all_methods enabled can incorporate attacker-controlled path segments into cached dynamic statistic names. When an operator views the HTML stats page, the stored name can execute script with the admin interface\u0027s origin and issue privileged same-origin requests. The relevant scope boundary is that the admin interface must be browser-accessible and an enabled component must persist attacker-influenced text in statistic names. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73546",
"url": "https://www.suse.com/security/cve/CVE-2026-73546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-73546"
},
{
"cve": "CVE-2026-73547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73547"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s ext_authz filter assumes that a request contains a :path pseudoheader when applying query_parameters_to_set or query_parameters_to_remove from an authorization response. A path-less CONNECT request makes request_headers_-\u003ePath() return null, and Filter::onComplete dereferences that pointer while parsing the query string. An unauthenticated downstream client can crash the Envoy process when the filter and authorization response use query-parameter mutation. The relevant scope boundary is that the deployment must accept path-less CONNECT and configure ext_authz query-parameter mutation. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73547",
"url": "https://www.suse.com/security/cve/CVE-2026-73547"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-73547"
},
{
"cve": "CVE-2026-73548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73548"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a configured non-WebSocket HTTP upgrade before the upstream accepts the upgrade. An unauthenticated HTTP/2 client can place a complete HTTP/1.1 request in extended CONNECT data; Envoy downgrades the request, writes the data unframed to a keep-alive HTTP/1.1 upstream, and returns the socket to the shared pool while the smuggled response remains queued. A different downstream client can then receive the attacker\u0027s response. The relevant scope boundary is that webSocket upgrades, plain CONNECT, disabled backend keep-alive, per-downstream pools, and max_requests_per_connection set to 1 are not affected by the demonstrated path. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73548",
"url": "https://www.suse.com/security/cve/CVE-2026-73548"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-73548"
},
{
"cve": "CVE-2026-73549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73549"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s Utility::copyInternetAddressAndPort and QUIC client-address paths reconstruct scoped IPv6 addresses through addressAsString and Ipv6Instance. The string includes a percent scope identifier that inet_pton cannot parse, causing an exception or abort. Kernel-provided scoped IPv6 destinations in ORIGINAL_DST transparent-proxy deployments, and affected QUIC connection paths, can therefore terminate the process. The relevant scope boundary is that the HTTP use_http_header override rejects scoped addresses earlier; the advisory\u0027s crash path requires a kernel-provided original destination or the affected QUIC path. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73549",
"url": "https://www.suse.com/security/cve/CVE-2026-73549"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-73549"
},
{
"cve": "CVE-2026-73550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73550"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every decoded HTTP/2 Host header value before discarding it when :authority is already present. The discarded value bypasses saveHeader, so its bytes and count are not charged against request header limits. An unauthenticated client can use HPACK indexing to submit many references to a large Host value across a bounded number of streams, forcing extreme header-copy allocation and causing the proxy to be out-of-memory killed. The relevant scope boundary is that the demonstrated amplification uses HTTP/2 HPACK and the duplicate Host discard behavior. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73550",
"url": "https://www.suse.com/security/cve/CVE-2026-73550"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-73550"
},
{
"cve": "CVE-2026-73551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73551"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy\u0027s URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefore not canonicalized to /admin even when path normalization is enabled. If an upstream interprets the segment according to RFC 3986 while Envoy applies routing or RBAC to the uncollapsed path, a remote client can cause path confusion and bypass path-based security policy. The relevant scope boundary is that the security consequence depends on a downstream/upstream path interpretation mismatch or a path-based Envoy decision. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73551",
"url": "https://www.suse.com/security/cve/CVE-2026-73551"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-73551"
},
{
"cve": "CVE-2026-73552",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73552"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts RFC-valid opaque header bytes but evaluates safe_regex values with RE2\u0027s UTF-8 subject semantics. A downstream client can preserve a prohibited marker and add an unrelated obs-text octet, causing RE2::FullMatch to return false and a negative RBAC policy to treat the invalid subject as an ordinary no-match. A byte-oriented route matcher can still observe the marker, allowing the request to reach a route intended to be denied. The relevant scope boundary is that plain positive ALLOW regexes normally fail closed, and exact, prefix, suffix, and contains matchers are not shown to have this subject-domain failure. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73552",
"url": "https://www.suse.com/security/cve/CVE-2026-73552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-73552"
},
{
"cve": "CVE-2026-73553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73553"
}
],
"notes": [
{
"category": "general",
"text": "Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, When ignore_path_parameters_in_path_matching is enabled, Envoy\u0027s router strips the semicolon suffix before matching but the RBAC url_path matcher evaluates the raw path. A downstream request such as /admin;x can therefore miss a DENY rule for /admin while the router still selects the protected /admin backend. The inconsistent canonicalization allows an unauthenticated client to bypass path-based authorization. The relevant scope boundary is that the route option and a path-based RBAC rule must both be present, and the protected route must match after stripping. This issue is fixed in versions 1.36.10, 1.37.6, 1.38.4, and 1.39.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73553",
"url": "https://www.suse.com/security/cve/CVE-2026-73553"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-bash-completion-0:1.30.4-1.1.x86_64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.aarch64",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.ppc64le",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.s390x",
"openSUSE Tumbleweed:istioctl-zsh-completion-0:1.30.4-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-73553"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…