CVE catalog
CVE-2026-56852
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.47% · Oct 25, 2026
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | golang-golang-x-text | sid | 0.43.0-1 | fixed |
| Debian | golang-golang-x-text | forky | 0.43.0-1 | fixed |
| Debian | golang-golang-x-text | trixie | 0.22.0-1 | vulnerable |
| Debian | golang-golang-x-text | bookworm | 0.7.0-1 | vulnerable |
| Go | golang.org/x/text | Not reported | 0.39.0 | fixed |
| Suse | golang-github-prometheus-prometheus | linux enterprise module for package hub 15 sp7 | 3.13.2-150100.4.40.2 | fixed |
| Suse | grafana | linux enterprise module for package hub 15 sp7 | 12.4.10-150200.3.94.3 | fixed |
| Suse | system-user-grafana | linux enterprise module for package hub 15 sp7 | 1.0.0-150200.5.8.1 | fixed |
| Opensuse | alloy | leap 16.0 | 1.19.2-160000.1.1 | fixed |
| Suse | golang-github-prometheus-prometheus | multi linux manager tools sle-15 | 3.13.2-150002.3.19.1 | fixed |
| Suse | grafana | multi linux manager tools sle-15 | 12.4.10-150002.4.27.1 | fixed |
| Suse | mgr-push | multi linux manager tools sle-15 | 5.2.5-150002.3.12.1 | fixed |
| Suse | spacecmd | multi linux manager tools sle-15 | 5.2.10-150002.3.15.1 | fixed |
| Suse | spacewalk-client-tools | multi linux manager tools sle-15 | 5.2.7-150002.3.12.1 | fixed |
| Suse | uyuni-tools | multi linux manager tools sle-15 | 5.2.17-150002.3.20.1 | fixed |
| Suse | venv-salt-minion | multi linux manager tools sle-15 | 3006.0-150002.5.22.1 | fixed |
| Suse | uyuni-tools | multi linux manager tools sle-micro-5 | 5.2.17-150002.3.20.1 | fixed |
| Suse | venv-salt-minion | multi linux manager tools sle-micro-5 | 3006.0-150002.5.22.1 | fixed |
| Suse | cosign | linux enterprise module for basesystem 15 sp7 | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise high performance computing 15 sp4-espos | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise high performance computing 15 sp4-ltss | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise high performance computing 15 sp5-espos | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise high performance computing 15 sp5-ltss | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise server 15 sp4-ltss | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise server 15 sp5-ltss | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise server 15 sp6-ltss | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise server for sap applications 15 sp4 | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise server for sap applications 15 sp5 | 3.1.3-150400.3.57.1 | fixed |
| Suse | cosign | linux enterprise server for sap applications 15 sp6 | 3.1.3-150400.3.57.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise server 16.0 | 3.15-160000.4.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise server for sap applications 16.0 | 3.15-160000.4.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise server 16.0 | 3.15-160000.4.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise server for sap applications 16.0 | 3.15-160000.4.1 | fixed |
| Suse | google-guest-agent | linux micro 6.0 | 20260903.01-1.1 | fixed |
| Suse | google-osconfig-agent | linux micro 6.1 | 20260908.00-slfo.1.1_1.1 | fixed |
| Suse | google-guest-agent | linux micro 6.1 | 20260903.01-slfo.1.1_1.1 | fixed |
| Opensuse | google-guest-agent | leap 16.0 | 20260903.01-160000.1.1 | fixed |
| Opensuse | cosign | tumbleweed | 3.1.3-1.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp4 | 3.15-150100.3.87.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp5 | 3.15-150100.3.87.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp6 | 3.15-150100.3.87.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp7 | 3.15-150100.3.87.1 | fixed |
| Opensuse | google-cloud-sap-agent | leap 16.0 | 3.15-160000.4.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 12 | 3.15-6.81.1 | fixed |
| Suse | terraform-provider-susepubliccloud | linux enterprise module for public cloud 15 sp4 | 0.0.1-150100.3.20.1 | fixed |
| Suse | terraform-provider-susepubliccloud | linux enterprise module for public cloud 15 sp5 | 0.0.1-150100.3.20.1 | fixed |
| Suse | terraform-provider-aws | linux enterprise module for public cloud 15 sp4 | 3.11.0-150200.6.24.2 | fixed |
| Suse | terraform-provider-azurerm | linux enterprise module for public cloud 15 sp4 | 2.32.0-150200.6.18.2 | fixed |
| Suse | terraform-provider-external | linux enterprise module for public cloud 15 sp4 | 2.0.0-150200.6.18.2 | fixed |
| Suse | terraform-provider-google | linux enterprise module for public cloud 15 sp4 | 3.43.0-150200.6.18.2 | fixed |
| Suse | terraform-provider-helm | linux enterprise module for public cloud 15 sp4 | 2.9.0-150200.6.29.2 | fixed |
| Suse | terraform-provider-kubernetes | linux enterprise module for public cloud 15 sp4 | 1.13.2-150200.6.18.2 | fixed |
| Suse | terraform-provider-local | linux enterprise module for public cloud 15 sp4 | 2.0.0-150200.6.25.1 | fixed |
| Suse | terraform-provider-null | linux enterprise module for public cloud 15 sp4 | 3.0.0-150200.6.24.2 | fixed |
| Suse | terraform-provider-random | linux enterprise module for public cloud 15 sp4 | 3.0.0-150200.6.21.2 | fixed |
| Suse | terraform-provider-tls | linux enterprise module for public cloud 15 sp4 | 3.0.0-150200.5.21.2 | fixed |
| Suse | terraform-provider-aws | linux enterprise module for public cloud 15 sp5 | 3.11.0-150200.6.24.2 | fixed |
| Suse | terraform-provider-azurerm | linux enterprise module for public cloud 15 sp5 | 2.32.0-150200.6.18.2 | fixed |
| Suse | terraform-provider-external | linux enterprise module for public cloud 15 sp5 | 2.0.0-150200.6.18.2 | fixed |
| Suse | terraform-provider-google | linux enterprise module for public cloud 15 sp5 | 3.43.0-150200.6.18.2 | fixed |
| Suse | terraform-provider-helm | linux enterprise module for public cloud 15 sp5 | 2.9.0-150200.6.29.2 | fixed |
| Suse | terraform-provider-kubernetes | linux enterprise module for public cloud 15 sp5 | 1.13.2-150200.6.18.2 | fixed |
| Suse | terraform-provider-local | linux enterprise module for public cloud 15 sp5 | 2.0.0-150200.6.25.1 | fixed |
| Suse | terraform-provider-null | linux enterprise module for public cloud 15 sp5 | 3.0.0-150200.6.24.2 | fixed |
| Suse | terraform-provider-random | linux enterprise module for public cloud 15 sp5 | 3.0.0-150200.6.21.2 | fixed |
| Suse | terraform-provider-tls | linux enterprise module for public cloud 15 sp5 | 3.0.0-150200.5.21.2 | fixed |
| Opensuse | azure-storage-azcopy | tumbleweed | 10.32.6-1.1 | fixed |
| Suse | google-osconfig-agent | linux enterprise module for public cloud 12 | 20260615.01-1.53.2 | fixed |
| Suse | google-guest-agent | linux enterprise micro 5.5 | 20260529.00-150000.1.76.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp4 | 20260529.00-150000.1.76.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp5 | 20260529.00-150000.1.76.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp6 | 20260529.00-150000.1.76.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp7 | 20260529.00-150000.1.76.1 | fixed |
| Opensuse | warewulf4 | leap 16.0 | 4.7.0-bp160.3.1 | fixed |
| Opensuse | amazon-ecs-init | leap 16.0 | 1.103.2-160000.2.1 | fixed |
| Opensuse | warewulf4 | tumbleweed | 4.7.0-4.1 | fixed |
| Opensuse | apptainer | tumbleweed | 1.5.3-1.1 | fixed |
| Opensuse | yq | tumbleweed | 4.53.3-1.2 | fixed |
| Opensuse | google-guest-agent | tumbleweed | 20260529.00-4.1 | fixed |
| Opensuse | google-osconfig-agent | tumbleweed | 20260708.00-3.1 | fixed |
| Opensuse | amazon-ecs-init | tumbleweed | 1.105.0-2.1 | fixed |
| Opensuse | helm | tumbleweed | 4.2.3-3.1 | fixed |
| Opensuse | helm3 | tumbleweed | 3.21.3-3.1 | fixed |
| Opensuse | distribution | tumbleweed | 3.1.1-4.1 | fixed |
| Suse | cosign | linux enterprise server 16.0 | 3.1.3-160000.1.1 | fixed |
| Suse | cosign | linux enterprise server for sap applications 16.0 | 3.1.3-160000.1.1 | fixed |
| Opensuse | cosign | leap 16.0 | 3.1.3-160000.1.1 | fixed |
| Suse | aws-iam-authenticator | linux enterprise module for public cloud 15 sp4 | 0.7.22-150000.1.23.1 | fixed |
| Suse | aws-iam-authenticator | linux enterprise module for public cloud 15 sp5 | 0.7.22-150000.1.23.1 | fixed |
| Suse | aws-iam-authenticator | linux enterprise module for public cloud 15 sp6 | 0.7.22-150000.1.23.1 | fixed |
| Suse | aws-iam-authenticator | linux enterprise module for public cloud 15 sp7 | 0.7.22-150000.1.23.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | golang-golang-x-text | source | sid | 0.40.0-1 | not yet assigned | Not reported | [1142674] |
| Debian | golang-golang-x-text | source | forky | 0.40.0-1 | not yet assigned | Not reported | [1142674] |
| Debian | golang-golang-x-text | source | trixie | (unfixed) | not yet assigned | Not reported | [1142674] |
| Debian | golang-golang-x-text | source | bookworm | (unfixed) | not yet assigned | Not reported | [1142674] |
| Go | golang.org/x/text | Go | Not reported | 0.39.0 | Not reported | GO-2026-5970 | Not reported |
| Suse | golang-github-prometheus-prometheus | rpm | linux enterprise module for package hub 15 sp7 | 3.13.2-150100.4.40.2 | Not reported | SUSE-SU-2026:4606-1 | Not reported |
| Suse | grafana | rpm | linux enterprise module for package hub 15 sp7 | 12.4.10-150200.3.94.3 | Not reported | SUSE-SU-2026:4600-1 | Not reported |
| Suse | system-user-grafana | rpm | linux enterprise module for package hub 15 sp7 | 1.0.0-150200.5.8.1 | Not reported | SUSE-SU-2026:4600-1 | Not reported |
| Opensuse | alloy | rpm | leap 16.0 | 1.19.2-160000.1.1 | Not reported | OPENSUSE-SU-2026:22032-1 | Not reported |
| Suse | golang-github-prometheus-prometheus | rpm | multi linux manager tools sle-15 | 3.13.2-150002.3.19.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | grafana | rpm | multi linux manager tools sle-15 | 12.4.10-150002.4.27.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | mgr-push | rpm | multi linux manager tools sle-15 | 5.2.5-150002.3.12.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | spacecmd | rpm | multi linux manager tools sle-15 | 5.2.10-150002.3.15.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | multi linux manager tools sle-15 | 5.2.7-150002.3.12.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | uyuni-tools | rpm | multi linux manager tools sle-15 | 5.2.17-150002.3.20.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | venv-salt-minion | rpm | multi linux manager tools sle-15 | 3006.0-150002.5.22.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | uyuni-tools | rpm | multi linux manager tools sle-micro-5 | 5.2.17-150002.3.20.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | venv-salt-minion | rpm | multi linux manager tools sle-micro-5 | 3006.0-150002.5.22.1 | Not reported | SUSE-SU-2026:4585-1 | Not reported |
| Suse | cosign | rpm | linux enterprise module for basesystem 15 sp7 | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise high performance computing 15 sp4-espos | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise high performance computing 15 sp5-espos | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise high performance computing 15 sp5-ltss | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server 15 sp4-ltss | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server 15 sp5-ltss | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server 15 sp6-ltss | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server for sap applications 15 sp4 | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server for sap applications 15 sp5 | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server for sap applications 15 sp6 | 3.1.3-150400.3.57.1 | Not reported | SUSE-SU-2026:4392-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise server 16.0 | 3.15-160000.4.1 | Not reported | SUSE-SU-2026:23708-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise server for sap applications 16.0 | 3.15-160000.4.1 | Not reported | SUSE-SU-2026:23708-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise server 16.0 | 3.15-160000.4.1 | Not reported | SUSE-SU-2026:23729-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise server for sap applications 16.0 | 3.15-160000.4.1 | Not reported | SUSE-SU-2026:23729-1 | Not reported |
| Suse | google-guest-agent | rpm | linux micro 6.0 | 20260903.01-1.1 | Not reported | SUSE-SU-2026:23831-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux micro 6.1 | 20260908.00-slfo.1.1_1.1 | Not reported | SUSE-SU-2026:23739-1 | Not reported |
| Suse | google-guest-agent | rpm | linux micro 6.1 | 20260903.01-slfo.1.1_1.1 | Not reported | SUSE-SU-2026:23736-1 | Not reported |
| Opensuse | google-guest-agent | rpm | leap 16.0 | 20260903.01-160000.1.1 | Not reported | OPENSUSE-SU-2026:21879-1 | Not reported |
| Opensuse | cosign | rpm | tumbleweed | 3.1.3-1.1 | Not reported | OPENSUSE-SU-2026:11871-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp4 | 3.15-150100.3.87.1 | Not reported | SUSE-SU-2026:4206-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp5 | 3.15-150100.3.87.1 | Not reported | SUSE-SU-2026:4206-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp6 | 3.15-150100.3.87.1 | Not reported | SUSE-SU-2026:4206-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp7 | 3.15-150100.3.87.1 | Not reported | SUSE-SU-2026:4206-1 | Not reported |
| Opensuse | google-cloud-sap-agent | rpm | leap 16.0 | 3.15-160000.4.1 | Not reported | OPENSUSE-SU-2026:21834-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 12 | 3.15-6.81.1 | Not reported | SUSE-SU-2026:4178-1 | Not reported |
| Suse | terraform-provider-susepubliccloud | rpm | linux enterprise module for public cloud 15 sp4 | 0.0.1-150100.3.20.1 | Not reported | SUSE-SU-2026:3962-1 | Not reported |
| Suse | terraform-provider-susepubliccloud | rpm | linux enterprise module for public cloud 15 sp5 | 0.0.1-150100.3.20.1 | Not reported | SUSE-SU-2026:3962-1 | Not reported |
| Suse | terraform-provider-aws | rpm | linux enterprise module for public cloud 15 sp4 | 3.11.0-150200.6.24.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-azurerm | rpm | linux enterprise module for public cloud 15 sp4 | 2.32.0-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-external | rpm | linux enterprise module for public cloud 15 sp4 | 2.0.0-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-google | rpm | linux enterprise module for public cloud 15 sp4 | 3.43.0-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-helm | rpm | linux enterprise module for public cloud 15 sp4 | 2.9.0-150200.6.29.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-kubernetes | rpm | linux enterprise module for public cloud 15 sp4 | 1.13.2-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-local | rpm | linux enterprise module for public cloud 15 sp4 | 2.0.0-150200.6.25.1 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-null | rpm | linux enterprise module for public cloud 15 sp4 | 3.0.0-150200.6.24.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-random | rpm | linux enterprise module for public cloud 15 sp4 | 3.0.0-150200.6.21.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-tls | rpm | linux enterprise module for public cloud 15 sp4 | 3.0.0-150200.5.21.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-aws | rpm | linux enterprise module for public cloud 15 sp5 | 3.11.0-150200.6.24.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-azurerm | rpm | linux enterprise module for public cloud 15 sp5 | 2.32.0-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-external | rpm | linux enterprise module for public cloud 15 sp5 | 2.0.0-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-google | rpm | linux enterprise module for public cloud 15 sp5 | 3.43.0-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-helm | rpm | linux enterprise module for public cloud 15 sp5 | 2.9.0-150200.6.29.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-kubernetes | rpm | linux enterprise module for public cloud 15 sp5 | 1.13.2-150200.6.18.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-local | rpm | linux enterprise module for public cloud 15 sp5 | 2.0.0-150200.6.25.1 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-null | rpm | linux enterprise module for public cloud 15 sp5 | 3.0.0-150200.6.24.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-random | rpm | linux enterprise module for public cloud 15 sp5 | 3.0.0-150200.6.21.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Suse | terraform-provider-tls | rpm | linux enterprise module for public cloud 15 sp5 | 3.0.0-150200.5.21.2 | Not reported | SUSE-SU-2026:3916-1 | Not reported |
| Opensuse | azure-storage-azcopy | rpm | tumbleweed | 10.32.6-1.1 | Not reported | OPENSUSE-SU-2026:11444-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux enterprise module for public cloud 12 | 20260615.01-1.53.2 | Not reported | SUSE-SU-2026:3496-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise micro 5.5 | 20260529.00-150000.1.76.1 | Not reported | SUSE-SU-2026:3497-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp4 | 20260529.00-150000.1.76.1 | Not reported | SUSE-SU-2026:3497-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp5 | 20260529.00-150000.1.76.1 | Not reported | SUSE-SU-2026:3497-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp6 | 20260529.00-150000.1.76.1 | Not reported | SUSE-SU-2026:3497-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp7 | 20260529.00-150000.1.76.1 | Not reported | SUSE-SU-2026:3497-1 | Not reported |
| Opensuse | warewulf4 | rpm | leap 16.0 | 4.7.0-bp160.3.1 | Not reported | OPENSUSE-SU-2026:21509-1 | Not reported |
| Opensuse | amazon-ecs-init | rpm | leap 16.0 | 1.103.2-160000.2.1 | Not reported | OPENSUSE-SU-2026:21455-1 | Not reported |
| Opensuse | warewulf4 | rpm | tumbleweed | 4.7.0-4.1 | Not reported | OPENSUSE-SU-2026:11404-1 | Not reported |
| Opensuse | apptainer | rpm | tumbleweed | 1.5.3-1.1 | Not reported | OPENSUSE-SU-2026:11374-1 | Not reported |
| Opensuse | yq | rpm | tumbleweed | 4.53.3-1.2 | Not reported | OPENSUSE-SU-2026:11382-1 | Not reported |
| Opensuse | google-guest-agent | rpm | tumbleweed | 20260529.00-4.1 | Not reported | OPENSUSE-SU-2026:11348-1 | Not reported |
| Opensuse | google-osconfig-agent | rpm | tumbleweed | 20260708.00-3.1 | Not reported | OPENSUSE-SU-2026:11349-1 | Not reported |
| Opensuse | amazon-ecs-init | rpm | tumbleweed | 1.105.0-2.1 | Not reported | OPENSUSE-SU-2026:11345-1 | Not reported |
| Opensuse | helm | rpm | tumbleweed | 4.2.3-3.1 | Not reported | OPENSUSE-SU-2026:11333-1 | Not reported |
| Opensuse | helm3 | rpm | tumbleweed | 3.21.3-3.1 | Not reported | OPENSUSE-SU-2026:11334-1 | Not reported |
| Opensuse | distribution | rpm | tumbleweed | 3.1.1-4.1 | Not reported | OPENSUSE-SU-2026:11328-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server 16.0 | 3.1.3-160000.1.1 | Not reported | SUSE-SU-2026:24213-1 | Not reported |
| Suse | cosign | rpm | linux enterprise server for sap applications 16.0 | 3.1.3-160000.1.1 | Not reported | SUSE-SU-2026:24213-1 | Not reported |
| Opensuse | cosign | rpm | leap 16.0 | 3.1.3-160000.1.1 | Not reported | OPENSUSE-SU-2026:22064-1 | Not reported |
| Suse | aws-iam-authenticator | rpm | linux enterprise module for public cloud 15 sp4 | 0.7.22-150000.1.23.1 | Not reported | SUSE-SU-2026:4891-1 | Not reported |
| Suse | aws-iam-authenticator | rpm | linux enterprise module for public cloud 15 sp5 | 0.7.22-150000.1.23.1 | Not reported | SUSE-SU-2026:4891-1 | Not reported |
| Suse | aws-iam-authenticator | rpm | linux enterprise module for public cloud 15 sp6 | 0.7.22-150000.1.23.1 | Not reported | SUSE-SU-2026:4891-1 | Not reported |
| Suse | aws-iam-authenticator | rpm | linux enterprise module for public cloud 15 sp7 | 0.7.22-150000.1.23.1 | Not reported | SUSE-SU-2026:4891-1 | Not reported |
Notes
[trixie] golang-golang-x-text: Minor issue [bookworm] golang-golang-x-text: Limited support, minor issue; DoS only, reachable via norm.Iter with NFC/NFKC on unvalidated UTF-8
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [golang-golang-x-text-dev]Affected
Source package: [golang-golang-x-text]
Details (4)
0.7.0-1· all · bookwormAffected
nvd · golang-golang-x-text · debian · bookworm; nvd · golang-golang-x-text · debian · 12
0.7.0-1· all · bookwormAffected
nvd · golang-golang-x-text · debian · bookworm; nvd · golang-golang-x-text · debian · 12
0.16.0-1~bpo12+1· all · bookworm-backportsAffected
nvd · golang-golang-x-text · debian · bookworm; nvd · golang-golang-x-text · debian · 12
0.16.0-1~bpo12+1· all · bookworm-backportsAffected
nvd · golang-golang-x-text · debian · bookworm; nvd · golang-golang-x-text · debian · 12
[Debian 13 (Trixie)]
- [golang-golang-x-text-dev]Affected
Source package: [golang-golang-x-text]
Details (4)
0.22.0-1· all · trixieAffected
nvd · golang-golang-x-text · debian · 13
0.22.0-1· all · trixieAffected
nvd · golang-golang-x-text · debian · 13
0.36.0-1~bpo13+1· all · trixie-backportsAffected
nvd · golang-golang-x-text · debian · 13
0.36.0-1~bpo13+1· all · trixie-backportsAffected
nvd · golang-golang-x-text · debian · 13
[openSUSE Tumbleweed]
- [cosign]Affected
Source package: [cosign]
Details (1)
3.1.2-1.2· x86_64 · tumbleweedAffected · Fixed:
3.1.3-1.1nvd · cosign · opensuse · tumbleweed
- [apptainer-leap]Unknown
Source package: [apptainer]
Details (1)
1.5.3-2.1· noarch · tumbleweedUnknown · Fixed:
1.5.3-1.1Version impact unknown
nvd · apptainer · opensuse · tumbleweed
- [cosign-bash-completion]Unknown
Source package: [cosign]
Details (1)
3.1.2-1.2· noarch · tumbleweedUnknown · Fixed:
3.1.3-1.1Version impact unknown
nvd · cosign · opensuse · tumbleweed
- [cosign-fish-completion]Unknown
Source package: [cosign]
Details (1)
3.1.2-1.2· noarch · tumbleweedUnknown · Fixed:
3.1.3-1.1Version impact unknown
nvd · cosign · opensuse · tumbleweed
- [cosign-zsh-completion]Unknown
Source package: [cosign]
Details (1)
3.1.2-1.2· noarch · tumbleweedUnknown · Fixed:
3.1.3-1.1Version impact unknown
nvd · cosign · opensuse · tumbleweed
- [distribution-registry]Unknown
Source package: [distribution]
Details (1)
3.1.1-5.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.1-4.1Version impact unknown
nvd · distribution · opensuse · tumbleweed
- [helm3-bash-completion]Unknown
Source package: [helm3]
Details (1)
3.21.3-6.1· noarch · tumbleweedUnknown · Fixed:
3.21.3-3.1Version impact unknown
nvd · helm3 · opensuse · tumbleweed
- [helm3-fish-completion]Unknown
Source package: [helm3]
Details (1)
3.21.3-6.1· noarch · tumbleweedUnknown · Fixed:
3.21.3-3.1Version impact unknown
nvd · helm3 · opensuse · tumbleweed
- [helm3-zsh-completion]Unknown
Source package: [helm3]
Details (1)
3.21.3-6.1· noarch · tumbleweedUnknown · Fixed:
3.21.3-3.1Version impact unknown
nvd · helm3 · opensuse · tumbleweed
- [helm-bash-completion]Unknown
Source package: [helm]
Details (1)
4.2.4-1.1· noarch · tumbleweedUnknown · Fixed:
4.2.3-3.1Version impact unknown
nvd · helm · opensuse · tumbleweed
- [helm-fish-completion]Unknown
Source package: [helm]
Details (1)
4.2.4-1.1· noarch · tumbleweedUnknown · Fixed:
4.2.3-3.1Version impact unknown
nvd · helm · opensuse · tumbleweed
- [helm-zsh-completion]Unknown
Source package: [helm]
Details (1)
4.2.4-1.1· noarch · tumbleweedUnknown · Fixed:
4.2.3-3.1Version impact unknown
nvd · helm · opensuse · tumbleweed
- [warewulf4-dracut]Unknown
Source package: [warewulf4]
Details (1)
4.7.0-4.1· noarch · tumbleweedUnknown · Fixed:
4.7.0-4.1Version impact unknown
nvd · warewulf4 · opensuse · tumbleweed
- [warewulf4-man]Unknown
Source package: [warewulf4]
Details (1)
4.7.0-4.1· noarch · tumbleweedUnknown · Fixed:
4.7.0-4.1Version impact unknown
nvd · warewulf4 · opensuse · tumbleweed
- [warewulf4-overlay]Unknown
Source package: [warewulf4]
Details (1)
4.7.0-4.1· x86_64 · tumbleweedUnknown · Fixed:
4.7.0-4.1Version impact unknown
nvd · warewulf4 · opensuse · tumbleweed
- [warewulf4-overlay-rke2]Unknown
Source package: [warewulf4]
Details (1)
4.7.0-4.1· noarch · tumbleweedUnknown · Fixed:
4.7.0-4.1Version impact unknown
nvd · warewulf4 · opensuse · tumbleweed
- [warewulf4-reference-doc]Unknown
Source package: [warewulf4]
Details (1)
4.7.0-4.1· noarch · tumbleweedUnknown · Fixed:
4.7.0-4.1Version impact unknown
nvd · warewulf4 · opensuse · tumbleweed
- [yq-bash-completion]Unknown
Source package: [yq]
Details (1)
4.53.3-2.1· noarch · tumbleweedUnknown · Fixed:
4.53.3-1.2Version impact unknown
nvd · yq · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11302-1.json]
- [https://go.dev/cl/794100]
- [https://go.dev/issue/80142]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-56852]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-56852]
- [https://osv.dev/vulnerability/GO-2026-5970]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23708-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23729-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23736-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23739-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23831-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:24213-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3496-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3497-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3916-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3962-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4178-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4206-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4392-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4585-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4600-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4606-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4891-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11328-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11333-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11334-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11345-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11348-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11349-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11374-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11382-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11404-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11444-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11871-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21455-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21509-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21834-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21879-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:22032-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:22064-1]
- [https://pkg.go.dev/vuln/GO-2026-5970]
- [https://security-tracker.debian.org/tracker/CVE-2026-56852]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56852.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3481.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [Go Vulnerability Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]