openSUSE-SU-2026:21379-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21379-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21379-1
- Upstream
- Related
- Published
- 2026-07-18T19:25:19Z
- Modified
- 2026-07-22T18:25:11Z
- Summary
- Security update for ctop
- Details
-
This update for ctop fixes the following issues:
Changes in ctop embedded dependencies:
- CVE-2022-21698: client_golang: Denial of service using InstrumentHandlerCounter (bsc#1248710)
- CVE-2024-45310: runc: runc can be tricked into creating empty files (bsc#1257431)
- CVE-2026-10722: ebpf: Crash when parsing malformed ELF/BTF input (bsc#1267805)
- CVE-2026-33814: net: Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265800)
- CVE-2026-39821: net: Failure to reject ASCII-only Punycode-encoded labels (bsc#1266632)
- References
-
- https://bugzilla.suse.com/1248710
- https://bugzilla.suse.com/1257431
- https://bugzilla.suse.com/1265800
- https://bugzilla.suse.com/1266632
- https://bugzilla.suse.com/1267805
- https://www.suse.com/security/cve/CVE-2022-21698
- https://www.suse.com/security/cve/CVE-2024-45310
- https://www.suse.com/security/cve/CVE-2026-10722
- https://www.suse.com/security/cve/CVE-2026-33814
- https://www.suse.com/security/cve/CVE-2026-39821