High openSUSE-RU-2026:22137-1 1 CVE

Recommended update for cadvisor

Published Oct 19, 2026 · Updated Oct 20, 2026

Ecosystem: openSUSE

Summary

This update for cadvisor fixes the following issues:

Changes in cadvisor:

- CVE-2026-78669, bsc#1285500, cadvisor: golang.org/x/net/http2: excessive CPU
consumption from repeated initial window changes

Fixed packages 1

Release	Package	Fixed in
openSUSE · Leap 16.0	cadvisor	0.60.6-bp160.2.1

Vulnerabilities 1

High 7.5

CVE-2026-78669

Excessive CPU consumption from repeated initial window changes in net/http

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.

Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 8, 2026

References

report
https://bugzilla.suse.com/1285500
web
https://www.suse.com/security/cve/CVE-2026-78669