{"schemaVersion":3,"id":"CVE-2026-63209","aliases":["SUSE-SU-2026:4554-1","RHSA-2026:54413","RHSA-2026:54419","RHSA-2026:58472","RHSA-2026:68256","RHSA-2026:70031","RHSA-2026:70670","RHSA-2026:70684","RHSA-2026:70726","RHSA-2026:72490","RHSA-2026:72491","RHSA-2026:72493","RHSA-2026:72496","UBUNTU-CVE-2026-63209","DEBIAN-CVE-2026-63209","GO-2026-5841","GHSA-259r-337f-4rfw","openSUSE-SU-2026:11939-1","openSUSE-SU-2026:11953-1","openSUSE-SU-2026:11955-1","openSUSE-SU-2026:11957-1","openSUSE-SU-2026:11960-1","openSUSE-SU-2026:11961-1","openSUSE-SU-2026:11962-1","openSUSE-SU-2026:11964-1","openSUSE-SU-2026:22039-1","SUSE-SU-2026:4661-1","SUSE-SU-2026:4662-1","SUSE-SU-2026:24131-1","SUSE-SU-2026:24153-1","openSUSE-SU-2026:22078-1","openSUSE-SU-2026:22117-1"],"status":"published","duplicateOf":null,"title":null,"description":"compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7.","dates":{"published":"2026-09-29T14:58:53.366Z","modified":"2026-09-29T16:32:32.677Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00365,"percentile":0.28842,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-09-30T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":0.28842}],"last30":[{"date":"2026-09-30T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00365,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00365,"percentile":0.28842}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"},{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"debian","product":"golang-github-klauspost-compress","name":"golang-github-klauspost-compress","label":"golang-github-klauspost-compress","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-klauspost-compress","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.19.0+ds1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.19.0+ds1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-klauspost-compress","name":"golang-github-klauspost-compress","label":"golang-github-klauspost-compress","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-klauspost-compress","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/klauspost","product":"compress","name":"github.com/klauspost/compress","label":"compress","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/klauspost/compress","purlType":"golang","versions":[{"text":"≥ 1.16.0, < 1.18.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.16.0, < 1.18.7","eol":null,"hubHref":null},{"vendor":"klauspost","product":"compress","name":"compress","label":"compress","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.18.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.7","eol":null,"hubHref":"/vendor/klauspost/compress"},{"vendor":"opensuse","product":"aliyun-cli&distro=openSUSE Tumbleweed","name":"aliyun-cli","label":"aliyun-cli&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/aliyun-cli&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.5.1-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.1-2.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"amazon-cloudwatch-agent&distro=openSUSE Tumbleweed","name":"amazon-cloudwatch-agent","label":"amazon-cloudwatch-agent&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/amazon-cloudwatch-agent&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 1.300073.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.300073.0-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cadvisor&distro=openSUSE Leap 16.0","name":"cadvisor","label":"cadvisor&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cadvisor&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 0.60.6-bp160.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.60.6-bp160.1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"cadvisor&distro=openSUSE Tumbleweed","name":"cadvisor","label":"cadvisor&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/cadvisor&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.60.6-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.60.6-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"distribution&distro=openSUSE Leap 16.0","name":"distribution","label":"distribution&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/distribution&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 3.1.1-160000.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.1-160000.5.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"distribution&distro=openSUSE Tumbleweed","name":"distribution","label":"distribution&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/distribution&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.1.1-9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.1-9.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"go-containerregistry&distro=openSUSE Tumbleweed","name":"go-containerregistry","label":"go-containerregistry&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/go-containerregistry&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.22.1-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.22.1-2.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"google-osconfig-agent&distro=openSUSE Leap 16.0","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=openSUSE Leap 16.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/google-osconfig-agent&distro=openSUSE Leap 16.0","purlType":"rpm","versions":[{"text":"< 20260928.01-160000.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-160000.1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"google-osconfig-agent&distro=openSUSE Tumbleweed","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/google-osconfig-agent&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 20260928.01-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"hauler&distro=openSUSE Tumbleweed","name":"hauler","label":"hauler&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/hauler&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 2.1.1-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.1-1.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"helm3&distro=openSUSE Tumbleweed","name":"helm3","label":"helm3&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/helm3&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.22.0-3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.22.0-3.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"buildah","name":"buildah","label":"buildah","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/buildah","purlType":"rpm","versions":[{"text":"< 0:1.45.1-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.45.1-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"k6v1","name":"k6v1","label":"k6v1","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/k6v1","purlType":"rpm","versions":[{"text":"< 0:1.8.1-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.8.1-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"k6v2","name":"k6v2","label":"k6v2","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/k6v2","purlType":"rpm","versions":[{"text":"< 0:2.3.0-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.3.0-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"loki3.7","name":"loki3.7","label":"loki3.7","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/loki3.7","purlType":"rpm","versions":[{"text":"< 0:3.7.8-0.3.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.7.8-0.3.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"loki3.7-canary","name":"loki3.7-canary","label":"loki3.7-canary","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/loki3.7-canary","purlType":"rpm","versions":[{"text":"< 0:3.7.8-0.3.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.7.8-0.3.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"loki3.7-logcli","name":"loki3.7-logcli","label":"loki3.7-logcli","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/loki3.7-logcli","purlType":"rpm","versions":[{"text":"< 0:3.7.8-0.3.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.7.8-0.3.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"nats-server2.12","name":"nats-server2.12","label":"nats-server2.12","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/nats-server2.12","purlType":"rpm","versions":[{"text":"< 0:2.12.15-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.12.15-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"nats-server2.14","name":"nats-server2.14","label":"nats-server2.14","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/nats-server2.14","purlType":"rpm","versions":[{"text":"< 0:2.14.7-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.14.7-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman","name":"podman","label":"podman","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman","purlType":"rpm","versions":[{"text":"< 0:6.1.2-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:6.1.2-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-docker","name":"podman-docker","label":"podman-docker","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-docker","purlType":"rpm","versions":[{"text":"< 0:6.1.2-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:6.1.2-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-machine","name":"podman-machine","label":"podman-machine","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-machine","purlType":"rpm","versions":[{"text":"< 0:6.1.2-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:6.1.2-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"podman-remote","name":"podman-remote","label":"podman-remote","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podman-remote","purlType":"rpm","versions":[{"text":"< 0:6.1.2-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:6.1.2-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"podmansh","name":"podmansh","label":"podmansh","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/podmansh","purlType":"rpm","versions":[{"text":"< 0:6.1.2-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:6.1.2-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"rekor","name":"rekor","label":"rekor","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rekor","purlType":"rpm","versions":[{"text":"< 0:1.5.4-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.5.4-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"rekor-server","name":"rekor-server","label":"rekor-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rekor-server","purlType":"rpm","versions":[{"text":"< 0:1.5.4-0.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.5.4-0.1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"skopeo","name":"skopeo","label":"skopeo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/skopeo","purlType":"rpm","versions":[{"text":"< 0:1.24.1-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.24.1-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"skopeo-tests","name":"skopeo-tests","label":"skopeo-tests","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/skopeo-tests","purlType":"rpm","versions":[{"text":"< 0:1.24.1-1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.24.1-1.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"spire1.15","name":"spire1.15","label":"spire1.15","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/spire1.15","purlType":"rpm","versions":[{"text":"< 0:1.15.3-0.2.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.15.3-0.2.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"spire1.15-agent","name":"spire1.15-agent","label":"spire1.15-agent","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/spire1.15-agent","purlType":"rpm","versions":[{"text":"< 0:1.15.3-0.2.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.15.3-0.2.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"spire1.15-oidc-discovery-provider","name":"spire1.15-oidc-discovery-provider","label":"spire1.15-oidc-discovery-provider","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/spire1.15-oidc-discovery-provider","purlType":"rpm","versions":[{"text":"< 0:1.15.3-0.2.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.15.3-0.2.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"spire1.15-server","name":"spire1.15-server","label":"spire1.15-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/spire1.15-server","purlType":"rpm","versions":[{"text":"< 0:1.15.3-0.2.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.15.3-0.2.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"tempo2.10","name":"tempo2.10","label":"tempo2.10","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/tempo2.10","purlType":"rpm","versions":[{"text":"< 0:2.10.8-0.4.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.10.8-0.4.hum1","eol":null,"hubHref":null},{"vendor":"redhat","product":"tempo3.0","name":"tempo3.0","label":"tempo3.0","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/tempo3.0","purlType":"rpm","versions":[{"text":"< 0:3.0.3-0.4.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.0.3-0.4.hum1","eol":null,"hubHref":null},{"vendor":"suse","product":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4","name":"amazon-cloudwatch-agent","label":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4","purlType":"rpm","versions":[{"text":"< 1.300073.0-150400.9.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.300073.0-150400.9.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5","name":"amazon-cloudwatch-agent","label":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5","purlType":"rpm","versions":[{"text":"< 1.300073.0-150400.9.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.300073.0-150400.9.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6","name":"amazon-cloudwatch-agent","label":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6","purlType":"rpm","versions":[{"text":"< 1.300073.0-150400.9.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.300073.0-150400.9.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP7","name":"amazon-cloudwatch-agent","label":"amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP7","purlType":"rpm","versions":[{"text":"< 1.300073.0-150400.9.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.300073.0-150400.9.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"distribution&distro=SUSE Linux Enterprise Server 16.0","name":"distribution","label":"distribution&distro=SUSE Linux Enterprise Server 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/distribution&distro=SUSE Linux Enterprise Server 16.0","purlType":"rpm","versions":[{"text":"< 3.1.1-160000.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.1-160000.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"distribution&distro=SUSE Linux Enterprise Server for SAP applications 16.0","name":"distribution","label":"distribution&distro=SUSE Linux Enterprise Server for SAP applications 16.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/distribution&distro=SUSE Linux Enterprise Server for SAP applications 16.0","purlType":"rpm","versions":[{"text":"< 3.1.1-160000.5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.1-160000.5.1","eol":null,"hubHref":null},{"vendor":"suse","product":"google-osconfig-agent&distro=SUSE Linux Enterprise Micro 5.5","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=SUSE Linux Enterprise Micro 5.5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE Linux Enterprise Micro 5.5","purlType":"rpm","versions":[{"text":"< 20260928.01-150000.1.70.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-150000.1.70.1","eol":null,"hubHref":null},{"vendor":"suse","product":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 12","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 12","purlType":"rpm","versions":[{"text":"< 20260928.01-1.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-1.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4","purlType":"rpm","versions":[{"text":"< 20260928.01-150000.1.70.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-150000.1.70.1","eol":null,"hubHref":null},{"vendor":"suse","product":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5","purlType":"rpm","versions":[{"text":"< 20260928.01-150000.1.70.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-150000.1.70.1","eol":null,"hubHref":null},{"vendor":"suse","product":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6","purlType":"rpm","versions":[{"text":"< 20260928.01-150000.1.70.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-150000.1.70.1","eol":null,"hubHref":null},{"vendor":"suse","product":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP7","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP7","purlType":"rpm","versions":[{"text":"< 20260928.01-150000.1.70.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-150000.1.70.1","eol":null,"hubHref":null},{"vendor":"suse","product":"google-osconfig-agent&distro=SUSE Linux Micro 6.0","name":"google-osconfig-agent","label":"google-osconfig-agent&distro=SUSE Linux Micro 6.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/google-osconfig-agent&distro=SUSE Linux Micro 6.0","purlType":"rpm","versions":[{"text":"< 20260928.01-159998.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20260928.01-159998.1.1","eol":null,"hubHref":null}],"affectedCount":51,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw","label":"github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw","hostname":"github.com","tags":["X Refsource CONFIRM","ARTICLE","REPORT","Advisory"]},{"url":"https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536","label":"github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536","hostname":"github.com","tags":["X Refsource MISC","ARTICLE","REPORT"]},{"url":"https://github.com/klauspost/compress/releases/tag/v1.18.7","label":"github.com/klauspost/compress/releases/tag/v1.18.7","hostname":"github.com","tags":["X Refsource MISC","ARTICLE","REPORT"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264554-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264554-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1283672","label":"bugzilla.suse.com/1283672","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63209","label":"www.suse.com/security/cve/CVE-2026-63209","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54413","label":"access.redhat.com/errata/RHSA-2026:54413","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://images.redhat.com/","label":"images.redhat.com","hostname":"images.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-63209","label":"access.redhat.com/security/cve/CVE-2026-63209","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/updates/classification/","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54413.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54413.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543236","label":"bugzilla.redhat.com/show_bug.cgi?id=2543236","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63209","label":"www.cve.org/CVERecord?id=CVE-2026-63209","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63209","label":"nvd.nist.gov/vuln/detail/CVE-2026-63209","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54419","label":"access.redhat.com/errata/RHSA-2026:54419","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54419.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54419.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58472","label":"access.redhat.com/errata/RHSA-2026:58472","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56851","label":"access.redhat.com/security/cve/CVE-2026-56851","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58472.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_58472.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68256","label":"access.redhat.com/errata/RHSA-2026:68256","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68256.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68256.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70031","label":"access.redhat.com/errata/RHSA-2026:70031","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70031.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70031.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70670","label":"access.redhat.com/errata/RHSA-2026:70670","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70670.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70670.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70684","label":"access.redhat.com/errata/RHSA-2026:70684","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70684.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70684.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70726","label":"access.redhat.com/errata/RHSA-2026:70726","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70726.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_70726.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72490","label":"access.redhat.com/errata/RHSA-2026:72490","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-93450","label":"access.redhat.com/security/cve/CVE-2026-93450","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72490.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72490.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72491","label":"access.redhat.com/errata/RHSA-2026:72491","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72491.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72491.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72493","label":"access.redhat.com/errata/RHSA-2026:72493","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72493.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72493.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72496","label":"access.redhat.com/errata/RHSA-2026:72496","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72496.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72496.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-63209","label":"ubuntu.com/security/CVE-2026-63209","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-63209","label":"security-tracker.debian.org/tracker/CVE-2026-63209","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa","label":"github.com/klauspost/compress/commit/8668e357e776d5152ed62f33c17f21b8690664fa","hostname":"github.com","tags":["FIX"]},{"url":"https://bugzilla.suse.com/1283762","label":"bugzilla.suse.com/1283762","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-24786","label":"access.redhat.com/security/cve/CVE-2024-24786","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268046","label":"bugzilla.redhat.com/show_bug.cgi?id=2268046","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-24786","label":"www.cve.org/CVERecord?id=CVE-2024-24786","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24786","label":"nvd.nist.gov/vuln/detail/CVE-2024-24786","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://go.dev/cl/569356","label":"go.dev/cl/569356","hostname":"go.dev","tags":["ARTICLE"]},{"url":"https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/","label":"groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/","hostname":"groups.google.com","tags":["ARTICLE"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2611","label":"pkg.go.dev/vuln/GO-2024-2611","hostname":"pkg.go.dev","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264661-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264661-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264662-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264662-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1283594","label":"bugzilla.suse.com/1283594","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624131-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-202624131-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624153-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-202624153-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1283657","label":"bugzilla.suse.com/1283657","hostname":"bugzilla.suse.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2024-24786"],"downstream":["OPENSUSE-SU-2026:11963-1","OPENSUSE-SU-2026:12114-1","OPENSUSE-SU-2026:12163-1","OPENSUSE-SU-2026:12186-1","OPENSUSE-SU-2026:22057-1","OPENSUSE-SU-2026:22116-1","RHSA-2026:68272","RHSA-2026:68290","RHSA-2026:68591","RHSA-2026:68717","RHSA-2026:68729","RHSA-2026:68806","RHSA-2026:68808","RHSA-2026:72492","RHSA-2026:72497","RHSA-2026:72498","RHSA-2026:72507","RHSA-2026:72570","SUSE-SU-2026:24120-1"],"duplicates":[],"related":["CGA-6H67-2J3Q-Q9QR","OPENSUSE-SU-2026:11963-1","OPENSUSE-SU-2026:12114-1","OPENSUSE-SU-2026:12163-1","OPENSUSE-SU-2026:12186-1","OPENSUSE-SU-2026:22057-1","OPENSUSE-SU-2026:22116-1","SUSE-SU-2026:24120-1"]},"timeline":[{"kind":"published","date":"2026-09-29T14:58:53.366Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-29T16:32:32.677Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:09:30.448Z","stale":false,"partial":false}}