OPENSUSE-SU-2026:21379-1

Advisory lineage Upstream: 5 Downstream: 0
Published: 18 Jul 2026, 19:25
Last modified:22 Jul 2026, 18:25

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Jul 2026, 19:25
Published
Vulnerability first disclosed
22 Jul 2026, 18:25
Last Modified
Vulnerability information updated

Description

Security update for ctop This update for ctop fixes the following issues: Changes in ctop embedded dependencies: - CVE-2022-21698: client_golang: Denial of service using InstrumentHandlerCounter (bsc#1248710) - CVE-2024-45310: runc: runc can be tricked into creating empty files (bsc#1257431) - CVE-2026-10722: ebpf: Crash when parsing malformed ELF/BTF input (bsc#1267805) - CVE-2026-33814: net: Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265800) - CVE-2026-39821: net: Failure to reject ASCII-only Punycode-encoded labels (bsc#1266632)

Affected Systems

  • opensuse•ctop&distro=openSUSE Leap 16.0

    < 0.7.7-bp160.2.1

References (10)