amazon-ecs-init vulnerabilities (openSUSE)

11 vulnerabilities.

• amazon-ecs-init openSUSE gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers CVE-2026-84445 Fix available 8.7 HighSeptember 4, 2026
• amazon-ecs-init openSUSE gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation CVE-2026-84304 Fix available 8.7 HighSeptember 1, 2026
• amazon-ecs-init openSUSE gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion CVE-2026-84303 Fix available 6.3 MediumSeptember 1, 2026
• amazon-ecs-init openSUSE Infinite loop on invalid input in golang.org/x/text CVE-2026-56852 Public exploitFix available 7.5 HighJuly 14, 2026
• amazon-ecs-init openSUSE cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow CVE-2026-10722 Fix available 4.8 MediumJune 3, 2026
• amazon-ecs-init openSUSE OpenTelemetry-Go's baggage parsing no longer caps raw header length CVE-2026-41178 Fix available 5.3 MediumMay 28, 2026
• amazon-ecs-init openSUSE Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net CVE-2026-33814 Fix available 7.5 HighMay 7, 2026
• amazon-ecs-init openSUSE Denial of service in the event stream header decoder in AWS SDK for Go v2 CVE-2026-89090 Fix available 8.2 HighApril 8, 2026
• amazon-ecs-init openSUSE Security update for amazon-ecs-init SUSE-SU-2023:3522-1 Fix available No scoreSeptember 5, 2023
• amazon-ecs-init openSUSE Security update for amazon-ecs-init SUSE-SU-2023:2762-1 Fix available No scoreJuly 3, 2023
• amazon-ecs-init openSUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna CVE-2026-39821 Fix available 9.6 CriticalNovember 5, 2016