Priority MEDIUM 40
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.
RHSA-2026:95126
RHTAS 1.5.1 - Red Hat Trusted Artifact Signer Release
Released 2026-11-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.5 registry.redhat.io/rhtas/certificate-transparency-rhel9, registry.redhat.io/rhtas/timestamp-authority-rhel9, registry.redhat.io/rhtas/trillian-logserver-rhel9 +1
Fixes 2 records
TI-2026-26189 CVE-2026-33818 · GHSA-xc2p-8ggw-6cr5
Enforce maximum recursion depth in encoding/asn1
Priority MEDIUM 40
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.