The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade udicaUpgrade aardvark-dnsUpgrade grafana-pcpUpgrade netavarkUpgrade critUpgrade buildah-testsUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade grafana-selinuxUpgrade podman-dockerUpgrade golang-raceUpgrade golang-testsUpgrade golangUpgrade podmanUpgrade runcUpgrade python3-podmanUpgrade conmonUpgrade toolboxUpgrade golang-binUpgrade golang-miscUpgrade skopeoUpgrade criuUpgrade golang-srcUpgrade golang-docsUpgrade podman-catatonitUpgrade buildahUpgrade podman-remoteUpgrade toolbox-testsUpgrade container-selinuxUpgrade libslirpUpgrade libslirp-develUpgrade crunUpgrade criu-libsUpgrade slirp4netnsUpgrade criu-develUpgrade podman-testsUpgrade opentelemetry-collectorUpgrade cockpit-podmanUpgrade go-toolsetUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade osbuild-composer-workerUpgrade podman-gvproxyUpgrade containers-commonUpgrade skopeo-testsUpgrade osbuild-composer-coreUpgrade podman-pluginsUpgrade grafana | Oct 11, 2026 | Aug 26, 2026 |
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-tests | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-misc | Sep 1, 2026 | Aug 13, 2026 |
| Oracle_linux | — | Upgrade libslirpUpgrade criu-develUpgrade libslirp-develUpgrade container-selinuxUpgrade podman-pluginsUpgrade skopeo-testsUpgrade go-toolsetUpgrade golang-docsUpgrade grafanaUpgrade python3-criuUpgrade critUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade grafana-pcpUpgrade osbuild-composer-workerUpgrade containers-commonUpgrade delveUpgrade criu-libsUpgrade osbuild-composerUpgrade udicaUpgrade podman-remoteUpgrade cockpit-podmanUpgrade skopeoUpgrade golangUpgrade runcUpgrade podman-dockerUpgrade podman-catatonitUpgrade slirp4netnsUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade netavarkUpgrade podman-testsUpgrade podman-gvproxyUpgrade golang-testsUpgrade buildahUpgrade python3-podmanUpgrade golang-miscUpgrade fuse-overlayfsUpgrade podmanUpgrade golang-srcUpgrade osbuild-composer-coreUpgrade golang-raceUpgrade conmonUpgrade criuUpgrade golang-binUpgrade buildah-testsUpgrade ipp-usbUpgrade grafana-selinux | Oct 22, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade openshiftUpgrade cri-oUpgrade openshift-clientsUpgrade microshift | Sep 30, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade podman-catatonitUpgrade ignition-grubUpgrade criu-debugsourceUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade automation-eda-controller-base-servicesUpgrade automation-hubUpgrade golangNo solution existsUpgrade automation-controller-uiUpgrade ignition-edgeUpgrade golang-srcUpgrade runc-debugsourceUpgrade python3.12-django-ansible-base+resource_registryUpgrade python3.12-django-ansible-base+redis_clientUpgrade osbuild-composer-debuginfoUpgrade toolboxUpgrade rhc-debugsourceUpgrade python3.12-sqlparseUpgrade automation-controller-venv-towerUpgrade conmonUpgrade libslirpUpgrade automation-gateway-proxy-debugsourceUpgrade ignition-validate-debuginfoUpgrade buildah-tests-debuginfoUpgrade grafana-pcp-debugsourceUpgrade grafana-pcpUpgrade grafana-pcp-debuginfoUpgrade skopeoUpgrade buildahUpgrade automation-controllerUpgrade automation-gateway-proxy-server-debuginfoUpgrade automation-eda-controller-event-stream-servicesUpgrade delve-debugsourceUpgrade fuse-overlayfsUpgrade ignition-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade grafana-selinuxUpgrade go-fdo-server-ownerUpgrade automation-controller-cliUpgrade ignitionUpgrade automation-controller-serverUpgrade podman-dockerUpgrade receptorctlUpgrade rhc-worker-playbook-debugsourceUpgrade podman-gvproxyUpgrade rhc-worker-playbookUpgrade toolbox-testsUpgrade python3-podmanUpgrade containers-commonUpgrade image-builderUpgrade rhc-worker-playbook-debuginfoUpgrade image-builder-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade criuUpgrade aardvark-dnsUpgrade criu-libsUpgrade crun-debugsourceUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade automation-gateway-proxyUpgrade flightctl-cliUpgrade podmanUpgrade python3.12-django-ansible-base+api_documentationUpgrade ipp-usbUpgrade netavarkUpgrade grafana-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade go-fdo-server-manufacturerUpgrade golang-miscUpgrade golang-testsUpgrade osbuild-composer-tests-debuginfoUpgrade osbuild-composer-coreUpgrade python3.12-django-ansible-base+activitystreamUpgrade skopeo-debugsourceUpgrade automation-gatewayUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade runcUpgrade podman-debuginfoUpgrade golang-binUpgrade flightctl-servicesUpgrade python3-criuUpgrade python3.12-django-ansible-baseUpgrade grafanaUpgrade automation-eda-controller-worker-servicesUpgrade python3.12-galaxy-ngUpgrade podman-remoteUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composerUpgrade ipp-usb-debuginfoUpgrade buildah-debugsourceUpgrade go-fdo-serverUpgrade podman-tests-debuginfoUpgrade python3.12-gitpythonUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade go-fdo-server-rendezvousUpgrade automation-eda-controllerUpgrade automation-gateway-proxy-serverUpgrade aap-metrics-utilityUpgrade criu-libs-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade rhcUpgrade toolbox-debugsourceUpgrade python3.12-django-ansible-base+channel_authUpgrade podman-gvproxy-debuginfoUpgrade ignition-debugsourceUpgrade receptor-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade runc-debuginfoUpgrade rhc-debuginfoUpgrade crun-debuginfoUpgrade opentelemetry-collectorUpgrade go-fdo-server-debugsourceUpgrade automation-gateway-serverUpgrade crunUpgrade python3-sqlparseUpgrade automation-gateway-configUpgrade delveUpgrade python3.12-django-ansible-base+rbacUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade python3.12-django-ansible-base+feature_flagsUpgrade golang-docsUpgrade image-builder-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade grafana-debugsourceUpgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade flightctl-agentUpgrade criu-develUpgrade critUpgrade automation-platform-uiUpgrade slirp4netnsUpgrade receptorUpgrade udicaUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade conmon-debuginfoUpgrade automation-eda-controller-baseUpgrade toolbox-debuginfoUpgrade python3.12-django-ansible-base+rest_filtersUpgrade skopeo-debuginfoUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade podman-debugsourceUpgrade podman-testsUpgrade python3.12-django-ansible-base+authenticationUpgrade libslirp-develUpgrade osbuild-composer-workerUpgrade flightctl-observabilityUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade ignition-validateUpgrade flightctl-selinuxUpgrade podman-pluginsUpgrade receptor-debuginfoUpgrade go-fdo-server-debuginfo | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade python3-criuUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-workerUpgrade osbuild-composer-worker-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade critUpgrade osbuild-composer-debuginfoUpgrade crun-debuginfoUpgrade podman-pluginsUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade conmonUpgrade buildah-debuginfoUpgrade grafana-selinuxUpgrade go-fdo-server-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade toolbox-testsUpgrade osbuild-composer-core-debuginfoUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade grafana-pcp-debuginfoUpgrade image-builder-debugsourceUpgrade buildahUpgrade image-builder-debuginfoUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-binUpgrade grafanaUpgrade grafana-pcpUpgrade delve-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade criuUpgrade podman-tests-debuginfoUpgrade osbuild-composer-coreUpgrade image-builderUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade golangUpgrade grafana-pcp-debugsourceUpgrade toolboxUpgrade skopeo-debugsourceUpgrade skopeoUpgrade podman-testsUpgrade podman-catatonitUpgrade podmanUpgrade netavarkUpgrade libslirpUpgrade go-fdo-server-debuginfoUpgrade ipp-usbUpgrade libslirp-debuginfoUpgrade osbuild-composerUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade criu-libsUpgrade go-fdo-serverUpgrade grafana-debugsourceUpgrade opentelemetry-collectorUpgrade delveUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade podman-plugins-debuginfoUpgrade ipp-usb-debuginfoUpgrade crunUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-debuginfo | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub