High [CVE-2026-56852] Denial of Service via invalid UTF-8 input
This high-severity Red Hat Linux advisory covers CVE-2026-56852.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
Denial of Service via invalid UTF-8 input. Red Hat rates this important (CVSS 7.5).
Weakness: CWE-835. Red Hat lists fixing advisory RHSA-2026:49360 with package prometheus3-5-main-3.5.5-0.3.hum1, buildah-main-1.45.0-2.hum1, opentofu1-10-main-1.10.10-0.3.hum1, podman-main-6.0.2-2.1.hum1.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 2 months ago·verify at source
- prometheus3-5-main-3.5.5-0.3.hum1
- buildah-main-1.45.0-2.hum1
- opentofu1-10-main-1.10.10-0.3.hum1
- podman-main-6.0.2-2.1.hum1
- skopeo-main-1.24.0-2.hum1
- caddy-main-2.11.4-0.3.hum1
- opentofu1-12-main-1.12.5-0.2.hum1
- buildah-main-1.44.0-3.3.hum1
- go-fdo-server-main-1.0.1-0.5.hum1
- hugo-main-0.164.0-0.1.2.hum1
- kubernetes1-35-main-1.35.6-2.1.hum1
- opentelemetry-collector-contrib-main-0.157.0-0.1.hum1
- grype-main-0.116.0-0.1.hum1
- opentelemetry-collector-main-0.157.0-0.1.hum1
- skopeo-main-1.23.0-3.1.hum1
- jaeger-main-2.20.0-0.2.hum1
- syft-main-1.49.0-0.1.hum1
- spire1-15-main-1.15.2-0.3.hum1
- oauth2-proxy-main-7.15.3-0.3.hum1
- prometheus3-13-main-3.13.1-0.3.hum1
- RHSA-2026:49360
Official advisory · high-confidence parse· fetched 2 months ago·verify at source
Mitigation
Upgrade to a fixed release: prometheus3-5-main-3.5.5-0.3.hum1, buildah-main-1.45.0-2.hum1, opentofu1-10-main-1.10.10-0.3.hum1, podman-main-6.0.2-2.1.hum1, skopeo-main-1.24.0-2.hum1, caddy-main-2.11.4-0.3.hum1. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
Official advisory · high-confidence parse· fetched 2 months ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.