CLEANSTART-2026-QR53256: compress provides various compression algorithms
CVE-2026-116591 affects multiple packages. compress provides various compression algorithms. See references for individual vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/lokito a version that resolves this vulnerability.Fixed in 3.4.6-r4 - Upgrade
Upgrade
cleanstart/lokito a version that resolves this vulnerability.Fixed in 3.5.12-r9 - Upgrade
Upgrade
cleanstart/lokito a version that resolves this vulnerability.Fixed in 3.7.9-r1 - Upgrade
Upgrade
cleanstart/jaegerto a version that resolves this vulnerability.Fixed in 2.20.0-r0 - Upgrade
Upgrade
cleanstart/jaegerto a version that resolves this vulnerability.Fixed in 2.21.0-r0 - Upgrade
Upgrade
cleanstart/jaegerto a version that resolves this vulnerability.Fixed in 2.22.0-r1
Frequently Asked Questions
Which deployments should be prioritized for assessment?
Deployments using cleanstart/loki or cleanstart/jaeger should be prioritized. The reported severity is high, with a score of 8.7.
What access does an attacker need to exploit this issue?
The vector indicates network reachability is required, with low attack complexity. No privileges or user interaction are required.
What is the reported security impact?
The reported impact is on availability only; confidentiality and integrity impacts are listed as none. The availability impact is rated high.