Description
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| golang.org/x/text | golang.org/x/text/language | < 0.3.8 | 0.3.8 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-golang-x-text | 0.3.8-1 | — |
| Debian 13 | golang-golang-x-text | 0.3.8-1 | — |
| Debian 12 | golang-golang-x-text | 0.3.8-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | golang-golang-x-text | 0.3.7-1ubuntu0.20.04.1 | USN-5873-1 |
| Ubuntu 20.04 LTS | golang-golang-x-text | 0.3.2-4ubuntu0.1 | USN-5873-1 |
| Ubuntu 20.04 LTS | golang-x-text | No fix yet | — |
| Ubuntu 18.04 LTS | golang-x-text | 0.0~git20170627.0.6353ef0-1ubuntu2.1 | USN-5873-1 |
| Ubuntu 16.04 LTS | golang-x-text | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.8 EUS | aardvark-dns | 2:1.5.0-2.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | buildah +1 | 1:1.29.3-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | cockpit-podman | 63.1-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | conmon | 3:2.1.6-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | container-selinux | 2:2.229.0-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | containernetworking-plugins | 1:1.2.0-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | containers-common | 2:1-65.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | crit +4 | 3.15-4.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | crun | 1.8.4-2.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | fuse-overlayfs | 1.11-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | libslirp +1 | 4.4.0-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | netavark | 2:1.5.1-3.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | oci-seccomp-bpf-hook | 1.2.8-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | podman +6 | 3:4.4.1-19.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | python-podman +1 | 4.4.1-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | runc | 1:1.1.12-1.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | skopeo +1 | 2:1.11.2-0.2.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | slirp4netns | 1.2.0-3.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | toolbox +1 | 0.0.99.3-7.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.8 EUS | udica | 0.2.6-20.module+el8.8.0+21741+dd5be1e7 | RHSA-2024:2077 |
| RHEL 8.6 EUS | buildah +1 | 1:1.26.2-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | cockpit-podman | 49.1-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | conmon | 2:2.1.4-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | container-selinux | 2:2.189.0-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | containernetworking-plugins | 1:1.1.1-4.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | containers-common | 2:1-40.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | crit +4 | 3.15-3.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | crun | 1.5-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | fuse-overlayfs | 1.9-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | libslirp +1 | 4.4.0-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | podman +6 | 2:4.2.0-2.module+el8.6.0+21674+8010760f | RHSA-2024:1994 |
| RHEL 8.6 EUS | python-podman +1 | 4.0.1-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | runc | 1:1.1.12-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | skopeo +1 | 2:1.9.1-1.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | slirp4netns | 1.2.0-3.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| RHEL 8.6 EUS | udica | 0.2.6-5.module+el8.6.0+21266+3e24c7b3 | RHSA-2024:1994 |
| Red Hat OpenShift 4 | buildah +1 | 1:1.23.4-5.rhaos4.12.el9 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | conmon | 2:2.1.2-4.rhaos4.12.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1.0.1-7.rhaos4.12.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | kernel-rt +15 | 4.18.0-372.59.1.rt7.217.el8_6 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | openshift +1 | 4.12.0-202306121916.p0.g8c21020.assembly.stream.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.12.0-202306090942.p0.g3c01edd.assembly.stream.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.12.0-202306140156.p0.g31dd228.assembly.stream.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | openshift4-aws-iso | 4.12.0-202306090942.p0.gd2acdd5.assembly.stream.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | perf +30 | 4.18.0-372.59.1.el8_6 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | podman +6 | 3:4.2.0-6.1.rhaos4.12.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | runc | 3:1.1.6-4.rhaos4.12.el8 | RHSA-2023:3613 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.9.4-3.rhaos4.12.el9 | RHSA-2023:3613 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Container Native Virtualization 4 | kubevirt +2 | 4.13.0-1469.el7 | RHSA-2023:3204 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| SLES 15 SP4 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| SLES 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES 12 SP5 | golang-github-prometheus-node_exporter | 1.5.0-1.27.2 | SUSE-SU-2023:3867-1 |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES for SAP 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLES for SAP 12 SP5 | golang-github-prometheus-node_exporter | 1.5.0-1.27.2 | SUSE-SU-2023:3867-1 |
| SLE HPC 15 SP2 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SLE HPC 15 SP1 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Server Module 4.3 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Server Module 4.3 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.17.2 | SUSE-SU-2023:3868-1 |
| SUSE Manager Server Module 4.2 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Server Module 4.2 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.17.2 | SUSE-SU-2023:3868-1 |
| SUSE Manager Server Module 4.2 | prometheus-postgres_exporter | 0.10.1-150000.1.14.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.17.2 | SUSE-SU-2023:3868-1 |
| SUSE Manager Proxy Module 4.3 | prometheus-blackbox_exporter | 0.24.0-150000.1.23.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Proxy Module 4.3 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Proxy Module 4.2 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Proxy Module 4.2 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.17.2 | SUSE-SU-2023:3868-1 |
| SUSE Manager Proxy Module 4.2 | prometheus-blackbox_exporter | 0.24.0-150000.1.23.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Proxy Module 4.2 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools for SLE Micro 5 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools for SLE Micro 5 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools for SLE Micro 5 | prometheus-blackbox_exporter | 0.24.0-150000.1.23.3 | SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | golang-github-QubitProducts-exporter_exporter | 0.4.0-1.6.1 | SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | golang-github-lusitaniae-apache_exporter | 1.0.0-1.8.1 | SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | golang-github-prometheus-node_exporter | 1.5.0-1.9.2 | SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | prometheus-postgres_exporter | 0.10.1-1.9.2 | SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | scap-security-guide | 0.1.69-1.12.2 | SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | spacecmd | 4.3.23-1.18.2 | SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | dracut-saltboot | 0.1.1681904360.84ef141-159000.3.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | golang-github-QubitProducts-exporter_exporter | 0.4.0-159000.4.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | prometheus-blackbox_exporter | 0.24.0-159000.3.6.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools Beta for SLE Micro 5 | uyuni-proxy-systemd-services | 5.0.1-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | ansible | 2.9.27-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools 15 | golang-github-boynux-squid_exporter | 1.6-159000.4.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.17.2 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools 15 | golang-github-prometheus-prometheus | 2.45.0-150000.3.50.3 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools 15 | grafana | 9.5.1-150000.1.48.5 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | mgr-daemon | 4.3.7-150000.1.41.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | mgr-push | 5.0.1-159000.4.21.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | prometheus-blackbox_exporter | 0.24.0-150000.1.23.3 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools 15 | prometheus-postgres_exporter | 0.10.1-150000.1.14.3 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools 15 | python-hwdata | 2.3.5-159000.5.13.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | python-pyvmomi | 6.7.3-150000.1.6.2 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools 15 | rhnlib | 5.0.1-159000.6.30.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | spacecmd | 4.3.21-150000.3.98.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 5.0.1-159000.6.48.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-salt | 1.2.2-159000.5.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | supportutils-plugin-susemanager-client | 4.3.3-150000.3.21.2 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.3.8-150000.1.33.1 | SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 15 | uyuni-proxy-systemd-services | 5.0.1-159000.3.9.1 | SUSE-SU-2024:0196-1 |
| SUSE Manager Client Tools 15 | zypp-plugin-spacewalk | 1.0.14-150000.3.35.1 | SUSE-SU-2023:2578-1 |
| SUSE Manager Client Tools 12 | golang-github-QubitProducts-exporter_exporter | 0.4.0-1.12.2 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | golang-github-boynux-squid_exporter | 1.6-4.9.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | golang-github-lusitaniae-apache_exporter | 1.0.0-1.18.2 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-alertmanager | 0.23.0-1.21.2 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-node_exporter | 1.5.0-1.27.2 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-prometheus | 2.45.0-1.47.3 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-promu | 0.14.0-4.12.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | grafana | 9.5.1-1.48.1 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | kiwi-desc-saltboot | 0.1.1687520761.cefb248-4.15.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | mgr-daemon | 4.3.7-1.41.1 | SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | mgr-push | 5.0.1-4.21.4 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | prometheus-blackbox_exporter | 0.24.0-1.23.2 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | prometheus-postgres_exporter | 0.10.1-1.14.3 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | python-hwdata | 2.3.5-15.12.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | rhnlib | 5.0.1-24.30.3 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | spacecmd | 4.3.21-38.121.1 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | supportutils-plugin-salt | 1.2.2-9.9.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | supportutils-plugin-susemanager-client | 4.3.3-6.27.2 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1 |
| SUSE Manager Client Tools 12 | system-user-grafana +1 | 1.0.0-3.7.2 | SUSE-SU-2024:0191-1 |
| SUSE Manager Client Tools 12 | uyuni-common-libs | 4.3.8-1.33.1 | SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2579-1 |
| SUSE Manager Client Tools 12 | zypp-plugin-spacewalk | 1.0.14-30.42.1 | SUSE-SU-2023:2579-1 |
| SUSE Enterprise Storage 7 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| SUSE EL-9:Update:Products:ManagerTools:Update | golang-github-QubitProducts-exporter_exporter | 0.4.0-1.6.1 | SUSE-SU-2023:3875-1 |
| SUSE EL-9:Update:Products:ManagerTools:Update | golang-github-lusitaniae-apache_exporter | 1.0.0-1.8.1 | SUSE-SU-2023:3875-1 |
| SUSE EL-9:Update:Products:ManagerTools:Update | golang-github-prometheus-node_exporter | 1.5.0-1.9.2 | SUSE-SU-2023:3875-1 |
| SUSE EL-9:Update:Products:ManagerTools:Update | prometheus-postgres_exporter | 0.10.1-1.9.2 | SUSE-SU-2023:3875-1 |
| SUSE EL-9:Update:Products:ManagerTools:Update | scap-security-guide | 0.1.69-1.12.2 | SUSE-SU-2023:3875-1 |
| SUSE EL-9:Update:Products:ManagerTools:Update | spacecmd | 4.3.23-1.18.2 | SUSE-SU-2023:3875-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | gitleaks | 8.18.3-1.1 | openSUSE-SU-2024:14015-1 |
| openSUSE Tumbleweed | golang-github-lusitaniae-apache_exporter | 1.0.0-1.1 | openSUSE-SU-2024:13109-1 |
| openSUSE Tumbleweed | grafana | 9.3.6-1.1 | openSUSE-SU-2024:12723-1 |
| openSUSE Tumbleweed | starboard | 0.15.11-1.1 | openSUSE-SU-2024:12426-1 |
| openSUSE Leap 15.5 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.5 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.5 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.17.2 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.5 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| openSUSE Leap 15.5 | prometheus-blackbox_exporter | 0.24.0-150000.1.23.3 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.5 | prometheus-postgres_exporter | 0.10.1-150000.1.14.3 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.5 | spacecmd | 4.3.21-150000.3.98.1 | SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.5 | supportutils-plugin-susemanager-client | 4.3.3-150000.3.21.2 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.5 | wire | 0.5.0-150000.1.12.3 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | bind | 9.16.6-150000.12.65.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | dracut-saltboot | 0.1.1681904360.84ef141-150000.1.50.1 | SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150000.1.18.3 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.4 | golang-github-lusitaniae-apache_exporter | 1.0.0-150000.1.17.2 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.4 | grafana | 9.5.1-150200.3.41.3 | SUSE-SU-2023:2575-1 |
| openSUSE Leap 15.4 | prometheus-blackbox_exporter | 0.24.0-150000.1.23.3 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.4 | prometheus-postgres_exporter | 0.10.1-150000.1.14.3 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.4 | spacecmd | 4.3.21-150000.3.98.1 | SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1 |
| openSUSE Leap 15.4 | supportutils-plugin-susemanager-client | 4.3.3-150000.3.21.2 | SUSE-SU-2023:3868-1 |
| openSUSE Leap 15.4 | wire | 0.5.0-150000.1.12.3 | SUSE-SU-2023:2578-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.24 | gitea | 1.17.3-r0 | — |
| Alpine v3.23 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.23 | gitea | 1.17.3-r0 | — |
| Alpine v3.22 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.22 | gitea | 1.17.3-r0 | — |
| Alpine v3.21 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.21 | gitea | 1.17.3-r0 | — |
| Alpine v3.20 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.20 | gitea | 1.17.3-r0 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.19 | gitea | 1.17.3-r0 | — |
| Alpine v3.18 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.18 | gitea | 1.17.3-r0 | — |
| Alpine v3.17 | docker-cli-compose | 2.15.1-r0 | — |
| Alpine v3.17 | gitea | 1.17.3-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | buildah | 1.41.4-2 | — |
| Azure Linux 3 | cni | 1.1.2-3 | — |
| Azure Linux 3 | containernetworking-plugins | 1.6.1-4 | — |
| Azure Linux 3 | keda | 2.14.0-1 | — |
| Azure Linux 3 | kubevirt | 1.2.0-1 | — |
| Azure Linux 3 | multus | 4.0.2-1 | — |
| Azure Linux 3 | node-problem-detector | 0.8.15-1 | — |
| Azure Linux 3 | podman | 5.6.1-2 | — |
| Azure Linux 3 | sriov-network-device-plugin | 3.7.0-1 | — |
| Azure Linux 2 (CBL-Mariner) | application-gateway-kubernetes-ingress | 1.4.0-22 | — |
| Azure Linux 2 (CBL-Mariner) | cf-cli | 8.4.0-21 | — |
| Azure Linux 2 (CBL-Mariner) | cni | 1.0.1-20 | — |
| Azure Linux 2 (CBL-Mariner) | containerized-data-importer | 1.55.0-20 | — |
| Azure Linux 2 (CBL-Mariner) | cri-o | 1.22.3-8 | — |
| Azure Linux 2 (CBL-Mariner) | gh | 2.13.0-22 | — |
| Azure Linux 2 (CBL-Mariner) | git-lfs | 3.4.1-1 | — |
| Azure Linux 2 (CBL-Mariner) | influxdb | 2.6.1-17 | — |
| Azure Linux 2 (CBL-Mariner) | keda | 2.4.0-23 | — |
| Azure Linux 2 (CBL-Mariner) | kubevirt | 0.59.0-20 | — |
| Azure Linux 2 (CBL-Mariner) | kured | 1.13.2-1 | — |
| Azure Linux 2 (CBL-Mariner) | libcontainers-common | 20210626-6 | — |
| Azure Linux 2 (CBL-Mariner) | node-problem-detector | 0.8.17-2 | — |
| Azure Linux 2 (CBL-Mariner) | podman +2 | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | prometheus-adapter | 0.10.0-14 | — |
| Azure Linux 2 (CBL-Mariner) | sriov-network-device-plugin | 3.6.2-2 | — |
| Azure Linux 2 (CBL-Mariner) | terraform | 1.3.2-19 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | dynamic-localpv-provisioner | 3.4.1-r3 | — |
| Wolfi rolling | gitleaks | 8.18.2-r1 | — |
| Wolfi rolling | grpcurl | 1.8.7-r7 | — |
| Wolfi rolling | hey | 0.1.4-r3 | — |
| Wolfi rolling | k3d +2 | 5.6.0-r11 | — |
| Wolfi rolling | kubeflow +12 | 1.10.0-r2 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r8 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r1 | — |
| Wolfi rolling | vt-cli | 1.0.0-r3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | golang.org/x/text | < 0.3.8 | 0.3.8 | GHSA-69ch-w2m2-3vjp |
Advisories 23
- RHSA-2023:3613 Red Hat Security Advisory: OpenShift Container Platform 4.12.22 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2023:3204 Red Hat Security Advisory: OpenShift Virtualization 4.13.0 RPMs security and bug fix update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2077 Red Hat Security Advisory: container-tools:rhel8 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2024:1994 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- SUSE-EL-9-CLIENT-TOOLS-2023-3875 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Jul 24, 2026
- USN-5873-1 golang-golang-x-text, golang-x-text vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2024:0191-1 Security Beta update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3868-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2575-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3867-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2579-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13109-1 golang-github-lusitaniae-apache_exporter-1.0.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3875-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12426-1 starboard-0.15.11-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:2578-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0196-1 Security Beta update for SUSE Manager Client Tools and Salt SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14015-1 gitleaks-8.18.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2229 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
- openSUSE-SU-2024:12723-1 grafana-9.3.6-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2023-0318 Red Hat Migration Toolkit for Containers: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 29, 2025
- WID-SEC-2023-0210 Red Hat Enterprise Linux (Submariner): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Apr 28, 2024
- WID-SEC-2022-2134 IBM Spectrum Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 20, 2023