Skip to content
OpenAdvisories
High · 7.5 Public exploit CVE-2023-39325 BIT-golang-2023-39325EUVD-2023-2635GHSA-4374-p667-p6c8GO-2023-2102

HTTP/2 rapid reset can cause excessive work in net/http

Published Oct 11, 2023 · Updated Feb 13, 2025 · Assigned by Go

Vendor: Go standard library Vendor: golang.org/x/net Product: golang.org/x/net/http2 Product: net/http Package: aactl Package: amass Package: apko Package: application-gateway-kubernetes-ingress Package: atlantis Package: aws-efs-csi-driver Package: aws-load-balancer-controller Package: bank-vaults Package: blobfuse2 Package: bom Package: buildctl Package: buildkitd Package: caddy Package: cert-manager Package: cf-cli Package: chartmuseum Package: containerized-data-importer Package: coredns Package: cosign Package: cri-tools Package: crossplane-provider-aws Package: cue Package: dex Package: dgraph Package: dive Package: dynamic-localpv-provisioner Package: etcd Package: falcoctl Package: flux Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: frp Package: fuse-overlayfs-snapshotter Package: git-lfs Package: git-lfs Package: gitness Package: gke-gcloud-auth-plugin Package: go Package: go-1.20 Package: go-1.21 Package: gobuster Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golang.org/x/net Package: gomplate Package: grpcurl Package: helm Package: helm-3 Package: helm-4 Package: hey Package: hugo Package: jx Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k8sgpt Package: k8sgpt-operator Package: kaf Package: kata-containers Package: kata-containers-cc Package: kind Package: kots Package: kpt Package: kube-fluentd-operator Package: kube-logging-operator Package: kube-state-metrics Package: kube-vip-cloud-provider Package: kubeflow Package: kubeflow-access-management Package: kubeflow-access-management-compat Package: kubeflow-admission-webhook Package: kubeflow-admission-webhook-compat Package: kubeflow-katib Package: kubeflow-notebook-controller Package: kubeflow-notebook-controller-compat Package: kubeflow-profile-controller Package: kubeflow-profile-controller-compat Package: kubeflow-pvcviewer-controller Package: kubeflow-pvcviewer-controller-compat Package: kubeflow-tensorboard-controller Package: kubeflow-tensorboard-controller-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dns-node-cache Package: kubernetes-ingress-defaultbackend Package: kubescape Package: kubevela Package: kubewatch Package: kured Package: local-path-provisioner Package: mc Package: memcached-exporter Package: metacontroller Package: metrics-server Package: minio Package: moby-compose Package: moby-containerd Package: moby-containerd-cc Package: multus Package: nats Package: newrelic-infrastructure-agent Package: nfs-subdir-external-provisioner Package: nmi Package: nodetaint Package: nri-prometheus Package: oauth2-proxy Package: ollama Package: opa Package: packer Package: prometheus Package: prometheus-adapter Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-operator Package: prometheus-pushgateway Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-java Package: pulumi-language-yaml Package: rqlite Package: runc Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-gcp Package: sigstore-scaffolding Package: skaffold Package: skopeo Package: slsa-verifier Package: spark-operator Package: src Package: stakater-reloader Package: stdlib Package: tekton-chains Package: telegraf Package: terraform Package: terraform-provider-sendgrid Package: thanos-operator Package: timoni Package: tkn Package: trillian Package: trust-manager Package: up Package: vault-k8s Package: vertical-pod-autoscaler Package: vitess Package: weaviate Package: wireguard-go Package: yq Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.

Affected products

VendorProductAffectedFixed
Go standard library net/http < 1.20.10, 1.21.0-0 – < 1.21.3 1.20.10
golang.org/x/net golang.org/x/net/http2 < 0.17.0 0.17.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS golang-1.17 1.17.13-3ubuntu1.2 USN-7061-1
Ubuntu 22.04 LTS golang-1.18 1.18.1-1ubuntu1.2 USN-7109-1
Ubuntu 22.04 LTS golang-1.20 1.20.3-1ubuntu0.1~22.04.1 USN-6574-1
Ubuntu 22.04 LTS golang-1.21 1.21.1-1~ubuntu22.04.2 USN-6574-1
Ubuntu 20.04 LTS golang-1.13 +1 No fix yet —
Ubuntu 20.04 LTS golang-1.18 1.18.1-1ubuntu1~20.04.3 USN-7109-1
Ubuntu 20.04 LTS golang-1.20 1.20.3-1ubuntu0.1~20.04.1 USN-6574-1
Ubuntu 20.04 LTS golang-1.21 1.21.1-1~ubuntu20.04.2 USN-6574-1
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +1 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.18 1.18.1-1ubuntu1~18.04.4+esm1 USN-7109-1
Ubuntu Pro 16.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.18 1.18.1-1ubuntu1~16.04.6+esm1 USN-7109-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 golang +6 1.19.13-1.el9_2 RHSA-2023:5738
RHEL 9 grafana 9.0.9-4.el9_2 RHSA-2023:5867
RHEL 9 toolbox +1 0.0.99.3-10.el9_2 RHSA-2023:6077
RHEL 8 delve 1.9.1-1.module+el8.8.0+16778+5fbb74f5 RHSA-2023:5721
RHEL 8 go-toolset 1.19.13-1.module+el8.8.0+20380+7171fefb RHSA-2023:5721
RHEL 8 golang +6 1.19.13-1.module+el8.8.0+20373+d9cd605c RHSA-2023:5721
RHEL 8 grafana 7.5.15-5.el8_8 RHSA-2023:5863
RHEL 7 rhc-worker-script 0.5-1.el7_9 RHSA-2023:5835
Show 25 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Service Interconnect 1 skupper-cli 1.4.3-4.el8 RHSA-2023:6165
Red Hat Service Interconnect 1 skupper-router +3 2.4.3-1.el8 RHSA-2023:6165
Red Hat Serverless 1 openshift-serverless-clients 1.9.2-4.el8 RHSA-2023:6298
Red Hat Satellite Utils 6 foreman +1 3.1.1.27-1.el7sat RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979
Red Hat Satellite Capsule 6 foreman +1 3.1.1.27-1.el7sat RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979
Red Hat Satellite Capsule 6 puppet-agent 7.26.0-3.el7sat RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979
Red Hat Satellite Capsule 6 puppetserver 7.11.0-1.el8sat RHSA-2023:6818
Red Hat Satellite Capsule 6 python-django +1 3.2.21-1.el8pc RHSA-2023:6818, RHSA-2023:5931
Red Hat Satellite Capsule 6 python-future +1 0.18.3-1.el8pc RHSA-2023:6818
Red Hat Satellite Capsule 6 python-gitpython +1 3.1.32-1.el8pc RHSA-2023:6818, RHSA-2023:5931
Red Hat Satellite Capsule 6 python-pulp-ansible +1 1:0.16.0-1.el8pc RHSA-2023:6818
Red Hat Satellite Capsule 6 python-requests +1 2.31.0-1.el8pc RHSA-2023:6818
Red Hat Satellite Capsule 6 python-sqlparse +1 0.4.4-1.el8pc RHSA-2023:6818
Red Hat Satellite Capsule 6 rubygem-rack 2.2.7-1.el8sat RHSA-2023:6818
Red Hat Satellite 6 foreman +13 3.1.1.27-1.el7sat RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979
Red Hat Satellite 6 foreman-redis 3.7.0.9-1.el8sat RHSA-2023:6818
Red Hat Satellite 6 puppet-agent 7.26.0-3.el7sat RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979
Red Hat Satellite 6 puppetserver 7.11.0-1.el8sat RHSA-2023:6818
Red Hat Satellite 6 python-django +1 3.2.21-1.el8pc RHSA-2023:6818, RHSA-2023:5931
Red Hat Satellite 6 python-future +1 0.18.3-1.el8pc RHSA-2023:6818
Red Hat Satellite 6 python-gitpython +1 3.1.32-1.el8pc RHSA-2023:6818, RHSA-2023:5931
Red Hat Satellite 6 python-pulp-ansible +1 1:0.16.0-1.el8pc RHSA-2023:6818
Red Hat Satellite 6 python-requests +1 2.31.0-1.el8pc RHSA-2023:6818
Red Hat Satellite 6 python-sqlparse +1 0.4.4-1.el8pc RHSA-2023:6818
Red Hat Satellite 6 rubygem-actionpack +2 6.1.7.3-1.el8sat RHSA-2023:6818
Red Hat Satellite 6 rubygem-git 1.18.0-0.1.el8sat RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979
Red Hat Satellite 6 rubygem-globalid 1.1.0-1.el8sat RHSA-2023:6818
Red Hat Satellite 6 rubygem-kubeclient 4.10.1-1.el8sat RHSA-2023:6818
Red Hat Satellite 6 rubygem-rack 2.2.7-1.el8sat RHSA-2023:6818
Red Hat Satellite 6 rubygem-safemode 1.3.8-1.el8sat RHSA-2023:5979
Red Hat Satellite 6 tfm-rubygem-git 1.18.0-0.1.el7sat RHSA-2023:5980
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.0.3-1.el7sat RHSA-2023:6818, RHSA-2023:5980, RHSA-2023:5979
Red Hat Rhel Satellite Client 6 foreman_ygg_worker 0.2.2-1.el7sat RHSA-2023:5982
Red Hat Rhel Satellite Client 6 puppet-agent 7.26.0-3.el6sat RHSA-2023:5982
Red Hat Rhel Satellite Client 6 yggdrasil 0.2.3-1.el7sat RHSA-2023:5982
RHEL 9.2 E4S rhc 1:0.2.2-1.el9_2.2 RHSA-2026:8322
RHEL 9.0 EUS grafana 7.5.11-6.el9_0 RHSA-2023:5866
RHEL 9.0 EUS toolbox +1 0.0.99.3-4.el9_0 RHSA-2023:6057
RHEL 8.6 EUS grafana 7.5.11-4.el8_6 RHSA-2023:5864
RHEL 8.4 TUS grafana 7.3.6-6.el8_4 RHSA-2023:5865
RHEL 8.4 E4S grafana 7.3.6-6.el8_4 RHSA-2023:5865
RHEL 8.4 AUS grafana 7.3.6-6.el8_4 RHSA-2023:5865
Red Hat Openshift Pipelines 1 openshift-pipelines-client 1.10.6-11031.el8 RHSA-2023:7699, RHSA-2023:6781, RHSA-2023:6059
Red Hat Openshift Pipelines 1 openshift-pipelines-client-redistributable 1.11.2-11148.el8 RHSA-2023:6781, RHSA-2023:6059
Red Hat Openshift Ironic 4 openstack-ironic +5 1:21.3.1-0.20231106145533.e53dc4f.el9 RHSA-2023:7325, RHSA-2023:5009
Red Hat Openshift Ironic 4 openstack-ironic-inspector +4 11.5.0-0.20230706175125.193aa0d.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-automaton +1 3.1.0-0.20230608140652.a4f7631.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-cinderclient +1 9.3.0-0.20230608143053.f7a612e.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-cliff +2 4.3.0-0.20230608150702.72e81d7.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-debtcollector +1 2.5.0-0.20230308172820.a6b46c5.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-decorator +1 4.4.2-6.0.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-dracclient +1 8.0.0-0.20230308200614.9c7499c.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-fixtures +1 4.0.1-1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-futurist +1 2.4.1-0.20230308173923.159d752.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-glanceclient +1 1:4.3.0-0.20230608143056.52fb6b2.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-hardware +2 0.30.0-0.20230308190813.f6ff0ed.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-ironic-lib +1 5.4.1-0.20230706172632.25d8671.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-ironic-prometheus-exporter +1 4.1.1-0.20230614150617.7b35627.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-keystoneauth1 +1 5.2.0-0.20230608152518.2e40bbf.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-keystoneclient +2 1:5.1.0-0.20230608141554.4763cd8.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-keystonemiddleware +1 10.3.0-0.20230608151410.92cdf8a.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-openstacksdk +2 1.2.0-0.20230608155226.b7ff031.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-os-service-types +1 1.7.0-0.20230308170555.0b2f473.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-os-traits +2 3.0.0-0.20230608152745.cff125c.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-osc-lib +2 2.8.0-0.20230608151456.db9cdc9.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-cache +3 3.4.0-0.20230608153448.a720016.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-concurrency +3 5.1.1-0.20230706190204.0af5942.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-config +1 2:9.1.1-0.20230608145954.515daab.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-context +2 5.1.1-0.20230608143931.7696282.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-db +3 12.3.1-0.20230608142355.b689b63.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-i18n +2 6.0.0-0.20230608140652.03605c2.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-log +3 5.2.0-0.20230608150750.16a8a42.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-messaging +2 14.3.1-0.20230608152013.0602d1a.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-middleware +3 5.1.1-0.20230608145931.7725ac9.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-policy +3 4.2.0-0.20230608153320.93129eb.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-rootwrap +2 7.0.1-0.20230608144658.b72372b.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-serialization +2 5.1.1-0.20230608144505.b4be3a4.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-service +2 3.1.1-0.20230608145222.b3ba591.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-upgradecheck +1 2.1.1-0.20230608143829.eeedfc9.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-utils +1 6.1.0-0.20230608142355.d49d594.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-versionedobjects +1 3.1.0-0.20230608141554.b4ea834.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-osprofiler 3.4.3-0.20230308173821.3286301.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-pbr 5.11.1-0.1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-proliantutils 2.14.1-0.20230608154738.3de2844.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-pycadf +1 3.1.1-0.20230308171749.4179996.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-requestsexceptions 1.4.0-0.20230308170555.d7ac0ff.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-scciclient 0.12.3-0.20230308201513.0940a71.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-stevedore 5.1.0-0.20230608154210.2d99ccc.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-sushy 4.5.0-0.20230719180619.146ed33.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-sushy-oem-idrac 5.0.0-0.20230308202122.da9a0e4.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-swiftclient 4.3.0-0.20230608151934.236c277.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-tenacity 6.3.1-1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-tooz 4.1.0-0.20230608154038.d5bf20c.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-werkzeug +1 2.0.3-5.el9 RHSA-2023:7610
Red Hat Openshift Ironic 4 python-wrapt +1 1.14.1-1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python3-ironic-python-agent +2 9.5.0-0.20230728140546.fce0b8c.el9 RHSA-2023:5009
Red Hat Openshift Gitops 1 openshift-gitops-kam +1 1.8.6-10.el8 RHSA-2023:7344, RHSA-2023:6782, RHSA-2023:6243
Red Hat OpenStack 17 collectd-libpod-stats 1.0.5-6.el8ost RHSA-2023:5970, RHSA-2023:5969
Red Hat OpenStack 17 etcd 3.4.26-3.el9ost RHSA-2023:5969
Red Hat OpenStack 17 python-octavia-tests-tempest +2 1.9.0-1.20230509101018.el9ost RHSA-2023:5969
Red Hat OpenStack 16 collectd-libpod-stats 1.0.4-5.el8ost RHSA-2023:5967, RHSA-2023:5964
Red Hat OpenStack 16 etcd 3.3.23-15.el8ost RHSA-2023:5967, RHSA-2023:5965
Red Hat OpenStack 16 python-octavia-tests-tempest +2 1.3.0-1.20210528004838.0ae7f10.el8ost RHSA-2023:5967, RHSA-2023:5965
Red Hat OpenShift 4 afterburn +2 5.4.3-1.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 buildah +1 1:1.29.1-10.1.rhaos4.14.el8 RHSA-2023:7201, RHSA-2023:5009
Red Hat OpenShift 4 butane +1 0.19.0-1.1.rhaos4.14.el8 RHSA-2023:7201, RHSA-2023:5009
Red Hat OpenShift 4 catch +1 3.3.2-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 conmon 3:2.1.7-3.1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 container-selinux 3:2.221.0-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 containernetworking-plugins 1.0.1-11.1.rhaos4.14.el8 RHSA-2023:7201, RHSA-2023:5009
Red Hat OpenShift 4 containers-common 2:1-51.rhaos4.14.el8 RHSA-2023:5675, RHSA-2023:5009
Red Hat OpenShift 4 coreos-installer +2 0.17.0-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 cri-o 1.24.6-6.1.rhaos4.11.git7f73171.el8_6 RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:7325
Red Hat OpenShift 4 cri-tools 1.27.0-2.1.el8 RHSA-2023:7201, RHSA-2023:5009
Red Hat OpenShift 4 crun 1.9.2-1.rhaos4.13.el8 RHSA-2023:5675, RHSA-2023:5009
Red Hat OpenShift 4 crun-wasm 0.0-3.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 fmt +1 9.1.0-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 gmock +3 1.13.0-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 google-benchmark +2 1.8.2-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 haproxy +1 2.6.13-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 ignition +1 2.16.2-1.1.rhaos4.14.el9 RHSA-2023:7201, RHSA-2023:5009
Red Hat OpenShift 4 kata-containers 3.1.3-4.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 kernel-rt +15 4.18.0-372.82.1.rt7.241.el8_6 RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:7325
Red Hat OpenShift 4 kernel-rt-modules-core +5 5.14.0-284.36.1.rt14.321.el9_2 RHSA-2023:7325, RHSA-2023:5675, RHSA-2023:5009
Red Hat OpenShift 4 microshift +4 4.14.2-202311091609.p0.gd80d6de.assembly.4.14.2.el9 RHSA-2023:7200, RHSA-2023:6839
Red Hat OpenShift 4 microshift-olm 4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9 RHSA-2023:7200
Red Hat OpenShift 4 nmstate +4 2.2.12-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift +1 4.11.0-202310140343.p0.gec2a592.assembly.stream.el8 RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:7201
Red Hat OpenShift 4 openshift-ansible +1 4.13.0-202310130944.p0.g2d540c5.assembly.stream.el8 RHSA-2023:5675, RHSA-2023:5009
Red Hat OpenShift 4 openshift-clients +1 4.12.0-202311221849.p0.gd2ac7e1.assembly.stream.el8 RHSA-2023:7610, RHSA-2023:7325, RHSA-2023:7201
Red Hat OpenShift 4 openshift-kuryr +4 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift-prometheus-promu +1 0.15.0-15.1.gitd5383c5.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift4-aws-iso 4.14.0-202309272140.p0.gd2acdd5.assembly.stream.el8 RHSA-2023:5009
Red Hat OpenShift 4 ovn23.09 +3 23.09.0-37.el9fdp RHSA-2023:5009
Red Hat OpenShift 4 perf +30 4.18.0-372.82.1.el8_6 RHSA-2023:7610, RHSA-2023:7481, RHSA-2023:7325
Red Hat OpenShift 4 podman +6 3:4.4.1-10.1.rhaos4.14.el8 RHSA-2023:7201, RHSA-2023:5009
Red Hat OpenShift 4 rtla +30 5.14.0-284.36.1.el9_2 RHSA-2023:7325, RHSA-2023:5675, RHSA-2023:5009
Red Hat OpenShift 4 runc 4:1.1.9-1.rhaos4.13.el8 RHSA-2023:7201, RHSA-2023:5675, RHSA-2023:5009
Red Hat OpenShift 4 skopeo +1 2:1.11.2-10.1.rhaos4.14.el8 RHSA-2023:7201, RHSA-2023:5009
Red Hat OpenShift 4 spdlog +1 1.12.0-1.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 toolbox 0.1.2-1.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 wasmedge +2 0.12.1-2.rhaos4.14.el9 RHSA-2023:5009
Red Hat Ocp Tools 4 helm 3.13.2-35.el9 RHEA-2024:1870
Red Hat Ocp Tools 4 jenkins 2.414.3.1698292201-3.el8 RHSA-2024:0777, RHSA-2023:7288, RHSA-2023:6179
Red Hat Ocp Tools 4 jenkins-2-plugins 4.11.1698299029-1.el8 RHSA-2024:0777, RHSA-2023:7288, RHSA-2023:6179
Red Hat Devtools 2023 go-toolset-1.19 +3 1.19.13-1.el7_9 RHSA-2023:5719
Red Hat Devtools 2023 go-toolset-1.19-golang +6 1.19.13-2.el7_9 RHSA-2023:5719
Red Hat Container Native Virtualization 4 kubevirt +2 4.13.6-1596.el7 RHSA-2023:7521
Red Hat Ceph Storage 5 ceph +43 2:16.2.10-266.el8cp RHSA-2024:4118
Red Hat Ceph Storage 5 ceph-ansible 6.0.28.8-1.el8cp RHSA-2024:4118
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.4.2-1.el8ap RHSA-2023:5810, RHSA-2023:5805
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.4.2-1.el8ap RHSA-2023:5810, RHSA-2023:5805
Red Hat Ansible Automation Platform 2 receptor +1 1.4.2-1.el8ap RHSA-2023:5810, RHSA-2023:5809, RHSA-2023:5805

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 golang +7 1.19.13-1.el9_2 ALSA-2023:5738
AlmaLinux 9 grafana 9.0.9-4.el9_2.alma.1 ALSA-2023:5867
AlmaLinux 9 toolbox +1 0.0.99.3-10.el9_2 ALSA-2023:6077
AlmaLinux 8 delve 1.9.1-1.module_el8.8.0+3471+a62632a0 ALSA-2023:5721
AlmaLinux 8 golang +7 1.19.13-1.module_el8.8.0+3625+a06035cf ALSA-2023:5721
AlmaLinux 8 grafana 7.5.15-5.el8_8.alma.1 ALSA-2023:5863

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 go-toolset 1.19.13-1.el9_2 RLSA-2023:5738
Rocky Linux 9 toolbox 0.0.99.3-10.el9_2.rocky.0.1 RLSA-2023:6077
Rocky Linux 8 delve 1.9.1-1.module+el8.8.0+1263+19d1a562 RLSA-2023:5721
Rocky Linux 8 golang +1 1.19.13-1.module+el8.8.0+1526+386b5e05 RLSA-2023:5721
Rocky Linux 8 grafana 7.5.15-5.el8_8 RLSA-2023:5863

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.11.1 SUSE-SU-2026:2493-1
SLES 15 SP6 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES 15 SP6 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES 15 SP6 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES 15 SP6 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES 15 SP5 go1.20 1.20.10-150000.1.29.1 SUSE-SU-2023:4068-1
SLES 15 SP5 go1.20-openssl 1.20.11.1-150000.1.14.1 SUSE-SU-2023:4472-1
SLES 15 SP5 go1.21 1.21.3-150000.1.12.1 SUSE-SU-2023:4069-1
SLES 15 SP5 go1.21-openssl 1.21.4.1-150000.1.5.1 SUSE-SU-2023:4469-1
SLES 15 SP5 kubernetes1.24 1.24.17-150500.3.22.1 SUSE-SU-2024:3342-1
SLES 15 SP5 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES 15 SP5 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES 15 SP5 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES 15 SP5 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES 15 SP4 go1.20 1.20.10-150000.1.29.1 SUSE-SU-2023:4068-1
SLES 15 SP4 go1.20-openssl 1.20.11.1-150000.1.14.1 SUSE-SU-2023:4472-1
SLES 15 SP4 go1.21 1.21.3-150000.1.12.1 SUSE-SU-2023:4069-1
SLES 15 SP4 go1.21-openssl 1.21.4.1-150000.1.5.1 SUSE-SU-2023:4469-1
SLES 15 SP4 kubernetes1.24 1.24.17-150400.9.16.1 SUSE-SU-2024:3341-1
SLES 15 SP4 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES 15 SP4 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES 15 SP4 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES 15 SP4 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES 15 SP3 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 kubernetes1.24 1.24.17-150400.9.16.1 SUSE-SU-2024:3341-1
SLES for SAP 15 SP4 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES for SAP 15 SP4 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES for SAP 15 SP4 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES for SAP 15 SP4 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES for SAP 15 SP3 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1
SLE HPC 15 SP4 kubernetes1.24 1.24.17-150400.9.16.1 SUSE-SU-2024:3341-1
SLE HPC 15 SP4 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLE HPC 15 SP4 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLE HPC 15 SP4 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLE HPC 15 SP4 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLE HPC 15 SP3 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1
SUSE Package Hub 12 go 1.21-41.1 openSUSE-SU-2023:0360-1
SUSE Package Hub 12 go1.21 1.21.3-2.1 openSUSE-SU-2023:0360-1
SUSE Enterprise Storage 7.1 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed cmctl 1.13.2-1.1 openSUSE-SU-2024:13376-1
openSUSE Tumbleweed fake-gcs-server 1.56.1-1.1 openSUSE-SU-2026:11819-1
openSUSE Tumbleweed go1.20 1.20.10-1.1 openSUSE-SU-2024:13326-1
openSUSE Tumbleweed go1.21 1.21.3-1.1 openSUSE-SU-2024:13327-1
openSUSE Tumbleweed traefik 2.10.7-1.1 openSUSE-SU-2024:13506-1
openSUSE Tumbleweed traefik2 2.11.5-1.1 openSUSE-SU-2024:14076-1
openSUSE Tumbleweed velero 1.12.1-1.1 openSUSE-SU-2024:13384-1
openSUSE Leap 15.6 kubernetes1.24 1.24.17-150500.3.22.1 SUSE-SU-2024:3342-1
openSUSE Leap 15.6 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
openSUSE Leap 15.6 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
openSUSE Leap 15.6 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
openSUSE Leap 15.6 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
openSUSE Leap 15.5 go1.20 1.20.10-150000.1.29.1 SUSE-SU-2023:4068-1
openSUSE Leap 15.5 go1.20-openssl 1.20.11.1-150000.1.14.1 SUSE-SU-2023:4472-1
openSUSE Leap 15.5 go1.21 1.21.3-150000.1.12.1 SUSE-SU-2023:4069-1
openSUSE Leap 15.5 go1.21-openssl 1.21.4.1-150000.1.5.1 SUSE-SU-2023:4469-1
openSUSE Leap 15.5 kubernetes1.24 1.24.17-150500.3.22.1 SUSE-SU-2024:3342-1
openSUSE Leap 15.5 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
openSUSE Leap 15.5 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
openSUSE Leap 15.5 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
openSUSE Leap 15.5 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
openSUSE Leap 15.4 go1.20 1.20.10-150000.1.29.1 SUSE-SU-2023:4068-1
openSUSE Leap 15.4 go1.20-openssl 1.20.11.1-150000.1.14.1 SUSE-SU-2023:4472-1
openSUSE Leap 15.4 go1.21 1.21.3-150000.1.12.1 SUSE-SU-2023:4069-1
openSUSE Leap 15.4 go1.21-openssl 1.21.4.1-150000.1.5.1 SUSE-SU-2023:4469-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.21.3-r0 —
Alpine v3.23 go 1.21.3-r0 —
Alpine v3.22 go 1.21.3-r0 —
Alpine v3.21 go 1.21.3-r0 —
Alpine v3.20 go 1.21.3-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 go 1.21.3-r0 —
Alpine v3.18 go 1.20.10-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300032.3-1.amzn2023 ALAS2023-2024-498
Amazon Linux 2023 amazon-ssm-agent 3.2.2222.0-1.amzn2023 ALAS2023-2024-526
Amazon Linux 2023 cni-plugins 1.2.0-1.amzn2023.0.3 ALAS2023-2023-419
Amazon Linux 2023 docker 24.0.5-1.amzn2023.0.2 ALAS2023-2023-397
Amazon Linux 2023 ecs-init 1.77.0-1.amzn2023 ALAS2023-2023-435
Amazon Linux 2023 golang +6 1.20.10-1.amzn2023.0.1 ALAS2023-2023-394
Amazon Linux 2023 oci-add-hooks 0-0.1.20200504git268e3bb.amzn2023.0.2 ALAS2023-2023-418
Amazon Linux 2023 runc 1.1.7-1.amzn2023.0.3 ALAS2023-2023-396
Amazon Linux 2 amazon-cloudwatch-agent 1.300032.3-1.amzn2 ALAS2-2024-2424
Amazon Linux 2 amazon-ssm-agent 3.2.2222.0-1.amzn2 ALAS2-2024-2458
Amazon Linux 2 cni-plugins 1.2.0-1.amzn2.0.4 ALAS2-2023-2325
Amazon Linux 2 cri-tools 1.26.1-1.amzn2.0.3 ALAS2-2023-2324
Amazon Linux 2 golang +6 1.20.10-1.amzn2.0.1 ALAS2-2023-2313
Amazon Linux 2 golist 0.10.1-10.amzn2.0.4 ALAS2-2023-2326
Amazon Linux 2 nerdctl 1.6.2-1.amzn2.0.2 ALAS2-2023-2339

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 application-gateway-kubernetes-ingress 1.7.7-1 —
Azure Linux 3 blobfuse2 2.3.0-1 —
Azure Linux 3 cert-manager 1.11.2-5 —
Azure Linux 3 cf-cli 8.7.3-2 —
Azure Linux 3 containerized-data-importer 1.57.0-8 —
Azure Linux 3 coredns 1.9.3-9 —
Azure Linux 3 etcd 3.5.6-11 —
Azure Linux 3 git-lfs 3.6.1-1 —
Azure Linux 3 golang 1.20.7-2 —
Azure Linux 3 jx 3.10.182-1 —
Azure Linux 3 kata-containers +1 3.2.0.azl4-1 —
Azure Linux 3 kube-vip-cloud-provider 0.0.10-1 —
Azure Linux 3 local-path-provisioner 0.0.24-3 —
Azure Linux 3 moby-containerd-cc 1.7.1-5 —
Azure Linux 3 multus 4.0.2-3 —
Azure Linux 3 opa 0.50.2-6 —
Azure Linux 3 packer 1.9.5-1 —
Azure Linux 3 prometheus-adapter 0.12.0-1 —
Azure Linux 3 telegraf 1.27.3-3 —
Azure Linux 3 vitess 16.0.2-5 —
Azure Linux 2 (CBL-Mariner) blobfuse2 2.1.1-1 —
Azure Linux 2 (CBL-Mariner) cert-manager 1.11.2-5 —
Azure Linux 2 (CBL-Mariner) coredns 1.9.3-9 —
Azure Linux 2 (CBL-Mariner) cri-tools 1.28.0-2 —
Azure Linux 2 (CBL-Mariner) etcd 3.5.6-11 —
Azure Linux 2 (CBL-Mariner) git-lfs 3.5.1-1 —
Azure Linux 2 (CBL-Mariner) golang 1.20.7-2 —
Azure Linux 2 (CBL-Mariner) kata-containers +1 3.2.0.azl2-1 —
Azure Linux 2 (CBL-Mariner) kured 1.9.1-14 —
Azure Linux 2 (CBL-Mariner) moby-compose 2.17.2-5 —
Azure Linux 2 (CBL-Mariner) moby-containerd 1.6.22-2 —
Azure Linux 2 (CBL-Mariner) moby-containerd-cc 1.7.1-5 —
Azure Linux 2 (CBL-Mariner) multus 3.8-12 —
Azure Linux 2 (CBL-Mariner) nmi No fix yet —
Azure Linux 2 (CBL-Mariner) opa 0.50.2-6 —
Azure Linux 2 (CBL-Mariner) packer 1.8.7-2 —
Azure Linux 2 (CBL-Mariner) prometheus 2.37.9-2 —
Azure Linux 2 (CBL-Mariner) skopeo 1.12.0-4 —
Azure Linux 2 (CBL-Mariner) telegraf 1.27.3-3 —
Azure Linux 2 (CBL-Mariner) vitess 16.0.2-5 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 conmon 3:2.1.3-7.el9 ELSA-2023-13053
Oracle Linux 9 cri-o 1.26.3-3.el9 ELSA-2023-13053
Oracle Linux 9 cri-tools 1.26.1-3.el9 ELSA-2023-13053
Oracle Linux 9 etcd 3.5.9-2.el9 ELSA-2023-13053
Oracle Linux 9 golang +7 1.19.13-1.el9_2 ELSA-2023-5738
Oracle Linux 9 grafana 9.0.9-4.el9_2 ELSA-2023-5867
Oracle Linux 9 helm 3.12.0-3.el9 ELSA-2023-13053
Oracle Linux 9 istio +1 1.17.8-1.el9 ELSA-2023-13053
Oracle Linux 9 kata 1.12.1-14.el9 ELSA-2023-13053
Oracle Linux 9 kata-image 1.12.1-9.9.ol9_202311161804 ELSA-2023-13053
Oracle Linux 9 kata-shim +4 1.12.1-9.el9 ELSA-2023-13053
Oracle Linux 9 kubeadm +2 1.26.10-2.el9 ELSA-2023-13053
Oracle Linux 9 kubernetes-cni +1 1.1.2-3.el9 ELSA-2023-13053
Oracle Linux 9 kubernetes-cni-plugins 1.2.0-4.el9 ELSA-2023-13053
Oracle Linux 9 olcnectl +15 1.7.5-17.el9 ELSA-2023-13053
Oracle Linux 9 virtctl 0.58.0-4.el9 ELSA-2023-13053
Oracle Linux 9 yq 4.34.1-3.el9 ELSA-2023-13053
Oracle Linux 8 conmon 3:2.1.3-7.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 cri-o 1.25.2-3.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 cri-tools 1.25.0-2.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 delve 1.9.1-1.0.1.module+el8.8.0+20964+30a27755 ELSA-2023-5721
Oracle Linux 8 etcd 3.5.9-2.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 golang +7 1.19.13-1.module+el8.8.0+21189+9e6e1f9f ELSA-2023-5721
Oracle Linux 8 grafana 7.5.15-5.el8_8 ELSA-2023-5863
Oracle Linux 8 helm 3.11.1-2.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 istio +1 1.16.7-2.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 kata 1.12.1-14.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 kata-image 1.12.1-9.9.ol8_202311161805 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 kata-shim +4 1.12.1-9.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 kubeadm +2 1.25.15-1.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 kubernetes-cni +1 1.0.1-3.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 kubernetes-cni-plugins 1.0.1-4.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 olcne-rook-chart +1 1.7.5-17.el8 ELSA-2023-13054
Oracle Linux 8 olcnectl +13 1.6.5-10.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 8 virtctl 0.58.0-4.el8 ELSA-2023-13054
Oracle Linux 8 yq 4.34.1-3.el8 ELSA-2023-13054, ELSA-2023-13028
Oracle Linux 7 conmon 3:2.1.3-7.el7 ELSA-2023-13029
Oracle Linux 7 cri-o 1.25.2-3.el7 ELSA-2023-13029
Oracle Linux 7 cri-tools 1.25.0-2.el7 ELSA-2023-13029
Oracle Linux 7 helm 3.11.1-2.el7 ELSA-2023-13029
Oracle Linux 7 istio +1 1.16.7-2.el7 ELSA-2023-13029
Oracle Linux 7 kata 1.12.1-14.el7 ELSA-2023-13029
Oracle Linux 7 kata-image 1.12.1-9.9.ol7_202311161803 ELSA-2023-13029
Oracle Linux 7 kata-shim +4 1.12.1-9.el7 ELSA-2023-13029
Oracle Linux 7 kubeadm +2 1.25.15-1.el7 ELSA-2023-13029
Oracle Linux 7 kubernetes-cni +1 1.0.1-3.el7 ELSA-2023-13029
Oracle Linux 7 kubernetes-cni-plugins 1.0.1-4.el7 ELSA-2023-13029
Oracle Linux 7 olcnectl +13 1.6.5-10.el7 ELSA-2023-13029
Oracle Linux 7 yq 4.34.1-3.el7 ELSA-2023-13029

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r7 —
Wolfi rolling amass 4.2.0-r8 —
Wolfi rolling apko 0.10.0-r6 —
Wolfi rolling atlantis 0.26.0-r3 —
Wolfi rolling aws-efs-csi-driver 1.7.0-r5 —
Wolfi rolling aws-load-balancer-controller 2.6.1-r3 —
Wolfi rolling bank-vaults 1.20.4-r3 —
Wolfi rolling bom 0.6.0-r0 —
Wolfi rolling buildctl +1 0.12.4-r4 —
Wolfi rolling caddy 2.7.5-r0 —
Wolfi rolling chartmuseum 0.16.0-r6 —
Wolfi rolling cosign 2.2.0-r5 —
Wolfi rolling crossplane-provider-aws 0.42.0-r1 —
Wolfi rolling cue 0.6.0-r7 —
Wolfi rolling dex 2.37.0-r7 —
Wolfi rolling dgraph 23.1.0-r6 —
Wolfi rolling dive 0.11.0-r7 —
Wolfi rolling dynamic-localpv-provisioner 3.4.1-r3 —
Wolfi rolling falcoctl 0.6.2-r3 —
Wolfi rolling flux 2.1.2-r1 —
Wolfi rolling flux-helm-controller 0.36.2-r1 —
Wolfi rolling flux-image-automation-controller 0.36.1-r3 —
Wolfi rolling flux-image-reflector-controller 0.30.0-r4 —
Wolfi rolling flux-kustomize-controller 1.1.1-r1 —
Wolfi rolling flux-notification-controller 1.1.0-r4 —
Wolfi rolling flux-source-controller 1.1.2-r1 —
Wolfi rolling frp 0.52.2-r0 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.7-r2 —
Wolfi rolling git-lfs 3.4.0-r4 —
Wolfi rolling gitness 3.0.0_beta2-r0 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r6 —
Wolfi rolling go-1.20 1.20.10-r0 —
Wolfi rolling go-1.21 1.21.3-r0 —
Wolfi rolling gobuster 3.6.0-r9 —
Wolfi rolling gomplate 3.11.5-r6 —
Wolfi rolling grpcurl 1.8.8-r3 —
Wolfi rolling helm 3.13.1-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling hey 0.1.4-r8 —
Wolfi rolling hugo 0.119.0-r4 —
Wolfi rolling k3d +2 5.6.0-r6 —
Wolfi rolling k3s 1.28.2-r1 —
Wolfi rolling k8sgpt 0.3.18-r1 —
Wolfi rolling k8sgpt-operator 0.0.21-r6 —
Wolfi rolling kaf 0.2.6-r6 —
Wolfi rolling kind 0.21.0-r0 —
Wolfi rolling kots 1.103.2-r2 —
Wolfi rolling kpt 1.0.0_beta46-r0 —
Wolfi rolling kube-fluentd-operator 1.17.6-r8 —
Wolfi rolling kube-logging-operator 4.2.2-r5 —
Wolfi rolling kube-state-metrics 2.10.0-r4 —
Wolfi rolling kubeflow +12 1.10.0-r4 —
Wolfi rolling kubeflow-katib 0.15.0-r7 —
Wolfi rolling kubernetes-csi-external-provisioner 3.6.0-r3 —
Wolfi rolling kubernetes-csi-external-resizer 1.9.0-r3 —
Wolfi rolling kubernetes-csi-livenessprobe 2.11.0-r3 —
Wolfi rolling kubernetes-dashboard 2.7.0-r9 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.0.9-r9 —
Wolfi rolling kubernetes-dns-node-cache 1.22.20-r5 —
Wolfi rolling kubernetes-ingress-defaultbackend 1.25.1-r3 —
Wolfi rolling kubescape 3.0.0-r0 —
Wolfi rolling kubevela 1.9.6-r4 —
Wolfi rolling kubewatch 2.5.0-r7 —
Wolfi rolling mc 0.20230628.215417-r7 —
Wolfi rolling memcached-exporter 0.13.0-r7 —
Wolfi rolling metacontroller 4.11.0-r6 —
Wolfi rolling metrics-server 0.6.4-r4 —
Wolfi rolling minio 0.20230904.195737-r5 —
Wolfi rolling nats 0.1.1-r5 —
Wolfi rolling newrelic-infrastructure-agent 1.47.2-r3 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r1 —
Wolfi rolling nodetaint 0.0.4-r6 —
Wolfi rolling nri-prometheus 2.18.7-r3 —
Wolfi rolling oauth2-proxy 7.5.1-r3 —
Wolfi rolling ollama 0.1.4-r0 —
Wolfi rolling prometheus-adapter 0.11.1-r3 —
Wolfi rolling prometheus-alertmanager 0.26.0-r4 —
Wolfi rolling prometheus-operator 0.68.0-r4 —
Wolfi rolling prometheus-pushgateway 1.6.2-r3 —
Wolfi rolling pulumi 3.88.1-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.13.0-r4 —
Wolfi rolling pulumi-language-dotnet 3.57.0-r3 —
Wolfi rolling pulumi-language-java 0.9.8-r2 —
Wolfi rolling pulumi-language-yaml 1.3.0-r5 —
Wolfi rolling rqlite 7.21.4-r6 —
Wolfi rolling runc 1.1.9-r5 —
Wolfi rolling secrets-store-csi-driver 1.3.4-r6 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.3.0-r6 —
Wolfi rolling sigstore-scaffolding 0.6.8-r4 —
Wolfi rolling skaffold 2.8.0-r4 —
Wolfi rolling slsa-verifier 2.5.1-r0 —
Wolfi rolling spark-operator 1.1.27-r13 —
Wolfi rolling src 5.3.0-r0 —
Wolfi rolling stakater-reloader 1.0.43-r2 —
Wolfi rolling tekton-chains 0.18.0-r3 —
Wolfi rolling terraform 1.5.5-r6 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r1 —
Wolfi rolling thanos-operator 0.3.7-r8 —
Wolfi rolling timoni 0.14.2-r2 —
Wolfi rolling tkn 0.32.0-r4 —
Wolfi rolling trillian 1.5.2-r4 —
Wolfi rolling trust-manager 0.6.0-r5 —
Wolfi rolling up 0.24.0-r1 —
Wolfi rolling vault-k8s 1.2.1-r8 —
Wolfi rolling vertical-pod-autoscaler 0.14.0-r5 —
Wolfi rolling weaviate 1.21.6-r1 —
Wolfi rolling wireguard-go 0.0.20230223-r7 —
Wolfi rolling yq 4.35.2-r3 —
Wolfi rolling zot 1.4.3-r9 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/net < 0.17.0 0.17.0 GHSA-4374-p667-p6c8
Go stdlib < 1.20.10 · >= 1.21.0-0, < 1.21.3 1.20.10, 1.21.3 GO-2023-2102

Advisories 50

References