Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-3978 EUVD-2023-2188GHSA-2wrh-6pvc-2jm9GO-2023-1988

Improper rendering of text nodes in golang.org/x/net/html

Published Aug 2, 2023 · Updated Sep 27, 2024 · Assigned by Go

Vendor: golang.org/x/net Product: golang.org/x/net/html Package: aactl Package: adsys Package: apko Package: application-gateway-kubernetes-ingress Package: aws-efs-csi-driver Package: aws-load-balancer-controller Package: bank-vaults Package: bom Package: buildctl Package: buildkitd Package: cert-manager Package: chartmuseum Package: cni-plugins Package: containerized-data-importer Package: cosign Package: crossplane-provider-aws Package: cue Package: dex Package: dgraph Package: dive Package: dynamic-localpv-provisioner Package: falcoctl Package: flux Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: frp Package: fuse-overlayfs-snapshotter Package: git-lfs Package: gitness Package: gke-gcloud-auth-plugin Package: gobuster Package: golang-golang-x-net Package: golang-golang-x-net Package: golang-golang-x-net-dev Package: golang.org/x/net Package: gomplate Package: grpcurl Package: helm Package: helm-3 Package: helm-4 Package: hey Package: hugo Package: juju-core Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k8sgpt Package: k8sgpt-operator Package: kaf Package: kots Package: kpt Package: kube-fluentd-operator Package: kube-logging-operator Package: kube-state-metrics Package: kubeflow Package: kubeflow-access-management Package: kubeflow-access-management-compat Package: kubeflow-admission-webhook Package: kubeflow-admission-webhook-compat Package: kubeflow-katib Package: kubeflow-notebook-controller Package: kubeflow-notebook-controller-compat Package: kubeflow-profile-controller Package: kubeflow-profile-controller-compat Package: kubeflow-pvcviewer-controller Package: kubeflow-pvcviewer-controller-compat Package: kubeflow-tensorboard-controller Package: kubeflow-tensorboard-controller-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubevela Package: kubevirt Package: kubewatch Package: lxd Package: mc Package: memcached-exporter Package: metacontroller Package: metrics-server Package: minio Package: multus Package: newrelic-infrastructure-agent Package: nfs-subdir-external-provisioner Package: nodetaint Package: nri-prometheus Package: oauth2-proxy Package: ollama Package: packer Package: podman Package: prometheus-adapter Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-operator Package: prometheus-pushgateway Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-java Package: pulumi-language-yaml Package: rqlite Package: runc Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-gcp Package: sigstore-scaffolding Package: skaffold Package: spark-operator Package: src Package: stakater-reloader Package: telegraf Package: terraform Package: terraform-provider-sendgrid Package: thanos-operator Package: timoni Package: tkn Package: trillian Package: trust-manager Package: vault-k8s Package: vertical-pod-autoscaler Package: vitess Package: weaviate Package: wireguard-go Package: yq Package: zot Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

Affected products

VendorProductAffectedFixed
golang.org/x/net golang.org/x/net/html < 0.13.0 0.13.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-golang-x-net 1:0.14.0-1 —
Debian 13 golang-golang-x-net 1:0.14.0-1 —
Debian 12 golang-golang-x-net No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS golang-golang-x-net 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1 USN-8900-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS golang-golang-x-net 1:0.21.0+dfsg-1ubuntu0.1~esm2 USN-8089-1
Ubuntu Pro 22.04 LTS golang-golang-x-net 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2 USN-8089-1
Ubuntu Pro 20.04 LTS adsys 0.9.2~20.04.2ubuntu0.1+esm1 —
Ubuntu Pro 20.04 LTS golang-golang-x-net-dev 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2 —
Ubuntu Pro 18.04 LTS golang-golang-x-net-dev 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2 —
Ubuntu Pro 18.04 LTS lxd 3.0.3-0ubuntu1~18.04.2+esm2 —
Ubuntu Pro 16.04 LTS golang-golang-x-net-dev 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2 —
Ubuntu Pro 16.04 LTS juju-core 2.3.7-0ubuntu0.16.04.1+esm2 —
Ubuntu Pro 16.04 LTS lxd 2.0.11-0ubuntu1~16.04.4+esm2 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 podman +5 2:4.6.1-5.el9 RHSA-2023:6474
RHEL 8 buildah +1 1:1.24.6-7.module+el8.9.0+19784+443be299 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 cockpit-podman 46-1.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 conmon 2:2.1.4-2.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 container-selinux 2:2.205.0-3.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 containernetworking-plugins 1:1.1.1-5.module+el8.9.0+19784+443be299 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 containers-common 2:1-38.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 crit +4 3.15-3.module+el8.9.0+19243+df4d9ff2 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 crun 1.8.3-1.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 fuse-overlayfs 1.9-2.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 libslirp +1 4.4.0-1.module+el8.9.0+19243+df4d9ff2 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 netavark +1 2:1.0.1-38.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 oci-seccomp-bpf-hook 1.2.5-2.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 podman +6 2:4.0.2-24.module+el8.9.0+19784+443be299 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 python-podman +1 4.0.0-2.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 runc 1:1.1.5-2.module+el8.9.0+19104+fcef53a3 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 skopeo +1 2:1.6.2-8.module+el8.9.0+19104+fcef53a3 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 slirp4netns 1.1.8-3.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
RHEL 8 toolbox +1 0.0.99.4-5.module+el8.9.0+19655+b08391f8 RHSA-2023:6939, RHSA-2023:6938
RHEL 8 udica 0.2.6-4.module+el8.9.0+19098+6e7a5e3f RHSA-2023:6939, RHSA-2023:6938
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Openshift Ironic 4 openstack-ironic +5 1:21.5.0-0.20231002130534.0df5961.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 openstack-ironic-inspector +4 11.5.0-0.20230706175125.193aa0d.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-automaton +1 3.1.0-0.20230608140652.a4f7631.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-cinderclient +1 9.3.0-0.20230608143053.f7a612e.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-cliff +2 4.3.0-0.20230608150702.72e81d7.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-debtcollector +1 2.5.0-0.20230308172820.a6b46c5.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-decorator +1 4.4.2-6.0.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-dracclient +1 8.0.0-0.20230308200614.9c7499c.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-fixtures +1 4.0.1-1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-futurist +1 2.4.1-0.20230308173923.159d752.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-glanceclient +1 1:4.3.0-0.20230608143056.52fb6b2.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-hardware +2 0.30.0-0.20230308190813.f6ff0ed.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-ironic-lib +1 5.4.1-0.20230706172632.25d8671.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-ironic-prometheus-exporter +1 4.1.1-0.20230614150617.7b35627.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-keystoneauth1 +1 5.2.0-0.20230608152518.2e40bbf.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-keystoneclient +2 1:5.1.0-0.20230608141554.4763cd8.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-keystonemiddleware +1 10.3.0-0.20230608151410.92cdf8a.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-openstacksdk +2 1.2.0-0.20230608155226.b7ff031.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-os-service-types +1 1.7.0-0.20230308170555.0b2f473.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-os-traits +2 3.0.0-0.20230608152745.cff125c.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-osc-lib +2 2.8.0-0.20230608151456.db9cdc9.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-cache +3 3.4.0-0.20230608153448.a720016.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-concurrency +3 5.1.1-0.20230706190204.0af5942.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-config +1 2:9.1.1-0.20230608145954.515daab.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-context +2 5.1.1-0.20230608143931.7696282.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-db +3 12.3.1-0.20230608142355.b689b63.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-i18n +2 6.0.0-0.20230608140652.03605c2.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-log +3 5.2.0-0.20230608150750.16a8a42.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-messaging +2 14.3.1-0.20230608152013.0602d1a.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-middleware +3 5.1.1-0.20230608145931.7725ac9.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-policy +3 4.2.0-0.20230608153320.93129eb.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-rootwrap +2 7.0.1-0.20230608144658.b72372b.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-serialization +2 5.1.1-0.20230608144505.b4be3a4.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-service +2 3.1.1-0.20230608145222.b3ba591.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-upgradecheck +1 2.1.1-0.20230608143829.eeedfc9.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-utils +1 6.1.0-0.20230608142355.d49d594.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-oslo-versionedobjects +1 3.1.0-0.20230608141554.b4ea834.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-osprofiler 3.4.3-0.20230308173821.3286301.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-pbr 5.11.1-0.1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-proliantutils 2.14.1-0.20230608154738.3de2844.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-pycadf +1 3.1.1-0.20230308171749.4179996.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-requestsexceptions 1.4.0-0.20230308170555.d7ac0ff.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-scciclient 0.12.3-0.20230308201513.0940a71.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-stevedore 5.1.0-0.20230608154210.2d99ccc.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-sushy 4.5.0-0.20230719180619.146ed33.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-sushy-oem-idrac 5.0.0-0.20230308202122.da9a0e4.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-swiftclient 4.3.0-0.20230608151934.236c277.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-tenacity 6.3.1-1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-tooz 4.1.0-0.20230608154038.d5bf20c.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python-wrapt +1 1.14.1-1.el9 RHSA-2023:5009
Red Hat Openshift Ironic 4 python3-ironic-python-agent +2 9.5.0-0.20230728140546.fce0b8c.el9 RHSA-2023:5009
Red Hat OpenShift 4 afterburn +2 5.4.3-1.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 bpftool 7.0.0-284.36.1.el9_2 RHSA-2023:5009
Red Hat OpenShift 4 buildah +1 1:1.29.1-10.1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 butane +1 0.19.0-1.1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 catch +1 3.3.2-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 conmon 3:2.1.7-3.1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 container-selinux 3:2.221.0-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 containernetworking-plugins 1.0.1-11.1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 containers-common 2:1-51.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 coreos-installer +2 0.17.0-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 cri-o 1.27.1-8.1.rhaos4.14.git3fecb83.el8 RHSA-2023:5009
Red Hat OpenShift 4 cri-tools 1.27.0-2.1.el8 RHSA-2023:5009
Red Hat OpenShift 4 crun 1.9.2-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 crun-wasm 0.0-3.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 fmt +1 9.1.0-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 gmock +3 1.13.0-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 google-benchmark +2 1.8.2-1.el9 RHSA-2023:5009
Red Hat OpenShift 4 haproxy +1 2.6.13-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 ignition +1 2.16.2-1.1.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 kata-containers 3.1.3-4.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 kernel-rt +21 5.14.0-284.36.1.rt14.321.el9_2 RHSA-2023:5009
Red Hat OpenShift 4 nmstate +4 2.2.12-1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift +1 4.14.0-202310210404.p0.gf67aeb3.assembly.stream.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift-ansible +1 4.14.0-202310062327.p0.gf781421.assembly.stream.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift-clients +1 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift-kuryr +4 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift-prometheus-promu +1 0.15.0-15.1.gitd5383c5.el8 RHSA-2023:5009
Red Hat OpenShift 4 openshift4-aws-iso 4.14.0-202309272140.p0.gd2acdd5.assembly.stream.el8 RHSA-2023:5009
Red Hat OpenShift 4 ovn23.09 +3 23.09.0-37.el9fdp RHSA-2023:5009
Red Hat OpenShift 4 perf +60 5.14.0-284.36.1.el9_2 RHSA-2023:5009
Red Hat OpenShift 4 podman +6 3:4.4.1-10.1.rhaos4.14.el8 RHSA-2024:0944, RHSA-2023:5009
Red Hat OpenShift 4 runc 4:1.1.9-2.1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 skopeo +1 2:1.11.2-10.1.rhaos4.14.el8 RHSA-2023:5009
Red Hat OpenShift 4 spdlog +1 1.12.0-1.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 toolbox 0.1.2-1.rhaos4.14.el9 RHSA-2023:5009
Red Hat OpenShift 4 wasmedge +2 0.12.1-2.rhaos4.14.el9 RHSA-2023:5009

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 podman +5 2:4.6.1-5.el9 ALSA-2023:6474
AlmaLinux 8 buildah +1 1:1.24.6-7.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 cockpit-podman 46-1.module_el8.7.0+3344+5bcd850f ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 conmon 2:2.1.4-2.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 container-selinux 2:2.205.0-3.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 containernetworking-plugins 1:1.1.1-5.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 containers-common 2:1-38.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 crit +4 3.15-3.module_el8.6.0+2877+8e437bf5 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 crun 1.8.3-1.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 fuse-overlayfs 1.9-2.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 libslirp +1 4.4.0-1.module_el8.6.0+2877+8e437bf5 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 netavark +1 2:1.0.1-38.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.5-2.module_el8.8.0+3468+16b86c82 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 podman +6 2:4.0.2-24.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 python3-podman 4.0.0-2.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 runc 1:1.1.5-2.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 skopeo +1 2:1.6.2-8.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 slirp4netns 1.1.8-3.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 toolbox +1 0.0.99.4-5.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938
AlmaLinux 8 udica 0.2.6-4.module_el8.9.0+3627+db8ec155 ALSA-2023:6939, ALSA-2023:6938

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 buildah 1:1.24.6-7.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 cockpit-podman 46-1.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 conmon 2:2.1.4-2.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 container-selinux 2:2.205.0-3.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 containernetworking-plugins 1:1.1.1-5.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 containers-common 2:1-38.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 criu 3.15-3.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 crun 1.8.3-1.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 fuse-overlayfs 1.9-2.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 libslirp 4.4.0-1.module+el8.9.0+1445+07728297 RLSA-2023:6939, RLSA-2023:6938
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.5-2.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 podman 2:4.0.2-24.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 python-podman 4.0.0-2.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 runc 1:1.1.5-2.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 slirp4netns 1.1.8-3.module+el8.9.0+1445+07728297 RLSA-2023:6938
Rocky Linux 8 udica 0.2.6-4.module+el8.9.0+1445+07728297 RLSA-2023:6938

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 golang-github-prometheus-promu 0.16.0-150000.3.21.4 SUSE-SU-2024:4011-1
SLES 15 SP5 golang-github-prometheus-promu 0.16.0-150000.3.21.4 SUSE-SU-2024:4011-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Manager Server Module 4.3 golang-github-lusitaniae-apache_exporter 1.0.8-150000.1.23.3 SUSE-SU-2024:4011-1
SUSE Manager Proxy Module 4.3 golang-github-lusitaniae-apache_exporter 1.0.8-150000.1.23.3 SUSE-SU-2024:4011-1
SUSE Manager Client Tools for SLE Micro 5 uyuni-tools 0.1.23-150000.1.13.3 SUSE-SU-2024:4011-1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 golang-github-lusitaniae-apache_exporter 1.0.8-1.14.1 SUSE-SU-2024:4019-1, SUSE-EL-9-CLIENT-TOOLS-2024-4019
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 scap-security-guide 0.1.74-1.29.1 SUSE-SU-2024:4019-1, SUSE-EL-9-CLIENT-TOOLS-2024-4019
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 spacecmd 5.0.10-1.41.1 SUSE-SU-2024:4019-1, SUSE-EL-9-CLIENT-TOOLS-2024-4019
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 uyuni-tools 0.1.23-1.11.1 SUSE-SU-2024:4019-1, SUSE-EL-9-CLIENT-TOOLS-2024-4019
SUSE Manager Client Tools 15 golang-github-lusitaniae-apache_exporter 1.0.8-150000.1.23.3 SUSE-SU-2024:4011-1
SUSE Manager Client Tools 15 mgr-daemon 4.3.11-150000.1.53.5 SUSE-SU-2024:4011-1
SUSE Manager Client Tools 15 spacecmd 5.0.10-150000.3.127.3 SUSE-SU-2024:4011-1
SUSE Manager Client Tools 15 spacewalk-client-tools 4.3.21-150000.3.97.4 SUSE-SU-2024:4011-1
SUSE Manager Client Tools 15 uyuni-common-libs 5.0.5-150000.1.45.3 SUSE-SU-2024:4011-1
SUSE Manager Client Tools 15 uyuni-tools 0.1.23-150000.1.13.3 SUSE-SU-2024:4011-1
SUSE Manager Client Tools 12 golang-github-lusitaniae-apache_exporter 1.0.8-1.24.3 SUSE-SU-2024:4010-1
SUSE Manager Client Tools 12 golang-github-prometheus-promu 0.16.0-1.21.3 SUSE-SU-2024:4010-1
SUSE Manager Client Tools 12 mgr-daemon 4.3.11-1.53.2 SUSE-SU-2024:4010-1
SUSE Manager Client Tools 12 spacecmd 5.0.10-38.150.2 SUSE-SU-2024:4010-1
SUSE Manager Client Tools 12 spacewalk-client-tools 4.3.21-52.104.2 SUSE-SU-2024:4010-1
SUSE Manager Client Tools 12 uyuni-common-libs 5.0.5-1.45.2 SUSE-SU-2024:4010-1
SUSE Manager Client Tools 12 uyuni-tools 0.1.23-1.13.2 SUSE-SU-2024:4010-1
SUSE EL-9:Update:Products:ManagerTools:Update golang 1.20.12-1.3.1 SUSE-SU-2024:4019-1
SUSE EL-9:Update:Products:ManagerTools:Update golang-github-lusitaniae-apache_exporter 1.0.8-1.14.1 SUSE-SU-2024:4019-1
SUSE EL-9:Update:Products:ManagerTools:Update scap-security-guide 0.1.74-1.29.1 SUSE-SU-2024:4019-1
SUSE EL-9:Update:Products:ManagerTools:Update spacecmd 5.0.10-1.41.1 SUSE-SU-2024:4019-1
SUSE EL-9:Update:Products:ManagerTools:Update uyuni-tools 0.1.23-1.11.1 SUSE-SU-2024:4019-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed golang-github-lusitaniae-apache_exporter 1.0.8-1.1 openSUSE-SU-2024:14218-1
openSUSE Leap 15.6 golang-github-lusitaniae-apache_exporter 1.0.8-150000.1.23.3 SUSE-SU-2024:4011-1
openSUSE Leap 15.6 golang-github-prometheus-promu 0.16.0-150000.3.21.4 SUSE-SU-2024:4011-1
openSUSE Leap 15.6 spacecmd 5.0.10-150000.3.127.3 SUSE-SU-2024:4011-1
openSUSE Leap 15.6 wire 0.6.0-150000.1.17.4 SUSE-SU-2024:4011-1
openSUSE Leap 15.5 golang-github-lusitaniae-apache_exporter 1.0.8-150000.1.23.3 SUSE-SU-2024:4011-1
openSUSE Leap 15.5 golang-github-prometheus-promu 0.16.0-150000.3.21.4 SUSE-SU-2024:4011-1
openSUSE Leap 15.5 spacecmd 5.0.10-150000.3.127.3 SUSE-SU-2024:4011-1
openSUSE Leap 15.5 wire 0.6.0-150000.1.17.4 SUSE-SU-2024:4011-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-ssm-agent 3.2.1705.0-1.amzn2023 ALAS2023-2023-388
Amazon Linux 2023 ecs-init 1.79.1-1.amzn2023 ALAS2023-2024-476
Amazon Linux 2023 nerdctl 1.1.0-1.amzn2023.0.4 ALAS2023-2023-366
Amazon Linux 2 amazon-ssm-agent 3.2.1705.0-1.amzn2 ALAS2-2023-2303
Amazon Linux 2 cri-tools 1.29.0-1.amzn2.0.1 ALAS2-2024-2446
Amazon Linux 2 nerdctl 1.6.2-1.amzn2.0.2 ALAS2-2023-2339

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 application-gateway-kubernetes-ingress 1.7.7-1 —
Azure Linux 3 cert-manager 1.12.12-1 —
Azure Linux 3 containerized-data-importer 1.57.0-12 —
Azure Linux 3 kubevirt 1.2.0-1 —
Azure Linux 3 multus 4.0.2-2 —
Azure Linux 3 podman 5.6.1-2 —
Azure Linux 3 prometheus-adapter 0.12.0-1 —
Azure Linux 3 telegraf 1.29.4-1 —
Azure Linux 3 vitess 19.0.4-2 —
Azure Linux 2 (CBL-Mariner) cert-manager 1.11.2-14 —
Azure Linux 2 (CBL-Mariner) cni-plugins 1.3.0-6 —
Azure Linux 2 (CBL-Mariner) kubevirt 0.59.0-24 —
Azure Linux 2 (CBL-Mariner) multus 4.0.2-5 —
Azure Linux 2 (CBL-Mariner) packer 1.9.5-3 —
Azure Linux 2 (CBL-Mariner) podman No fix yet —
Azure Linux 2 (CBL-Mariner) telegraf 1.27.4-1 —
Azure Linux 2 (CBL-Mariner) vitess 17.0.7-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 podman +5 2:4.6.1-5.0.1.el9 ELSA-2023-6474
Oracle Linux 8 buildah +1 1:1.24.6-7.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 cockpit-podman 46-1.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 conmon 2:2.1.4-2.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 container-selinux 2:2.205.0-3.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 containernetworking-plugins 1:1.1.1-5.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 containers-common 2:1-38.0.1.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 crit +4 3.15-3.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 crun 1.8.3-1.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 fuse-overlayfs 1.9-2.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 libslirp +1 4.4.0-1.module+el8.9.0+90021+ce997450 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 netavark +1 2:1.0.1-38.0.1.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.5-2.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 podman +6 2:4.0.2-24.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 python3-podman 4.0.0-2.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 runc 1:1.1.5-2.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 skopeo +1 2:1.6.2-8.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 slirp4netns 1.1.8-3.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938
Oracle Linux 8 udica 0.2.6-4.module+el8.9.0+90044+a34bc939 ELSA-2023-6939, ELSA-2023-6938

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r7 —
Wolfi rolling apko 0.10.0-r6 —
Wolfi rolling aws-efs-csi-driver 1.7.0-r5 —
Wolfi rolling aws-load-balancer-controller 2.6.1-r3 —
Wolfi rolling bank-vaults 1.20.4-r3 —
Wolfi rolling bom 0.6.0-r0 —
Wolfi rolling buildctl +1 0.12.4-r4 —
Wolfi rolling chartmuseum 0.16.0-r6 —
Wolfi rolling cosign 2.2.0-r5 —
Wolfi rolling crossplane-provider-aws 0.42.0-r1 —
Wolfi rolling cue 0.6.0-r7 —
Wolfi rolling dex 2.37.0-r7 —
Wolfi rolling dgraph 23.1.0-r6 —
Wolfi rolling dive 0.11.0-r7 —
Wolfi rolling dynamic-localpv-provisioner 3.4.1-r3 —
Wolfi rolling falcoctl 0.6.2-r3 —
Wolfi rolling flux 2.1.2-r1 —
Wolfi rolling flux-helm-controller 0.36.2-r1 —
Wolfi rolling flux-image-automation-controller 0.36.1-r3 —
Wolfi rolling flux-image-reflector-controller 0.30.0-r4 —
Wolfi rolling flux-kustomize-controller 1.1.1-r1 —
Wolfi rolling flux-notification-controller 1.1.0-r4 —
Wolfi rolling flux-source-controller 1.1.2-r1 —
Wolfi rolling frp 0.52.2-r0 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.7-r2 —
Wolfi rolling git-lfs 3.4.0-r4 —
Wolfi rolling gitness 3.0.0_beta2-r0 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r6 —
Wolfi rolling gobuster 3.6.0-r9 —
Wolfi rolling gomplate 3.11.5-r6 —
Wolfi rolling grpcurl 1.8.8-r3 —
Wolfi rolling helm 3.13.1-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling hey 0.1.4-r8 —
Wolfi rolling hugo 0.119.0-r4 —
Wolfi rolling k3d +2 5.6.0-r6 —
Wolfi rolling k3s 1.28.2-r1 —
Wolfi rolling k8sgpt 0.3.18-r1 —
Wolfi rolling k8sgpt-operator 0.0.21-r6 —
Wolfi rolling kaf 0.2.6-r6 —
Wolfi rolling kots 1.103.2-r2 —
Wolfi rolling kpt 1.0.0_beta46-r0 —
Wolfi rolling kube-fluentd-operator 1.17.6-r8 —
Wolfi rolling kube-logging-operator 4.2.2-r5 —
Wolfi rolling kube-state-metrics 2.10.0-r4 —
Wolfi rolling kubeflow +12 1.10.0-r4 —
Wolfi rolling kubeflow-katib 0.15.0-r7 —
Wolfi rolling kubernetes-csi-external-provisioner 3.6.0-r3 —
Wolfi rolling kubernetes-csi-external-resizer 1.9.0-r3 —
Wolfi rolling kubernetes-csi-livenessprobe 2.11.0-r3 —
Wolfi rolling kubernetes-dashboard 2.7.0-r9 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.0.9-r9 —
Wolfi rolling kubevela 1.9.6-r4 —
Wolfi rolling kubewatch 2.5.0-r7 —
Wolfi rolling mc 0.20230628.215417-r7 —
Wolfi rolling memcached-exporter 0.13.0-r7 —
Wolfi rolling metacontroller 4.11.0-r6 —
Wolfi rolling metrics-server 0.6.4-r4 —
Wolfi rolling minio 0.20230904.195737-r5 —
Wolfi rolling newrelic-infrastructure-agent 1.47.2-r3 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r1 —
Wolfi rolling nodetaint 0.0.4-r6 —
Wolfi rolling nri-prometheus 2.18.7-r3 —
Wolfi rolling oauth2-proxy 7.5.1-r3 —
Wolfi rolling ollama 0.1.4-r0 —
Wolfi rolling prometheus-adapter 0.11.1-r3 —
Wolfi rolling prometheus-alertmanager 0.26.0-r4 —
Wolfi rolling prometheus-operator 0.68.0-r4 —
Wolfi rolling prometheus-pushgateway 1.6.2-r3 —
Wolfi rolling pulumi 3.88.1-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.13.0-r4 —
Wolfi rolling pulumi-language-dotnet 3.57.0-r3 —
Wolfi rolling pulumi-language-java 0.9.8-r2 —
Wolfi rolling pulumi-language-yaml 1.3.0-r5 —
Wolfi rolling rqlite 7.21.4-r6 —
Wolfi rolling runc 1.1.9-r5 —
Wolfi rolling secrets-store-csi-driver 1.3.4-r6 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.3.0-r6 —
Wolfi rolling sigstore-scaffolding 0.6.8-r4 —
Wolfi rolling skaffold 2.8.0-r4 —
Wolfi rolling spark-operator 1.1.27-r13 —
Wolfi rolling src 5.3.0-r0 —
Wolfi rolling stakater-reloader 1.0.43-r2 —
Wolfi rolling terraform 1.5.5-r6 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r1 —
Wolfi rolling thanos-operator 0.3.7-r8 —
Wolfi rolling timoni 0.14.2-r2 —
Wolfi rolling tkn 0.32.0-r4 —
Wolfi rolling trillian 1.5.2-r4 —
Wolfi rolling trust-manager 0.6.0-r5 —
Wolfi rolling vault-k8s 1.2.1-r8 —
Wolfi rolling vertical-pod-autoscaler 0.14.0-r5 —
Wolfi rolling weaviate 1.21.6-r1 —
Wolfi rolling wireguard-go 0.0.20230223-r7 —
Wolfi rolling yq 4.35.2-r3 —
Wolfi rolling zot 1.4.3-r9 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/net < 0.13.0 0.13.0 GHSA-2wrh-6pvc-2jm9

Advisories 28

References