Description
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | net/http | < 1.21.9, 1.22.0-0 – < 1.22.2 | 1.21.9 |
| golang.org/x/net | golang.org/x/net/http2 | < 0.23.0 | 0.23.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-golang-x-net | 1:0.23.0+dfsg- | — |
| Debian 13 | golang-golang-x-net | 1:0.23.0+dfsg- | — |
| Debian 12 | golang-1.19 +1 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | golang-1.21 | 1.21.9-1ubuntu0.1 | USN-6886-1 |
| Ubuntu 24.04 LTS | golang-1.22 | 1.22.2-2ubuntu0.1 | USN-6886-1 |
| Ubuntu 22.04 LTS | golang-1.17 | 1.17.13-3ubuntu1.3 | USN-7111-1 |
| Ubuntu 22.04 LTS | golang-1.18 | 1.18.1-1ubuntu1.2 | USN-7109-1 |
| Ubuntu 22.04 LTS | golang-1.20 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.21 | 1.21.1-1~ubuntu22.04.3 | USN-6886-1 |
| Ubuntu 22.04 LTS | golang-1.22 | 1.22.2-2~22.04.1 | USN-6886-1 |
| Ubuntu 20.04 LTS | golang-1.13 +2 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~20.04.3 | USN-7109-1 |
| Ubuntu 20.04 LTS | golang-1.21 | 1.21.1-1~ubuntu20.04.3 | USN-6886-1 |
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~18.04.4+esm1 | USN-7109-1 |
| Ubuntu Pro 16.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~16.04.6+esm1 | USN-7109-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | git-lfs | 3.2.0-2.el9_3 | RHSA-2024:2724, RHSA-2024:2079 |
| RHEL 9 | golang +6 | 1.20.12-4.el9_3 | RHSA-2024:2562, RHSA-2024:1963 |
| RHEL 8 | delve | 1.20.2-1.module+el8.9.0+18926+5193682d | RHSA-2024:3259, RHSA-2024:1962 |
| RHEL 8 | git-lfs | 3.2.0-3.el8_9 | RHSA-2024:3346, RHSA-2024:2699 |
| RHEL 8 | go-toolset | 1.20.12-1.module+el8.9.0+21033+5795bdf6 | RHSA-2024:3259, RHSA-2024:1962 |
| RHEL 8 | golang +5 | 1.20.12-8.module+el8.9.0+21735+6a7c8cc8 | RHSA-2024:3259, RHSA-2024:1962 |
| RHEL 7 | rhc-worker-script | 0.8-1.el7_9 | RHSA-2024:2625 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Service Interconnect 1 | skupper-cli | 1.4.5-1.el8 | RHSA-2024:4125 |
| Red Hat Serverless 1 | openshift-serverless-clients | 1.12.0-7.el8 | RHSA-2024:4023 |
| RHEL 9.2 EUS | git-lfs | 3.2.0-1.el9_2 | RHSA-2024:4934 |
| RHEL 9.2 EUS | golang +6 | 1.19.13-7.el9_2 | RHSA-2024:4146 |
| RHEL 9.0 E4S | git-lfs | 2.13.3-5.el9_0.1 | RHSA-2024:4543 |
| RHEL 8.8 EUS | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2024:2936 |
| RHEL 8.8 EUS | git-lfs | 3.2.0-2.el8_8.1 | RHSA-2024:4545 |
| RHEL 8.8 EUS | go-toolset | 1.19.13-1.module+el8.8.0+20380+7171fefb | RHSA-2024:2936 |
| RHEL 8.8 EUS | golang +6 | 1.19.13-7.module+el8.8.0+21782+8d42ce3c | RHSA-2024:2936 |
| RHEL 8.6 TUS | git-lfs | 2.13.3-3.el8_6.1 | RHSA-2024:4546 |
| RHEL 8.6 EUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2024:2935 |
| RHEL 8.6 EUS | go-toolset | 1.17.13-1.module+el8.6.0+21758+c87a29d6 | RHSA-2024:2935 |
| RHEL 8.6 EUS | golang +6 | 1.17.13-3.module+el8.6.0+21758+c87a29d6 | RHSA-2024:2935 |
| RHEL 8.6 E4S | git-lfs | 2.13.3-3.el8_6.1 | RHSA-2024:4546 |
| RHEL 8.6 AUS | git-lfs | 2.13.3-3.el8_6.1 | RHSA-2024:4546 |
| RHEL 8.4 TUS | git-lfs | 2.11.0-2.el8_4.2 | RHSA-2024:4933 |
| RHEL 8.4 E4S | git-lfs | 2.11.0-2.el8_4.2 | RHSA-2024:4933 |
| RHEL 8.4 AUS | git-lfs | 2.11.0-2.el8_4.2 | RHSA-2024:4933 |
| Red Hat Openshift Pipelines 1 | openshift-pipelines-client +1 | 1.15.0-11496.el8 | RHEA-2024:4022 |
| Red Hat OpenStack 17 | etcd | 3.4.26-8.el9ost | RHSA-2024:2729 |
| Red Hat OpenStack 16 | etcd | 3.3.23-16.el8ost | RHSA-2024:3467, RHSA-2024:3352 |
| Red Hat OpenShift 4 | buildah +1 | 1:1.29.1-10.4.rhaos4.14.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | butane +1 | 0.19.0-1.4.rhaos4.14.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | conmon | 3:2.1.7-3.4.rhaos4.14.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-1.3.rhaos4.14.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | cri-o | 1.27.4-7.2.rhaos4.14.git082c52f.el8 | RHSA-2024:2672, RHSA-2024:1897 |
| Red Hat OpenShift 4 | cri-tools | 1.27.0-3.2.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | ignition +1 | 2.16.2-2.2.rhaos4.14.el9 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | microshift +4 | 4.14.24-202405021453.p0.g6e3abf7.assembly.4.14.24.el9 | RHSA-2024:2671, RHSA-2024:2667 |
| Red Hat OpenShift 4 | microshift-olm +1 | 4.15.12-202405021504.p0.ge0938ef.assembly.4.15.12.el9 | RHSA-2024:2667 |
| Red Hat OpenShift 4 | openshift +1 | 4.12.0-202404161006.p0.g054f0ba.assembly.stream.el8 | RHSA-2024:2672, RHSA-2024:2049, RHSA-2024:1899 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.14.0-202404151639.p0.g81558cc.assembly.stream.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.14.0-202404151639.p0.g8926a29.assembly.stream.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | openshift4-aws-iso | 4.14.0-202404151639.p0.gd2acdd5.assembly.stream.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | ose-aws-ecr-image-credential-provider | 4.14.0-202404151639.p0.g607e2dd.assembly.stream.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-5.3.rhaos4.13.el8 | RHSA-2024:2672, RHSA-2024:2049, RHSA-2024:1897 |
| Red Hat OpenShift 4 | runc | 4:1.1.12-1.2.rhaos4.14.el8 | RHSA-2024:1897 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.2-10.4.rhaos4.14.el8 | RHSA-2024:2049, RHSA-2024:1897 |
| Red Hat Devtools 2023 | go-toolset-1.19-golang +6 | 1.19.13-7.el7_9 | RHSA-2024:2892 |
| Red Hat Ansible Automation Platform Inside 2 | python-black +1 | 22.8.0-2.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python-cryptography +1 | 42.0.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python-jinja2 +1 | 3.1.4-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python39-black +1 | 22.8.0-2.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python39-cryptography +1 | 42.0.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | python39-jinja2 +1 | 3.1.4-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Inside 2 | receptor +1 | 1.4.8-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-black +1 | 22.8.0-2.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-cryptography +1 | 42.0.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-idna +1 | 3.7-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-jinja2 +1 | 3.1.4-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python-requests +1 | 2.32.2-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-black +1 | 22.8.0-2.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-cryptography +1 | 42.0.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-idna +1 | 3.7-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-jinja2 +1 | 3.1.4-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | python39-requests +1 | 2.32.2-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform Developer 2 | receptor +1 | 1.4.8-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | automation-controller-venv-tower | 4.5.7-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | automation-hub +2 | 4.9.2-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-aiohttp +1 | 3.9.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-black +1 | 22.8.0-2.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-cryptography +1 | 42.0.5-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-galaxy-ng +1 | 4.9.2-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-gunicorn +1 | 22.0.0-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-idna +1 | 3.7-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-jinja2 +1 | 3.1.4-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-pillow +1 | 10.3.0-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-pydantic +1 | 1.10.15-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-requests +1 | 2.32.2-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-social-auth-app-django +1 | 5.4.1-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python-sqlparse +1 | 0.5.0-1.el9ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-aiohttp +1 | 3.9.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-black +1 | 22.8.0-2.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-cryptography +1 | 42.0.5-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-gunicorn +1 | 22.0.0-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-idna +1 | 3.7-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-jinja2 +1 | 3.1.4-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-pillow +1 | 10.3.0-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-pydantic +1 | 1.10.15-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-requests +1 | 2.32.2-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-social-auth-app-django +1 | 5.4.1-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | python39-sqlparse +1 | 0.5.0-1.el8ap | RHSA-2024:3781 |
| Red Hat Ansible Automation Platform 2 | receptor +1 | 1.4.8-1.el8ap | RHSA-2024:3781 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | git-lfs | 3.2.0-2.el9_3 | ALSA-2024:2724, ALSA-2024:2079 |
| AlmaLinux 9 | golang +6 | 1.20.12-4.el9_3 | ALSA-2024:2562, ALSA-2024:1963 |
| AlmaLinux 8 | delve | 1.20.2-1.module_el8.9.0+3642+43318da8 | ALSA-2024:3259, ALSA-2024:1962 |
| AlmaLinux 8 | git-lfs | 3.2.0-3.el8_9 | ALSA-2024:3346, ALSA-2024:2699 |
| AlmaLinux 8 | go-toolset | 1.20.12-1.module_el8.9.0+3728+f1d47c6f | ALSA-2024:3259, ALSA-2024:1962 |
| AlmaLinux 8 | golang +5 | 1.20.12-8.module_el8.9.0+3818+ac9bcae6 | ALSA-2024:3259, ALSA-2024:1962 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | git-lfs | 3.4.1-2.el9_4 | RLSA-2024:2724 |
| Rocky Linux 8 | delve | 1.20.2-1.module+el8.9.0+1392+c9f6376a | RLSA-2024:1962 |
| Rocky Linux 8 | git-lfs | 3.2.0-3.el8_9 | RLSA-2024:3346, RLSA-2024:2699 |
| Rocky Linux 8 | go-toolset | 1.20.12-1.module+el8.9.0+1725+0ed4fa7f | RLSA-2024:1962 |
| Rocky Linux 8 | golang | 1.20.12-8.module+el8.9.0+1787+5672f315 | RLSA-2024:1962 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | containerized-data-importer | 1.64.0-150700.9.11.1 | SUSE-SU-2026:2493-1 |
| SLES 15 SP7 | golang-github-prometheus-alertmanager | 0.26.0-150100.4.25.2 | SUSE-SU-2025:01992-1 |
| SLES 15 SP7 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES 15 SP7 | golang-github-prometheus-prometheus | 2.53.4-150100.4.26.2 | SUSE-SU-2025:01990-1 |
| SLES 15 SP7 | google-guest-agent | 20260529.00-150000.1.70.1 | SUSE-SU-2026:2612-1 |
| SLES 15 SP7 | grafana | 11.5.5-150200.3.72.2 | SUSE-SU-2025:01991-1 |
| SLES 15 SP6 | apptainer | 1.3.6-150600.4.6.1 | SUSE-SU-2025:0313-1 |
| SLES 15 SP6 | buildah | 1.35.5-150500.3.28.1 | SUSE-SU-2025:0581-1 |
| SLES 15 SP6 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES 15 SP6 | go1.21-openssl | 1.21.13.1-150600.16.3.1 | SUSE-SU-2024:3755-1 |
| SLES 15 SP6 | go1.22-openssl | 1.22.7.1-150600.13.3.1 | SUSE-SU-2024:3938-1 |
| SLES 15 SP6 | golang-github-prometheus-alertmanager | 0.26.0-150100.4.25.2 | SUSE-SU-2025:01992-1 |
| SLES 15 SP6 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES 15 SP6 | golang-github-prometheus-prometheus | 2.53.4-150100.4.26.2 | SUSE-SU-2025:01990-1 |
| SLES 15 SP6 | google-guest-agent | 20260529.00-150000.1.70.1 | SUSE-SU-2026:2612-1 |
| SLES 15 SP6 | grafana | 11.5.5-150200.3.72.2 | SUSE-SU-2025:01991-1 |
| SLES 15 SP6 | ignition | 2.14.0-150400.9.6.1 | SUSE-SU-2025:0299-1 |
| SLES 15 SP6 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES 15 SP6 | kubernetes1.26 | 1.26.15-150400.9.14.1 | SUSE-SU-2024:3155-1 |
| SLES 15 SP6 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES 15 SP6 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES 15 SP6 | podman | 4.9.5-150500.3.34.2 | SUSE-SU-2025:0458-1 |
| SLES 15 SP6 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SLES 15 SP6 | skopeo | 1.14.4-150300.11.16.1 | SUSE-SU-2025:0420-1 |
| SLES 15 SP5 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES 15 SP5 | go1.21 | 1.21.9-150000.1.30.1 | SUSE-SU-2024:1122-1 |
| SLES 15 SP5 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLES 15 SP5 | go1.22 | 1.22.2-150000.1.12.1 | SUSE-SU-2024:1121-1 |
| SLES 15 SP5 | go1.22-openssl | 1.22.7.1-150000.1.3.1 | SUSE-SU-2024:3772-1 |
| SLES 15 SP5 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES 15 SP5 | google-guest-agent | 20260529.00-150000.1.70.1 | SUSE-SU-2026:2612-1 |
| SLES 15 SP5 | kubernetes1.24 | 1.24.17-150500.3.22.1 | SUSE-SU-2024:3342-1 |
| SLES 15 SP5 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES 15 SP5 | kubernetes1.26 | 1.26.15-150400.9.14.1 | SUSE-SU-2024:3155-1 |
| SLES 15 SP5 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES 15 SP5 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES 15 SP5 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SLES 15 SP4 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES 15 SP4 | go1.21 | 1.21.9-150000.1.30.1 | SUSE-SU-2024:1122-1 |
| SLES 15 SP4 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLES 15 SP4 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES 15 SP4 | google-guest-agent | 20260529.00-150000.1.70.1 | SUSE-SU-2026:2612-1 |
| SLES 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.16.1 | SUSE-SU-2024:3341-1 |
| SLES 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.14.1 | SUSE-SU-2024:3155-1 |
| SLES 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES 15 SP4 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SLES 15 SP3 | buildah | 1.35.5-150300.8.36.1 | SUSE-SU-2025:0813-1 |
| SLES 15 SP3 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES 15 SP3 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SLES 15 SP3 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
Show 34 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES 12 SP5 | go1.21 | 1.21.9-1.30.1 | SUSE-SU-2024:1161-1 |
| SLES 12 SP5 | go1.22 | 1.22.2-1.6.1 | SUSE-SU-2024:1160-1 |
| SLES 12 SP5 | golang-github-prometheus-node_exporter | 1.9.1-1.36.2 | SUSE-SU-2025:01987-1 |
| SLES 12 | containerd | 1.7.21-16.94.1 | SUSE-SU-2024:3188-1 |
| SLES 12 | google-guest-agent | 20260529.00-1.61.1 | SUSE-SU-2026:2581-1 |
| SLES for SAP 16.0 | google-osconfig-agent | 20260615.01-160000.1.2 | SUSE-SU-2026:22558-1 |
| SLES for SAP 15 SP5 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES for SAP 15 SP5 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SLES for SAP 15 SP4 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES for SAP 15 SP4 | go1.21 | 1.21.9-150000.1.30.1 | SUSE-SU-2024:1122-1 |
| SLES for SAP 15 SP4 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLES for SAP 15 SP4 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES for SAP 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.16.1 | SUSE-SU-2024:3341-1 |
| SLES for SAP 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLES for SAP 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.14.1 | SUSE-SU-2024:3155-1 |
| SLES for SAP 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLES for SAP 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLES for SAP 15 SP4 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SLES for SAP 15 SP3 | buildah | 1.35.5-150300.8.36.1 | SUSE-SU-2025:0813-1 |
| SLES for SAP 15 SP3 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES for SAP 15 SP3 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLES for SAP 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SLES for SAP 15 SP3 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SLES for SAP 15 SP2 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLES 16.0 | google-osconfig-agent | 20260615.01-160000.1.2 | SUSE-SU-2026:22558-1 |
| SLE Micro 6.1 | google-guest-agent | 20250116.00-slfo.1.1_2.1 | SUSE-SU-2026:20483-1 |
| SLE Micro 6.1 | google-osconfig-agent | 20250416.02-slfo.1.1_2.1 | SUSE-SU-2026:22249-1, SUSE-SU-2026:20486-1 |
| SLE Micro 6.1 | podman | 5.2.5-slfo.1.1_1.1 | SUSE-SU-2025:20279-1 |
| SLE Micro 6.1 | skopeo | 1.15.1-slfo.1.1_2.1 | SUSE-SU-2025:20363-1 |
| SLE Micro 6.0 | containerd | 1.7.21-1.1 | SUSE-SU-2025:20091-1 |
| SLE Micro 6.0 | google-osconfig-agent | 20260615.01-1.1 | SUSE-SU-2026:22242-1 |
| SLE Micro 6.0 | podman | 4.9.5-3.1 | SUSE-SU-2025:20143-1 |
| SLE Micro 6.0 | skopeo | 1.14.4-3.1 | SUSE-SU-2025:20179-1 |
| SLE Micro 5.5 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLE Micro 5.5 | google-guest-agent | 20260529.00-150000.1.70.1 | SUSE-SU-2026:2612-1 |
| SLE Micro 5.5 | ignition | 2.17.0-150500.3.6.1 | SUSE-SU-2025:0295-1 |
| SLE Micro 5.5 | podman | 4.9.5-150500.3.34.2 | SUSE-SU-2025:0458-1 |
| SLE Micro 5.5 | skopeo | 1.14.4-150300.11.16.1 | SUSE-SU-2025:0420-1 |
| SLE Micro 5.4 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLE Micro 5.4 | ignition | 2.15.0-150400.4.5.1 | SUSE-SU-2025:0318-1 |
| SLE Micro 5.4 | podman | 4.9.5-150400.4.38.1 | SUSE-SU-2025:0579-1 |
| SLE Micro 5.3 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLE Micro 5.3 | ignition | 2.14.0-150400.4.3.1 | SUSE-SU-2025:0342-1 |
| SLE Micro 5.3 | podman | 4.9.5-150400.4.38.1 | SUSE-SU-2025:0579-1 |
| SLE Micro 5.2 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLE Micro 5.2 | ignition | 2.14.0-150300.6.10.1 | SUSE-SU-2025:0306-1 |
| SLE Micro 5.2 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SLE Micro 5.1 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLE Micro 5.1 | ignition | 2.14.0-150300.4.10.1 | SUSE-SU-2025:0346-1 |
| SLE Micro 5.1 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SLE HPC 15 SP5 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLE HPC 15 SP5 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SLE HPC 15 SP4 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLE HPC 15 SP4 | go1.21 | 1.21.9-150000.1.30.1 | SUSE-SU-2024:1122-1 |
| SLE HPC 15 SP4 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLE HPC 15 SP4 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLE HPC 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.16.1 | SUSE-SU-2024:3341-1 |
| SLE HPC 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| SLE HPC 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.14.1 | SUSE-SU-2024:3155-1 |
| SLE HPC 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| SLE HPC 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| SLE HPC 15 SP4 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SLE HPC 15 SP3 | buildah | 1.35.5-150300.8.36.1 | SUSE-SU-2025:0813-1 |
| SLE HPC 15 SP3 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SLE HPC 15 SP3 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SLE HPC 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SLE HPC 15 SP3 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SLE HPC 15 SP2 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | go1.22-EL | 1.22.9-80002.1.3.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | golang-github-QubitProducts-exporter_exporter | 0.4.0-80002.3.6.6 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | golang-github-lusitaniae-apache_exporter | 1.0.10-80002.3.9.6 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | golang-github-prometheus-node_exporter | 1.10.2-80002.3.3.6 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | golang-github-prometheus-promu | 0.17.0-80002.3.6.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | golang-packaging | 15.0.17-80002.3.3.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | prometheus-postgres_exporter | 0.10.1-80002.3.3.6 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundle-libsodium | 1.0.21-80002.3.3.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundle-swig | 4.1.1-80002.3.3.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundle-zeromq | 4.3.5-80002.3.9.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy +1 | 3.11.15-80002.4.12.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-docker | 7.1.0-80002.4.3.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-lxml | 6.0.2-80002.3.6.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-m2crypto | 0.45.1-80002.3.14.2 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-passlib +1 | 1.7.4-80002.3.9.6 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-pynacl | 1.5.0-80002.3.6.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-pyopenssl | 23.2.0-80002.3.6.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-requests | 2.33.1-80002.4.3.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-tornado | 6.3.2-80002.4.9.5 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-urllib3 | 2.0.7-80002.3.3.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-wheel +1 | 0.45.1-80002.3.8.2 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | scap-security-guide | 0.1.79-80002.3.9.6 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | spacecmd | 5.2.8-80002.3.12.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | uyuni-tools | 5.2.12-80002.3.12.4 | SUSE-SU-2026:2764-1 |
| SUSE RES-8:Update:Products:MultiLinuxManagerTools:Update | venv-salt-minion | 3006.0-80002.5.19.1 | SUSE-SU-2026:2764-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | go1.22-EL | 1.22.9-70002.1.3.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | golang-github-QubitProducts-exporter_exporter | 0.4.0-70002.3.6.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | golang-github-lusitaniae-apache_exporter | 1.0.10-70002.3.9.3 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | golang-github-prometheus-node_exporter | 1.10.2-70002.3.3.3 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | golang-github-prometheus-promu | 0.17.0-70002.3.6.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | golang-packaging | 15.0.17-70002.1.3.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | mgr-push | 5.2.4-70002.3.9.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | prometheus-postgres_exporter | 0.10.1-70002.3.3.3 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | python-defusedxml-el7 | 0.5.0-70002.1.3.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | python-simplejson | 3.3.1-70002.1.3.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | rhnlib | 5.2.5-70002.3.9.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundle-libsodium | 1.0.21-70002.3.3.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundle-swig | 4.1.1-70002.3.3.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundle-zeromq | 4.3.5-70002.3.9.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy +1 | 3.11.15-70002.4.12.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-docker | 7.1.0-70002.4.3.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-lxml | 6.0.2-70002.3.6.3 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-m2crypto | 0.45.1-70002.3.14.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-passlib +1 | 1.7.4-70002.3.9.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-pynacl | 1.5.0-70002.3.6.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-pyopenssl | 23.2.0-70002.3.6.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-requests | 2.33.1-70002.4.3.2 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-tornado | 6.3.2-70002.4.9.3 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-urllib3 | 2.0.7-70002.3.3.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-wheel +1 | 0.45.1-70002.3.8.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | spacecmd | 5.2.8-70002.3.12.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | spacewalk-client-tools | 5.2.6-70002.3.9.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | uyuni-common-libs | 5.2.5-70002.3.6.1 | SUSE-SU-2026:2765-1 |
| SUSE RES-7:Update:Products:MultiLinuxManagerTools:Update | venv-salt-minion | 3006.0-70002.5.19.1 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | golang-github-QubitProducts-exporter_exporter | 0.4.0-70002.3.6.2 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | golang-github-lusitaniae-apache_exporter | 1.0.10-70002.3.9.3 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | golang-github-prometheus-node_exporter | 1.10.2-70002.3.3.3 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | mgr-push | 5.2.4-70002.3.9.2 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | prometheus-postgres_exporter | 0.10.1-70002.3.3.3 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | python-simplejson | 3.3.1-70002.1.3.1 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | rhnlib | 5.2.5-70002.3.9.1 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | spacecmd | 5.2.8-70002.3.12.1 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | spacewalk-client-tools | 5.2.6-70002.3.9.1 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | uyuni-common-libs | 5.2.5-70002.3.6.1 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools RES-7 | venv-salt-minion | 3006.0-70002.5.19.1 | SUSE-SU-2026:2765-1 |
| SUSE Multi Linux Manager Tools EL-9 | golang-github-QubitProducts-exporter_exporter | 0.4.0-90002.3.6.4 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-9 | golang-github-lusitaniae-apache_exporter | 1.0.10-90002.3.9.4 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-9 | golang-github-prometheus-node_exporter | 1.10.2-90002.3.3.4 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-9 | prometheus-postgres_exporter | 0.10.1-90002.3.3.4 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-9 | scap-security-guide | 0.1.79-90002.3.9.1 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-9 | spacecmd | 5.2.8-90002.3.12.1 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-9 | uyuni-tools | 5.2.12-90002.3.12.1 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-9 | venv-salt-minion | 3006.0-90002.5.19.1 | SUSE-SU-2026:2763-1 |
| SUSE Multi Linux Manager Tools EL-8 | golang-github-QubitProducts-exporter_exporter | 0.4.0-80002.3.6.6 | SUSE-SU-2026:2764-1 |
| SUSE Multi Linux Manager Tools EL-8 | golang-github-lusitaniae-apache_exporter | 1.0.10-80002.3.9.6 | SUSE-SU-2026:2764-1 |
| SUSE Multi Linux Manager Tools EL-8 | golang-github-prometheus-node_exporter | 1.10.2-80002.3.3.6 | SUSE-SU-2026:2764-1 |
| SUSE Multi Linux Manager Tools EL-8 | prometheus-postgres_exporter | 0.10.1-80002.3.3.6 | SUSE-SU-2026:2764-1 |
| SUSE Multi Linux Manager Tools EL-8 | scap-security-guide | 0.1.79-80002.3.9.6 | SUSE-SU-2026:2764-1 |
| SUSE Multi Linux Manager Tools EL-8 | spacecmd | 5.2.8-80002.3.12.4 | SUSE-SU-2026:2764-1 |
| SUSE Multi Linux Manager Tools EL-8 | uyuni-tools | 5.2.12-80002.3.12.4 | SUSE-SU-2026:2764-1 |
| SUSE Multi Linux Manager Tools EL-8 | venv-salt-minion | 3006.0-80002.5.19.1 | SUSE-SU-2026:2764-1 |
| SUSE Manager Server 4.3 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SUSE Manager Server 4.3 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SUSE Manager Server 4.3 | release-notes-susemanager | 4.3.15.2-150400.3.133.1 | SUSE-SU-2025:01985-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-prometheus-alertmanager | 0.26.0-150100.4.25.2 | SUSE-SU-2025:01992-1 |
| SUSE Manager Proxy Module 4.3 | golang-github-prometheus-prometheus | 2.53.4-150100.4.26.2 | SUSE-SU-2025:01990-1 |
| SUSE Manager Proxy Module 4.3 | prometheus-blackbox_exporter | 0.26.0-150000.1.27.1 | SUSE-SU-2025:01989-1 |
| SUSE Manager Proxy 4.3 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SUSE Manager Proxy 4.3 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| SUSE Manager Client Tools for SLE Micro 5 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SUSE Manager Client Tools for SLE Micro 5 | prometheus-blackbox_exporter | 0.26.0-150000.1.27.1 | SUSE-SU-2025:01989-1 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | golang-github-QubitProducts-exporter_exporter | 0.4.0-1.9.1 | SUSE-EL-9-CLIENT-TOOLS-2026-2254 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | golang-github-prometheus-node_exporter | 1.10.2-1.12.1 | SUSE-EL-9-CLIENT-TOOLS-2026-2254 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | prometheus-postgres_exporter | 0.10.1-1.15.1 | SUSE-EL-9-CLIENT-TOOLS-2026-2254 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | scap-security-guide | 0.1.80-1.44.1 | SUSE-EL-9-CLIENT-TOOLS-2026-2254 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | spacecmd | 5.0.16-1.61.1 | SUSE-EL-9-CLIENT-TOOLS-2026-2254 |
| SUSE Manager Client Tools for RHEL, Liberty and Clones 9 | uyuni-tools | 0.1.39-1.32.1 | SUSE-EL-9-CLIENT-TOOLS-2026-2254 |
| SUSE Manager Client Tools 15 | golang-github-prometheus-alertmanager | 0.26.0-150100.4.25.2 | SUSE-SU-2025:01992-1 |
| SUSE Manager Client Tools 15 | golang-github-prometheus-prometheus | 2.53.4-150000.3.62.2 | SUSE-SU-2025:01989-1 |
| SUSE Manager Client Tools 15 | grafana | 11.5.5-150000.1.79.1 | SUSE-SU-2025:01989-1 |
| SUSE Manager Client Tools 15 | prometheus-blackbox_exporter | 0.26.0-150000.1.27.1 | SUSE-SU-2025:01989-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-alertmanager | 0.26.0-1.31.2 | SUSE-SU-2025:01987-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-node_exporter | 1.9.1-1.36.2 | SUSE-SU-2025:01987-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-prometheus | 2.53.4-1.60.2 | SUSE-SU-2025:01987-1 |
| SUSE Manager Client Tools 12 | grafana | 11.5.5-1.79.2 | SUSE-SU-2025:01987-1 |
| SUSE Manager Client Tools 12 | prometheus-blackbox_exporter | 0.26.0-1.27.1 | SUSE-SU-2025:01987-1 |
| SUSE Enterprise Storage 7.1 | buildah | 1.35.5-150300.8.36.1 | SUSE-SU-2025:0813-1 |
| SUSE Enterprise Storage 7.1 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| SUSE Enterprise Storage 7.1 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| SUSE Enterprise Storage 7.1 | kubernetes1.24 | 1.24.17-150300.7.6.1 | SUSE-SU-2024:3343-1 |
| SUSE Enterprise Storage 7.1 | podman | 4.9.5-150300.9.43.1 | SUSE-SU-2025:0775-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | fdupes | 1.61-90002.3.3.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | go1.22-EL | 1.22.9-90002.1.3.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | golang-github-QubitProducts-exporter_exporter | 0.4.0-90002.3.6.4 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | golang-github-lusitaniae-apache_exporter | 1.0.10-90002.3.9.4 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | golang-github-prometheus-node_exporter | 1.10.2-90002.3.3.4 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | golang-github-prometheus-promu | 0.17.0-90002.3.6.3 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | golang-packaging | 15.0.17-90002.3.3.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | prometheus-postgres_exporter | 0.10.1-90002.3.3.4 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundle-libsodium | 1.0.21-90002.3.3.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundle-swig | 4.1.1-90002.3.3.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundle-zeromq | 4.3.5-90002.3.9.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy +1 | 3.11.15-90002.4.12.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-docker | 7.1.0-90002.4.3.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-lxml | 6.0.2-90002.3.6.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-m2crypto | 0.45.1-90002.3.14.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-passlib +1 | 1.7.4-90002.3.9.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-pynacl | 1.5.0-90002.3.6.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-pyopenssl | 23.2.0-90002.3.6.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-requests | 2.33.1-90002.4.3.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-tornado | 6.3.2-90002.4.9.2 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-urllib3 | 2.0.7-90002.3.3.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | saltbundlepy-wheel +1 | 0.45.1-90002.3.8.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | scap-security-guide | 0.1.79-90002.3.9.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | spacecmd | 5.2.8-90002.3.12.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | uyuni-tools | 5.2.12-90002.3.12.1 | SUSE-SU-2026:2763-1 |
| SUSE EL-9:Update:Products:MultiLinuxManagerTools:Update | venv-salt-minion | 3006.0-90002.5.19.1 | SUSE-SU-2026:2763-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | apptainer | 1.3.6-4.1 | openSUSE-SU-2025:14714-1 |
| openSUSE Tumbleweed | cmctl | 1.14.5-1.1 | openSUSE-SU-2024:13905-1 |
| openSUSE Tumbleweed | containerd | 1.7.17-1.1 | openSUSE-SU-2024:13989-1 |
| openSUSE Tumbleweed | etcd-for-k8s1.28 +1 | 3.5.15-1.1 | openSUSE-SU-2024:14400-1, openSUSE-SU-2024:14399-1 |
| openSUSE Tumbleweed | fake-gcs-server | 1.52.1-1.1 | openSUSE-SU-2025:14709-1 |
| openSUSE Tumbleweed | flannel | 0.26.4-1.1 | openSUSE-SU-2025:14744-1 |
| openSUSE Tumbleweed | forgejo | 1.21.10+0-1.1 | openSUSE-SU-2024:13837-1 |
| openSUSE Tumbleweed | go1.21 | 1.21.9-1.1 | openSUSE-SU-2024:13822-1 |
| openSUSE Tumbleweed | go1.22 | 1.22.2-1.1 | openSUSE-SU-2024:13823-1 |
| openSUSE Tumbleweed | golang-github-prometheus-node_exporter | 1.9.1-3.1 | openSUSE-SU-2025:15075-1 |
| openSUSE Tumbleweed | google-guest-agent | 20260529.00-1.1 | openSUSE-SU-2026:10921-1 |
| openSUSE Tumbleweed | google-osconfig-agent | 20260119.00-1.1 | openSUSE-SU-2026:10090-1 |
| openSUSE Tumbleweed | grafana | 11.6.1-1.1 | openSUSE-SU-2025:15145-1 |
| openSUSE Tumbleweed | kubernetes1.27 | 1.27.13-1.1 | openSUSE-SU-2024:13880-1 |
| openSUSE Tumbleweed | kubernetes1.28 | 1.28.9-1.1 | openSUSE-SU-2024:13881-1 |
| openSUSE Tumbleweed | kubernetes1.29 | 1.29.4-1.1 | openSUSE-SU-2024:13882-1 |
| openSUSE Tumbleweed | kubeseal | 0.26.2-1.1 | openSUSE-SU-2024:13824-1 |
| openSUSE Tumbleweed | prometheus-blackbox_exporter | 0.24.0-3.1 | openSUSE-SU-2025:15162-1 |
| openSUSE Tumbleweed | rclone | 1.67.0-1.1 | openSUSE-SU-2024:14053-1 |
| openSUSE Tumbleweed | rekor | 1.3.10-1.1 | openSUSE-SU-2025:14990-1 |
| openSUSE Tumbleweed | teleport | 15.2.4-1.1 | openSUSE-SU-2024:13903-1 |
| openSUSE Tumbleweed | traefik | 2.11.2-1.1 | openSUSE-SU-2024:13927-1 |
| openSUSE Tumbleweed | traefik2 | 2.11.5-1.1 | openSUSE-SU-2024:14076-1 |
| openSUSE Tumbleweed | velociraptor | 0.7.0.4.git185.a5708584-2.1 | openSUSE-SU-2026:11126-1 |
| openSUSE Leap 16.0 | golang-github-prometheus-alertmanager | 0.28.1-bp160.1.1 | openSUSE-SU-2026:21136-1 |
| openSUSE Leap 16.0 | google-guest-agent | 20250506.01-160000.1.1 | openSUSE-SU-2026:20609-1 |
| openSUSE Leap 16.0 | google-osconfig-agent | 20260615.01-160000.1.2 | openSUSE-SU-2026:21210-1 |
| openSUSE Leap 16.0 | prometheus-blackbox_exporter | 0.26.0-bp160.1.1 | openSUSE-SU-2026:22026-1 |
| openSUSE Leap 15.6 | apptainer | 1.3.6-150600.4.6.1 | SUSE-SU-2025:0313-1 |
| openSUSE Leap 15.6 | buildah | 1.35.5-150500.3.28.1 | SUSE-SU-2025:0581-1 |
| openSUSE Leap 15.6 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| openSUSE Leap 15.6 | go1.21-openssl | 1.21.13.1-150600.16.3.1 | SUSE-SU-2024:3755-1 |
| openSUSE Leap 15.6 | go1.22-openssl | 1.22.7.1-150600.13.3.1 | SUSE-SU-2024:3938-1 |
| openSUSE Leap 15.6 | golang-github-prometheus-alertmanager | 0.26.0-150100.4.25.2 | SUSE-SU-2025:01992-1 |
| openSUSE Leap 15.6 | golang-github-prometheus-node_exporter | 1.9.1-150100.3.35.2 | SUSE-SU-2025:01988-1 |
| openSUSE Leap 15.6 | golang-github-prometheus-prometheus | 2.53.4-150100.4.26.2 | SUSE-SU-2025:01990-1 |
| openSUSE Leap 15.6 | grafana | 11.5.5-150200.3.72.2 | SUSE-SU-2025:01991-1 |
| openSUSE Leap 15.6 | ignition | 2.14.0-150400.9.6.1 | SUSE-SU-2025:0299-1 |
| openSUSE Leap 15.6 | kubernetes1.24 | 1.24.17-150500.3.22.1 | SUSE-SU-2024:3342-1 |
| openSUSE Leap 15.6 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| openSUSE Leap 15.6 | kubernetes1.26 | 1.26.15-150400.9.14.1 | SUSE-SU-2024:3155-1 |
| openSUSE Leap 15.6 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| openSUSE Leap 15.6 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
| openSUSE Leap 15.6 | podman | 4.9.5-150500.3.34.2 | SUSE-SU-2025:0458-1 |
| openSUSE Leap 15.6 | prometheus-blackbox_exporter | 0.26.0-150000.1.27.1 | SUSE-SU-2025:01989-1 |
| openSUSE Leap 15.6 | rekor | 1.3.10-150400.4.25.1 | SUSE-SU-2025:1332-1 |
| openSUSE Leap 15.6 | skopeo | 1.14.4-150300.11.16.1 | SUSE-SU-2025:0420-1 |
| openSUSE Leap 15.5 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| openSUSE Leap 15.5 | go1.21 | 1.21.9-150000.1.30.1 | SUSE-SU-2024:1122-1 |
| openSUSE Leap 15.5 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| openSUSE Leap 15.5 | go1.22 | 1.22.2-150000.1.12.1 | SUSE-SU-2024:1121-1 |
| openSUSE Leap 15.5 | go1.22-openssl | 1.22.7.1-150000.1.3.1 | SUSE-SU-2024:3772-1 |
| openSUSE Leap 15.5 | kubernetes1.24 | 1.24.17-150500.3.22.1 | SUSE-SU-2024:3342-1 |
| openSUSE Leap 15.5 | kubernetes1.25 | 1.25.16-150400.9.16.1 | SUSE-SU-2024:3344-1 |
| openSUSE Leap 15.5 | kubernetes1.26 | 1.26.15-150400.9.14.1 | SUSE-SU-2024:3155-1 |
| openSUSE Leap 15.5 | kubernetes1.27 | 1.27.16-150400.9.10.1 | SUSE-SU-2024:3098-1 |
| openSUSE Leap 15.5 | kubernetes1.28 | 1.28.13-150400.9.8.1 | SUSE-SU-2024:3097-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
| openSUSE Leap Micro 5.3 | containerd | 1.7.17-150000.111.3 | SUSE-SU-2024:2108-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | forgejo | 1.21.10.0-r0 | — |
| Alpine v3.24 | go | 1.22.2-r0 | — |
| Alpine v3.24 | rclone | 1.67.0-r0 | — |
| Alpine v3.23 | forgejo | 1.21.10.0-r0 | — |
| Alpine v3.23 | go | 1.22.2-r0 | — |
| Alpine v3.23 | rclone | 1.67.0-r0 | — |
| Alpine v3.22 | forgejo | 1.21.10.0-r0 | — |
| Alpine v3.22 | go | 1.22.2-r0 | — |
| Alpine v3.22 | rclone | 1.67.0-r0 | — |
| Alpine v3.21 | forgejo | 1.21.10.0-r0 | — |
| Alpine v3.21 | go | 1.22.2-r0 | — |
| Alpine v3.21 | rclone | 1.67.0-r0 | — |
| Alpine v3.20 | go | 1.22.2-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | go | 1.21.9-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-cloudwatch-agent | 1.300039.0-1.amzn2023 | ALAS2023-2024-625 |
| Amazon Linux 2023 | amazon-ecr-credential-helper | 0.7.1-4.amzn2023 | ALAS2023-2024-631 |
| Amazon Linux 2023 | amazon-ssm-agent | 3.3.859.0-1.amzn2023 | ALAS2023-2024-735 |
| Amazon Linux 2023 | cni-plugins | 1.2.0-1.amzn2023.0.5 | ALAS2023-2024-630 |
| Amazon Linux 2023 | ecs-init | 1.84.0-1.amzn2023 | ALAS2023-2024-672 |
| Amazon Linux 2023 | golang +6 | 1.22.3-1.amzn2023.0.1 | ALAS2023-2024-629 |
| Amazon Linux 2023 | nerdctl | 1.7.6-1.amzn2023.0.1 | ALAS2023-2024-700 |
| Amazon Linux 2023 | oci-add-hooks | 0-0.1.20200504git268e3bb.amzn2023.0.3 | ALAS2023-2024-632 |
| Amazon Linux 2 | amazon-cloudwatch-agent | 1.300039.0-1.amzn2 | ALAS2-2024-2550 |
| Amazon Linux 2 | amazon-ssm-agent | 3.3.859.0-1.amzn2 | ALAS2-2024-2645 |
| Amazon Linux 2 | cni-plugins | 1.2.0-1.amzn2.0.6 | ALAS2-2024-2555 |
| Amazon Linux 2 | cri-tools | 1.29.0-1.amzn2.0.2 | ALAS2-2024-2568 |
| Amazon Linux 2 | golang +6 | 1.22.3-1.amzn2.0.1 | ALAS2-2024-2554 |
| Amazon Linux 2 | golist | 0.10.1-10.amzn2.0.5 | ALAS2-2024-2556 |
| Amazon Linux 2 | nerdctl | 1.7.6-1.amzn2.0.1 | ALAS2-2024-2618 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | application-gateway-kubernetes-ingress | 1.7.7-1 | — |
| Azure Linux 3 | azcopy | 10.25.1-1 | — |
| Azure Linux 3 | blobfuse2 | 2.3.0-1 | — |
| Azure Linux 3 | cert-manager | 1.12.12-1 | — |
| Azure Linux 3 | cf-cli | 8.7.3-6 | — |
| Azure Linux 3 | containerd | 1.7.13-6 | — |
| Azure Linux 3 | containerized-data-importer | 1.57.0-12 | — |
| Azure Linux 3 | coredns | 1.11.1-2 | — |
| Azure Linux 3 | cri-tools +1 | 1.30.1-1 | — |
| Azure Linux 3 | docker-buildx | 0.14.0-1 | — |
| Azure Linux 3 | docker-cli | 25.0.7-1 | — |
| Azure Linux 3 | docker-compose | 2.27.0-1 | — |
| Azure Linux 3 | etcd | 3.5.18-1 | — |
| Azure Linux 3 | flannel | 0.24.2-10 | — |
| Azure Linux 3 | gh | 2.62.0-1 | — |
| Azure Linux 3 | git-lfs | 3.6.1-1 | — |
| Azure Linux 3 | helm | 3.15.2-1 | — |
| Azure Linux 3 | ig | 0.29.0-1 | — |
| Azure Linux 3 | influxdb | 2.7.3-6 | — |
| Azure Linux 3 | jx | 3.10.116-2 | — |
| Azure Linux 3 | kata-containers +1 | 3.2.0.azl4-1 | — |
| Azure Linux 3 | kube-vip-cloud-provider | 0.0.10-1 | — |
| Azure Linux 3 | kubevirt | 1.2.0-13 | — |
| Azure Linux 3 | kured | 1.15.0-2 | — |
| Azure Linux 3 | libcontainers-common | 20240213-2 | — |
| Azure Linux 3 | local-path-provisioner | 0.0.24-3 | — |
| Azure Linux 3 | moby-containerd-cc | 1.7.7-6 | — |
| Azure Linux 3 | moby-engine | 25.0.3-10 | — |
| Azure Linux 3 | multus | 4.0.2-3 | — |
| Azure Linux 3 | node-problem-detector | 0.8.15-4 | — |
| Azure Linux 3 | opa | 0.63.0-1 | — |
| Azure Linux 3 | prometheus | 2.45.4-4 | — |
| Azure Linux 3 | prometheus-adapter | 0.12.0-1 | — |
| Azure Linux 3 | prometheus-node-exporter | 1.7.0-2 | — |
| Azure Linux 3 | skopeo | 1.14.4-3 | — |
| Azure Linux 3 | telegraf | 1.31.0-1 | — |
| Azure Linux 3 | vitess | 19.0.4-2 | — |
| Azure Linux 2 (CBL-Mariner) | azcopy | 10.24.0-1 | — |
| Azure Linux 2 (CBL-Mariner) | blobfuse2 | 2.1.2-3 | — |
| Azure Linux 2 (CBL-Mariner) | cert-manager | 1.11.2-9 | — |
| Azure Linux 2 (CBL-Mariner) | coredns | 1.11.1-8 | — |
| Azure Linux 2 (CBL-Mariner) | cri-tools | 1.29.0-2 | — |
| Azure Linux 2 (CBL-Mariner) | etcd | 3.5.12-2 | — |
| Azure Linux 2 (CBL-Mariner) | git-lfs | 3.5.1-1 | — |
| Azure Linux 2 (CBL-Mariner) | helm | 3.14.2-2 | — |
| Azure Linux 2 (CBL-Mariner) | kata-containers +1 | 3.2.0.azl2-1 | — |
| Azure Linux 2 (CBL-Mariner) | kubernetes | 1.28.4-7 | — |
| Azure Linux 2 (CBL-Mariner) | kubevirt | 0.59.0-16 | — |
| Azure Linux 2 (CBL-Mariner) | kured +1 | 1.14.2-3 | — |
| Azure Linux 2 (CBL-Mariner) | moby-cli | 24.0.9-3 | — |
| Azure Linux 2 (CBL-Mariner) | moby-compose | 2.17.3-3 | — |
| Azure Linux 2 (CBL-Mariner) | moby-containerd | 1.6.26-5 | — |
| Azure Linux 2 (CBL-Mariner) | moby-containerd-cc | 1.7.7-4 | — |
| Azure Linux 2 (CBL-Mariner) | moby-engine | 24.0.9-2 | — |
| Azure Linux 2 (CBL-Mariner) | multus | 4.0.2-3 | — |
| Azure Linux 2 (CBL-Mariner) | nmi | 1.8.17-2 | — |
| Azure Linux 2 (CBL-Mariner) | node-problem-detector | 0.8.17-3 | — |
| Azure Linux 2 (CBL-Mariner) | opa | 0.63.0-2 | — |
| Azure Linux 2 (CBL-Mariner) | packer | 1.10.1-2 | — |
| Azure Linux 2 (CBL-Mariner) | prometheus | 2.37.9-2 | — |
| Azure Linux 2 (CBL-Mariner) | sriov-network-device-plugin | 3.6.2-3 | — |
| Azure Linux 2 (CBL-Mariner) | telegraf | 1.29.4-3 | — |
| Azure Linux 2 (CBL-Mariner) | vitess | 16.0.2-8 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | git-lfs | 3.4.1-2.el9_4 | ELSA-2024-2724 |
| Oracle Linux 9 | golang +6 | 1.20.12-4.el9_3 | ELSA-2024-2562, ELSA-2024-1963 |
| Oracle Linux 8 | delve | 1.20.2-1.0.1.module+el8.9.0+90001+52c302fe | ELSA-2024-3259, ELSA-2024-1962 |
| Oracle Linux 8 | git-lfs | 3.2.0-3.el8_9 | ELSA-2024-3346, ELSA-2024-2699 |
| Oracle Linux 8 | go-toolset | 1.20.12-1.module+el8.9.0+90189+385a1f8c | ELSA-2024-3259, ELSA-2024-1962 |
| Oracle Linux 8 | golang +5 | 1.20.12-8.module+el8.9.0+90310+35919188 | ELSA-2024-3259, ELSA-2024-1962 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r11 | — |
| Wolfi rolling | actions-runner-controller | 0.9.0-r1 | — |
| Wolfi rolling | addon-resizer +1 | 1.8.20-r1 | — |
| Wolfi rolling | amass | 4.2.0-r8 | — |
| Wolfi rolling | apko | 0.14.0-r7 | — |
| Wolfi rolling | argo-workflows | 3.6.5-r2 | — |
| Wolfi rolling | atlantis | 0.27.2-r2 | — |
| Wolfi rolling | aws-efs-csi-driver | 1.7.7-r1 | — |
| Wolfi rolling | aws-flb-cloudwatch | 1.9.4-r8 | — |
| Wolfi rolling | aws-flb-firehose | 1.7.2-r8 | — |
| Wolfi rolling | aws-flb-kinesis | 1.10.2-r9 | — |
| Wolfi rolling | aws-load-balancer-controller +1 | 2.7.2-r2 | — |
| Wolfi rolling | aws-network-policy-agent +1 | 1.1.0-r1 | — |
| Wolfi rolling | bank-vaults +1 | 1.20.4-r12 | — |
| Wolfi rolling | bazelisk | 1.19.0-r2 | — |
| Wolfi rolling | bom +1 | 0.6.0-r2 | — |
| Wolfi rolling | boring-registry | 0.13.2-r4 | — |
| Wolfi rolling | buf +1 | 1.31.0-r0 | — |
| Wolfi rolling | buildkitd | 0.13.1-r2 | — |
| Wolfi rolling | caddy +2 | 2.7.6-r8 | — |
| Wolfi rolling | cadvisor | 0.49.1-r5 | — |
| Wolfi rolling | capslock +1 | 0.2.2-r1 | — |
| Wolfi rolling | cass-operator | 1.19.1-r1 | — |
| Wolfi rolling | cert-exporter | 2.12.0-r3 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.1-r2 | — |
| Wolfi rolling | certificate-transparency | 1.1.8-r1 | — |
| Wolfi rolling | cfssl | 1.6.5-r2 | — |
| Wolfi rolling | chartmuseum | 0.16.1-r8 | — |
| Wolfi rolling | chezmoi | 2.47.4-r0 | — |
| Wolfi rolling | cilium-cli | 0.16.4-r1 | — |
| Wolfi rolling | cloud-provider-gcp-cloud-controller-manager +1 | 33.1.1-r1 | — |
| Wolfi rolling | cloudflared | 2024.1.0-r8 | — |
| Wolfi rolling | cluster-proportional-autoscaler | 1.8.11-r3 | — |
| Wolfi rolling | cni-plugins | 1.4.1-r1 | — |
| Wolfi rolling | configmap-reload | 0.12.0-r6 | — |
| Wolfi rolling | confluent-common-docker | 7.6.0-r4 | — |
| Wolfi rolling | conftest | 0.51.0-r1 | — |
| Wolfi rolling | controller-gen | 0.14.0-r2 | — |
| Wolfi rolling | cortex | 1.17.0-r0 | — |
| Wolfi rolling | cosign | 2.2.4-r1 | — |
| Wolfi rolling | crane | 0.19.1-r3 | — |
| Wolfi rolling | cri-tools | 1.29.0-r7 | — |
| Wolfi rolling | croc | 9.6.15-r0 | — |
| Wolfi rolling | crossplane-provider-aws +38 | 1.3.1-r1 | — |
| Wolfi rolling | cue | 0.8.1-r1 | — |
| Wolfi rolling | dagdotdev | 0.0.2-r1 | — |
| Wolfi rolling | dask-gateway | 2024.1.0-r3 | — |
| Wolfi rolling | dataplaneapi | 2.9.2-r1 | — |
| Wolfi rolling | delve | 1.22.1-r2 | — |
| Wolfi rolling | dex | 2.39.1-r0 | — |
| Wolfi rolling | dgraph | 23.1.0-r7 | — |
| Wolfi rolling | direnv | 2.34.0-r2 | — |
| Wolfi rolling | dive | 0.12.0-r3 | — |
| Wolfi rolling | docker-cli | 24.0.6-r3 | — |
| Wolfi rolling | docker-compose +1 | 2.26.1-r1 | — |
| Wolfi rolling | docker-credential-acr-env | 0.7.0-r11 | — |
| Wolfi rolling | docker-credential-ecr-login | 0.7.1-r10 | — |
| Wolfi rolling | docker-credential-gcr | 2.1.22-r4 | — |
| Wolfi rolling | dockerize | 0.7.0-r6 | — |
| Wolfi rolling | doppler-kubernetes-operator | 1.5.0-r4 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 4.0.0-r1 | — |
| Wolfi rolling | eksctl | 0.175.0-r1 | — |
| Wolfi rolling | envoy-ratelimit | 0.0_git20240220-r5 | — |
| Wolfi rolling | esbuild | 0.20.2-r1 | — |
| Wolfi rolling | falcoctl | 0.7.3-r8 | — |
| Wolfi rolling | falcosidekick | 2.28.0-r4 | — |
| Wolfi rolling | ferretdb | 1.21.0-r1 | — |
| Wolfi rolling | flannel +1 | 0.25.1-r1 | — |
| Wolfi rolling | flannel-cni-plugin | 1.4.0-r2 | — |
| Wolfi rolling | flux | 2.2.3-r4 | — |
| Wolfi rolling | flux-helm-controller +1 | 0.37.4-r7 | — |
| Wolfi rolling | flux-image-automation-controller | 0.37.1-r3 | — |
| Wolfi rolling | flux-image-reflector-controller | 0.31.2-r4 | — |
| Wolfi rolling | flux-notification-controller | 1.2.4-r3 | — |
| Wolfi rolling | flux-source-controller +1 | 1.2.5-r2 | — |
| Wolfi rolling | flyte | 1.11.0-r1 | — |
| Wolfi rolling | fq | 0.10.0-r2 | — |
| Wolfi rolling | frp | 0.57.0-r0 | — |
| Wolfi rolling | fulcio | 1.4.5-r1 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 1.0.8-r6 | — |
| Wolfi rolling | gcsfuse | 1.4.2-r5 | — |
| Wolfi rolling | gh +1 | 2.48.0-r1 | — |
| Wolfi rolling | ghaudit | 0.4.0-r1 | — |
| Wolfi rolling | git-lfs +1 | 3.5.1-r3 | — |
| Wolfi rolling | gitleaks | 8.18.2-r2 | — |
| Wolfi rolling | gitness | 3.0.0_beta6-r1 | — |
| Wolfi rolling | gitsign +2 | 0.10.1-r3 | — |
| Wolfi rolling | gke-gcloud-auth-plugin | 0.0.2-r9 | — |
| Wolfi rolling | glab | 1.39.0-r0 | — |
| Wolfi rolling | go-1.20 +9 | No fix yet | — |
| Wolfi rolling | go-1.21 | 1.21.9-r0 | — |
| Wolfi rolling | go-1.22 | 1.22.2-r0 | — |
| Wolfi rolling | go-bindata | 3.1.3-r17 | — |
| Wolfi rolling | go-licenses | 1.6.0-r12 | — |
| Wolfi rolling | go-md2man | 2.0.4-r1 | — |
| Wolfi rolling | gobump | 0.7.7-r1 | — |
| Wolfi rolling | gobuster | 3.6.0-r9 | — |
| Wolfi rolling | golangci-lint | 1.57.2-r1 | — |
| Wolfi rolling | gomplate | 3.11.7-r2 | — |
| Wolfi rolling | goreleaser | 1.26.0-r0 | — |
| Wolfi rolling | gostatsd | 28.3.0-r1 | — |
| Wolfi rolling | gosu | 1.17-r4 | — |
| Wolfi rolling | govulncheck | 1.0.2-r3 | — |
| Wolfi rolling | gptscript | 0.5.0-r1 | — |
| Wolfi rolling | grafana-agent-operator | 0.40.4-r1 | — |
| Wolfi rolling | grafana-operator +1 | 5.8.1-r1 | — |
| Wolfi rolling | grpc-health-probe | 0.4.25-r1 | — |
| Wolfi rolling | grpcurl +1 | 1.9.1-r1 | — |
| Wolfi rolling | guac +3 | 0.5.2-r1 | — |
| Wolfi rolling | harbor-cli | 0.0.1-r1 | — |
| Wolfi rolling | harbor-registry | 3.0.0_alpha1-r2 | — |
| Wolfi rolling | harbor-scanner-trivy | 0.31.0-r2 | — |
| Wolfi rolling | hcloud | 1.43.0-r1 | — |
| Wolfi rolling | hello-world-golang | 1.3-r2 | — |
| Wolfi rolling | helm | 3.14.4-r0 | — |
| Wolfi rolling | helm-3 | 3.19.2-r1 | — |
| Wolfi rolling | helm-4 | 4.0.1-r1 | — |
| Wolfi rolling | helm-operator +1 | 1.34.1-r4 | — |
| Wolfi rolling | helm-push | 0.10.4-r9 | — |
| Wolfi rolling | hey | 0.1.4-r21 | — |
| Wolfi rolling | hubble +1 | 0.13.3-r1 | — |
| Wolfi rolling | hubble-ui +1 | 0.13.0-r7 | — |
| Wolfi rolling | hugo +1 | 0.124.1-r1 | — |
| Wolfi rolling | influx | 2.7.3-r11 | — |
| Wolfi rolling | ip-masq-agent | 2.9.3-r9 | — |
| Wolfi rolling | k3d | 5.6.0-r11 | — |
| Wolfi rolling | k3s | 1.29.3-r4 | — |
| Wolfi rolling | k8sgpt | 0.3.29-r1 | — |
| Wolfi rolling | k8sgpt-operator +1 | 0.1.3-r1 | — |
| Wolfi rolling | k8ssandra-operator +1 | 1.16.0-r0 | — |
| Wolfi rolling | k9s | 0.32.4-r1 | — |
| Wolfi rolling | kaf | 0.2.8-r2 | — |
| Wolfi rolling | kaniko | 1.22.0-r1 | — |
| Wolfi rolling | kind | 0.22.0-r3 | — |
| Wolfi rolling | kine | 0.11.8-r1 | — |
| Wolfi rolling | ko | 0.15.2-r7 | — |
| Wolfi rolling | kor | 0.3.7-r1 | — |
| Wolfi rolling | kpt | 1.0.0_beta49-r5 | — |
| Wolfi rolling | kube-bench +1 | 0.7.3-r1 | — |
| Wolfi rolling | kube-fluentd-operator +3 | 1.18.2-r8 | — |
| Wolfi rolling | kube-logging-operator | 4.6.0-r1 | — |
| Wolfi rolling | kube-rbac-proxy | 0.16.0-r2 | — |
| Wolfi rolling | kube-state-metrics | 2.12.0-r1 | — |
| Wolfi rolling | kubebuilder | 3.14.1-r1 | — |
| Wolfi rolling | kubectl-1.27 +2 | 1.27.12-r1 | — |
| Wolfi rolling | kubeflow +12 | 1.10.0-r4 | — |
| Wolfi rolling | kubeflow-katib | 0.16.0-r8 | — |
| Wolfi rolling | kubeflow-pipelines | 2.0.5-r7 | — |
| Wolfi rolling | kuberay-operator | 1.0.0-r4 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.13.0-r2 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 4.0.1-r0 | — |
| Wolfi rolling | kubernetes-csi-external-resizer | 1.13.2-r2 | — |
| Wolfi rolling | kubernetes-csi-livenessprobe | 2.12.0-r4 | — |
| Wolfi rolling | kubernetes-dashboard | 2.7.0-r15 | — |
| Wolfi rolling | kubernetes-dashboard-metrics-scraper | 1.0.9-r15 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.23.0-r3 | — |
| Wolfi rolling | kubernetes-event-exporter +1 | 1.7-r5 | — |
| Wolfi rolling | kubernetes-ingress-defaultbackend | 1.28.4-r1 | — |
| Wolfi rolling | kubescape | 3.0.8-r3 | — |
| Wolfi rolling | kubevela +3 | 1.9.11-r1 | — |
| Wolfi rolling | kubewatch | 2.5.0-r12 | — |
| Wolfi rolling | kustomize | 5.4.1-r0 | — |
| Wolfi rolling | kyverno-policy-reporter | 2.18.1-r3 | — |
| Wolfi rolling | kyverno-policy-reporter-kyverno-plugin +1 | 1.6.3-r4 | — |
| Wolfi rolling | kyverno-policy-reporter-ui | 1.9.2-r4 | — |
| Wolfi rolling | lazygit | 0.41.0-r1 | — |
| Wolfi rolling | litefs | 0.5.11-r4 | — |
| Wolfi rolling | litestream | 0.3.13-r1 | — |
| Wolfi rolling | local-path-provisioner | 0.0.26-r5 | — |
| Wolfi rolling | logstash-exporter | 1.6.3-r3 | — |
| Wolfi rolling | mage | 1.15.0-r6 | — |
| Wolfi rolling | mc | 0.20231220.071422-r6 | — |
| Wolfi rolling | melange | 0.6.11-r3 | — |
| Wolfi rolling | memcached-exporter +1 | 0.14.3-r2 | — |
| Wolfi rolling | metacontroller | 4.11.11-r2 | — |
| Wolfi rolling | metallb | 0.14.4-r1 | — |
| Wolfi rolling | metrics-server | 0.7.1-r1 | — |
| Wolfi rolling | minify | 2.20.19-r1 | — |
| Wolfi rolling | minio | 0.20240406.052602-r0 | — |
| Wolfi rolling | mkcert | 1.4.4-r1 | — |
| Wolfi rolling | mods | 1.3.1-r0 | — |
| Wolfi rolling | mongo-tools | 100.9.4-r3 | — |
| Wolfi rolling | multus-cni | 4.0.2-r1 | — |
| Wolfi rolling | nats | 0.1.4-r2 | — |
| Wolfi rolling | nats-server | 2.10.14-r0 | — |
| Wolfi rolling | nerdctl | 2.0.3-r5 | — |
| Wolfi rolling | neuvector-scanner +2 | 0_git20240417-r1 | — |
| Wolfi rolling | neuvector-sigstore-interface | 0_git20240520-r1 | — |
| Wolfi rolling | newrelic-fluent-bit-output | 2.4.0-r5 | — |
| Wolfi rolling | newrelic-infra-operator | 0.18.0-r3 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.52.1-r0 | — |
| Wolfi rolling | newrelic-nri-statsd | 2.9.1-r1 | — |
| Wolfi rolling | newrelic-prometheus-configurator | 1.15.0-r1 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r6 | — |
| Wolfi rolling | nodetaint | 0.0.4-r13 | — |
| Wolfi rolling | nri-apache | 1.12.3-r2 | — |
| Wolfi rolling | nri-cassandra | 2.13.4-r2 | — |
| Wolfi rolling | nri-consul | 2.7.8-r1 | — |
| Wolfi rolling | nri-couchbase | 2.6.1-r6 | — |
| Wolfi rolling | nri-discovery-kubernetes | 1.7.2-r5 | — |
| Wolfi rolling | nri-elasticsearch | 5.2.3-r2 | — |
| Wolfi rolling | nri-f5 | 2.7.3-r2 | — |
| Wolfi rolling | nri-haproxy | 3.0.0-r2 | — |
| Wolfi rolling | nri-jmx | 3.6.0-r1 | — |
| Wolfi rolling | nri-kafka +2 | 3.7.2-r1 | — |
| Wolfi rolling | nri-kubernetes | 3.28.1-r1 | — |
| Wolfi rolling | nri-memcached | 2.5.4-r1 | — |
| Wolfi rolling | nri-mongodb | 2.8.1-r6 | — |
| Wolfi rolling | nri-mssql | 2.12.0-r2 | — |
| Wolfi rolling | nri-mysql | 1.10.6-r1 | — |
| Wolfi rolling | nri-nagios +1 | 2.9.3-r1 | — |
| Wolfi rolling | nri-nginx | 3.4.4-r1 | — |
| Wolfi rolling | nri-postgresql | 2.13.2-r1 | — |
| Wolfi rolling | nri-prometheus | 2.21.0-r3 | — |
| Wolfi rolling | nri-rabbitmq | 2.13.4-r1 | — |
| Wolfi rolling | nri-redis | 1.11.4-r2 | — |
| Wolfi rolling | nsc | 2.8.6-r4 | — |
| Wolfi rolling | nuclei | 3.2.5-r0 | — |
| Wolfi rolling | oauth2-proxy +1 | 7.6.0-r6 | — |
| Wolfi rolling | ollama +1 | 0.1.33-r1 | — |
| Wolfi rolling | opentelemetry-collector-contrib | 0.98.0-r0 | — |
| Wolfi rolling | oras | 1.1.0-r6 | — |
| Wolfi rolling | osv-scanner | 1.7.1-r1 | — |
| Wolfi rolling | paranoia | 0.2.1-r13 | — |
| Wolfi rolling | petname | 2.11-r5 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r3 | — |
| Wolfi rolling | policy-controller | 0.8.4-r5 | — |
| Wolfi rolling | pombump | 0.0.12-r1 | — |
| Wolfi rolling | postgres-operator +1 | 1.11.0-r2 | — |
| Wolfi rolling | prometheus-adapter | 0.11.2-r6 | — |
| Wolfi rolling | prometheus-alertmanager | 0.27.0-r3 | — |
| Wolfi rolling | prometheus-operator +3 | 0.73.2-r1 | — |
| Wolfi rolling | prometheus-pushgateway | 1.8.0-r1 | — |
| Wolfi rolling | protoc-gen-go | 1.33.0-r1 | — |
| Wolfi rolling | protoc-gen-go-grpc | 1.3.0-r9 | — |
| Wolfi rolling | pulumi | 3.112.0-r1 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 1.15.0-r2 | — |
| Wolfi rolling | pulumi-language-dotnet | 3.60.0-r2 | — |
| Wolfi rolling | pulumi-language-java | 0.10.0-r1 | — |
| Wolfi rolling | q | 0.19.2-r3 | — |
| Wolfi rolling | rabbitmq-cluster-operator | 2.8.0-r1 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator +2 | 1.13.0-r5 | — |
| Wolfi rolling | rclone | 1.66.0-r1 | — |
| Wolfi rolling | regclient | 0.6.0-r1 | — |
| Wolfi rolling | rekor | 1.3.6-r1 | — |
| Wolfi rolling | render-template | 1.0.6-r3 | — |
| Wolfi rolling | restic | 0.16.4-r5 | — |
| Wolfi rolling | rootlesskit | 2.0.2-r1 | — |
| Wolfi rolling | rqlite | 8.23.1-r0 | — |
| Wolfi rolling | runc | 1.1.12-r3 | — |
| Wolfi rolling | s5cmd | 2.2.2-r2 | — |
| Wolfi rolling | sbom-scorecard | 0.0.7-r8 | — |
| Wolfi rolling | sbomqs | 0.0.30-r2 | — |
| Wolfi rolling | scorecard | 4.13.1-r7 | — |
| Wolfi rolling | secrets-store-csi-driver | 1.4.2-r2 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-aws | 0.3.8-r1 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.5.1-r3 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.5.0-r3 | — |
| Wolfi rolling | shfmt | 3.8.0-r2 | — |
| Wolfi rolling | sigstore-scaffolding | 0.6.17-r2 | — |
| Wolfi rolling | skaffold | 2.11.1-r2 | — |
| Wolfi rolling | skopeo | 1.15.0-r3 | — |
| Wolfi rolling | slsa-verifier | 2.5.1-r4 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r6 | — |
| Wolfi rolling | sonobuoy +1 | 0.57.1-r5 | — |
| Wolfi rolling | sops | 3.8.1-r6 | — |
| Wolfi rolling | spark-operator +1 | 1.1.27-r21 | — |
| Wolfi rolling | speedtest-go | 1.6.10-r2 | — |
| Wolfi rolling | spegel +1 | 0.0.22-r0 | — |
| Wolfi rolling | spire-server | 1.9.4-r0 | — |
| Wolfi rolling | spqr | 1.3.0-r2 | — |
| Wolfi rolling | src | 5.3.0-r4 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r12 | — |
| Wolfi rolling | stakater-reloader +1 | 1.0.80-r1 | — |
| Wolfi rolling | step +1 | 0.26.0-r1 | — |
| Wolfi rolling | step-issuer +1 | 0.9.1-r2 | — |
| Wolfi rolling | stern | 1.28.0-r1 | — |
| Wolfi rolling | supercronic | 0.2.29-r2 | — |
| Wolfi rolling | swagger | 0.30.5-r1 | — |
| Wolfi rolling | tailscale +1 | 1.64.2-r1 | — |
| Wolfi rolling | task | 3.36.0-r0 | — |
| Wolfi rolling | tekton-chains | 0.20.1-r4 | — |
| Wolfi rolling | temporal | 0.11.0-r3 | — |
| Wolfi rolling | temporal-server | 1.23.0-r2 | — |
| Wolfi rolling | terraform | 1.5.7-r6 | — |
| Wolfi rolling | terraform-docs | 0.17.0-r3 | — |
| Wolfi rolling | terraform-provider-azurerm | 3.100.0-r1 | — |
| Wolfi rolling | terraform-provider-google | 5.25.0-r0 | — |
| Wolfi rolling | terraform-provider-pagerduty | 3.23.1-r1 | — |
| Wolfi rolling | terraform-provider-sendgrid +10 | 1.0.1-r1 | — |
| Wolfi rolling | terragrunt | 0.57.5-r0 | — |
| Wolfi rolling | tflint +1 | 0.51.0-r0 | — |
| Wolfi rolling | tfsec | 1.28.5-r1 | — |
| Wolfi rolling | thanos | 0.34.1-r3 | — |
| Wolfi rolling | thanos-operator +1 | 0.3.7-r13 | — |
| Wolfi rolling | timestamp-authority +1 | 1.2.2-r4 | — |
| Wolfi rolling | timoni | 0.20.0-r4 | — |
| Wolfi rolling | tkn | 0.36.0-r4 | — |
| Wolfi rolling | trillian | 1.6.0-r3 | — |
| Wolfi rolling | trivy | 0.50.1-r1 | — |
| Wolfi rolling | trust-manager | 0.9.2-r1 | — |
| Wolfi rolling | up | 0.28.0-r1 | — |
| Wolfi rolling | vault-k8s | 1.4.1-r0 | — |
| Wolfi rolling | velero +2 | 1.13.2-r1 | — |
| Wolfi rolling | velero-plugin-for-csi | 0.7.0-r1 | — |
| Wolfi rolling | vertical-pod-autoscaler +2 | 1.1.1-r1 | — |
| Wolfi rolling | vexctl | 0.2.6-r7 | — |
| Wolfi rolling | volume-modifier-for-k8s | 0.2.1-r4 | — |
| Wolfi rolling | vt-cli +1 | 1.0.0-r5 | — |
| Wolfi rolling | wait-for-port | 1.0.7-r3 | — |
| Wolfi rolling | wazero +1 | 1.7.0-r1 | — |
| Wolfi rolling | wireguard-go | 0.0.20230223-r9 | — |
| Wolfi rolling | xcaddy | 0.3.5-r1 | — |
| Wolfi rolling | yam | 0.0.3-r0 | — |
| Wolfi rolling | yq | 4.43.1-r2 | — |
| Wolfi rolling | ytt | 0.48.0-r2 | — |
| Wolfi rolling | zarf | 0.33.1-r1 | — |
| Wolfi rolling | zot | 2.0.3-r4 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
hex0punk/cont-flood-poc ★ 5 · Apr 12, 2024
PoC for CVE-2023-45288, continuation flood vulnerability
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | golang.org/x/net | < 0.23.0 | 0.23.0 | GHSA-4v7x-pqxf-cx7m |
| Go | golang.org/x/net/http2 | < 0.23.0 | 0.23.0 | GHSA-4v7x-pqxf-cx7m |
| Go | net/http | < 1.21.9 | 1.21.9 | GHSA-4v7x-pqxf-cx7m |
| Go | net/http | >= 1.22.0-0, < 1.22.2 | 1.22.2 | GHSA-4v7x-pqxf-cx7m |
| Go | stdlib | < 1.21.9 · >= 1.22.0-0, < 1.22.2 | 1.21.9, 1.22.2 | GO-2024-2687 |
Advisories 50
- ALSA-2024:2079 Important: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:2724 Important: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:2562 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:1963 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:1962 Important: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3259 Important: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3346 Important: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:2699 Important: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:3467 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:3352 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- WID-SEC-2024-1328 Red Hat Ansible Automation Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2024:2729 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update Red Hat Security Advisories (RHSA) · Oct 18, 2026
- RHSA-2024:3781 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:4934 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:4933 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:4543 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:4545 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:4546 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:4146 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:4125 Red Hat Security Advisory: Red Hat Service Interconnect 1.4.5 Release security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:4023 Red Hat Security Advisory: Release of openshift-serverless-clients kn 1.33.0 security update & enhancements Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:3259 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:3346 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2936 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2935 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2892 Red Hat Security Advisory: go-toolset-1.19-golang security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2724 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2699 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2671 Red Hat Security Advisory: Red Hat build of MicroShift 4.14.24 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2672 Red Hat Security Advisory: OpenShift Container Platform 4.14.24 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2625 Red Hat Security Advisory: rhc-worker-script security and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2667 Red Hat Security Advisory: Red Hat build of MicroShift 4.15.12 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2562 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2079 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:2049 Red Hat Security Advisory: OpenShift Container Platform 4.13.41 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:1962 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:1963 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:1899 Red Hat Security Advisory: OpenShift Container Platform 4.12.56 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:1897 Red Hat Security Advisory: OpenShift Container Platform 4.14.22 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:1892 Red Hat Security Advisory: OpenShift Container Platform 4.15.10 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHEA-2024:4022 Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.15.0 release Red Hat Security Advisories (RHSA) · Oct 16, 2026
- WID-SEC-2024-0789 HTTP/2: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Oct 15, 2026
- WID-SEC-2025-0001 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- openSUSE-SU-2026:22026-1 Security update for prometheus-blackbox_exporter SUSE / openSUSE Security Updates · Oct 7, 2026
- SUSE-EL-9-CLIENT-TOOLS-2026-2254 Security update 5.0.8 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Jul 24, 2026
- SUSE-SU-2026:22558-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Jul 15, 2026
- openSUSE-SU-2026:21210-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Jul 9, 2026
- SUSE-SU-2026:2763-1 Security update 5.1.4 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Jul 7, 2026
- SUSE-SU-2026:2764-1 Security update 5.1.4 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Jul 7, 2026
- SUSE-SU-2026:2765-1 Security update 5.1.4 for Multi-Linux Manager Client Tools SUSE / openSUSE Security Updates · Jul 7, 2026
References
- https://go.dev/issue/65051
- https://go.dev/cl/576155
- https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M
- https://pkg.go.dev/vuln/GO-2024-2687
- https://security.netapp.com/advisory/ntap-20240419-0009/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/
- http://www.openwall.com/lists/oss-security/2024/04/05/4
- http://www.openwall.com/lists/oss-security/2024/04/03/16