Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-45290 BIT-golang-2023-45290EUVD-2023-49589GHSA-rr6r-cfgf-gc6hGO-2024-2599

Memory exhaustion in multipart form parsing in net/textproto and net/http

Published Mar 5, 2024 · Updated Feb 13, 2025 · Assigned by Go

Vendor: Go standard library Product: net/textproto Package: actions-runner-controller Package: amass Package: argo-workflows Package: aws-efs-csi-driver Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-flb-kinesis Package: aws-load-balancer-controller Package: bazelisk Package: bom Package: buildkitd Package: caddy Package: cadvisor Package: cadvisor-compat Package: capslock Package: cass-operator Package: cert-exporter Package: cfssl Package: chartmuseum Package: cluster-proportional-autoscaler Package: cni-plugins Package: configmap-reload Package: controller-gen Package: cortex Package: cri-tools Package: ctop Package: cue Package: dagger Package: dask-gateway Package: dataplaneapi Package: delve Package: dex Package: dgraph Package: direnv Package: dive Package: docker-cli Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-credential-gcr Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: envoy-ratelimit Package: esbuild Package: ferretdb Package: flannel-cni-plugin Package: flux Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: fq Package: fuse-overlayfs-snapshotter Package: gcsfuse Package: gh Package: gitness Package: gke-gcloud-auth-plugin Package: go Package: go-1.20 Package: go-bindata Package: go-licenses Package: go-md2man Package: gobuster Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golangci-lint Package: gomplate Package: gops Package: goreleaser Package: gosu Package: govulncheck Package: grafana-operator Package: grpcurl Package: grype Package: hello-world-golang Package: helm Package: helm-3 Package: helm-4 Package: helm-operator Package: helm-push Package: hey Package: http-echo Package: hubble-ui Package: hubble-ui-backend Package: influx Package: ip-masq-agent Package: k3d Package: k3s Package: k8sgpt Package: k8sgpt-operator Package: k8ssandra-operator Package: kaf Package: kind Package: kine Package: kor Package: kpt Package: kube-bench Package: kube-logging-operator Package: kube-rbac-proxy Package: kube-state-metrics Package: kubebuilder Package: kubeflow-katib Package: kubeflow-pipelines Package: kuberay-operator Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubevela Package: kubewatch Package: kustomize Package: kwok Package: kyverno-policy-reporter Package: kyverno-policy-reporter-kyverno-plugin Package: lazygit Package: litefs Package: local-path-provisioner Package: logstash-exporter Package: mage Package: memcached-exporter Package: metallb Package: metrics-server Package: minio Package: mockery Package: mongo-tools Package: nats Package: nats-server Package: nerdctl Package: newrelic-fluent-bit-output-compat Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-prometheus-configurator Package: nfs-subdir-external-provisioner Package: nodetaint Package: nri-apache Package: nri-cassandra Package: nri-couchbase Package: nri-discovery-kubernetes Package: nri-elasticsearch Package: nri-f5 Package: nri-haproxy Package: nri-kafka Package: nri-memcached Package: nri-mongodb Package: nri-mssql Package: nri-mysql Package: nri-nagios Package: nri-nginx Package: nri-prometheus Package: nri-rabbitmq Package: nri-redis Package: nuclei Package: oras Package: paranoia Package: petname Package: php-fpm_exporter Package: pombump Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-operator Package: prometheus-pushgateway Package: protoc-gen-go-grpc Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-java Package: pulumi-language-yaml Package: q Package: rabbitmq-cluster-operator Package: regclient Package: render-template Package: rqlite Package: runc Package: s5cmd Package: sbom-scorecard Package: sbomqs Package: scorecard Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: shfmt Package: skaffold Package: slsa-verifier Package: smarter-device-manager Package: sonobuoy Package: spark-operator Package: spark-operator-oci-entrypoint Package: speedtest-go Package: src Package: src-fingerprint Package: stakater-reloader Package: stdlib Package: supercronic Package: tailscale Package: task Package: temporal Package: temporal-server Package: temporal-ui-server Package: terraform Package: terraform-docs Package: tflint Package: thanos Package: thanos-operator Package: thanos-operator-compat Package: timoni Package: trillian Package: up Package: vault-k8s Package: velero Package: vertical-pod-autoscaler Package: vexctl Package: vite Package: volume-modifier-for-k8s Package: vt-cli Package: wait-for-port Package: wazero Package: wire-go Package: wireguard-go Package: yam Package: yq Package: ytt Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.

Affected products

VendorProductAffectedFixed
Go standard library net/textproto < 1.21.8, 1.22.0-0 – < 1.22.1 1.21.8

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS golang-1.21 1.21.9-1ubuntu0.1 USN-6886-1
Ubuntu 24.04 LTS golang-1.22 1.22.2-2ubuntu0.1 USN-6886-1
Ubuntu 22.04 LTS golang-1.17 1.17.13-3ubuntu1.3 USN-7111-1
Ubuntu 22.04 LTS golang-1.18 1.18.1-1ubuntu1.2 USN-7109-1
Ubuntu 22.04 LTS golang-1.20 No fix yet —
Ubuntu 22.04 LTS golang-1.21 1.21.1-1~ubuntu22.04.3 USN-6886-1
Ubuntu 22.04 LTS golang-1.22 1.22.2-2~22.04.1 USN-6886-1
Ubuntu 20.04 LTS golang-1.13 +2 No fix yet —
Ubuntu 20.04 LTS golang-1.18 1.18.1-1ubuntu1~20.04.3 USN-7109-1
Ubuntu 20.04 LTS golang-1.21 1.21.1-1~ubuntu20.04.3 USN-6886-1
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +1 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.18 1.18.1-1ubuntu1~18.04.4+esm1 USN-7109-1
Ubuntu Pro 16.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.18 1.18.1-1ubuntu1~16.04.6+esm1 USN-7109-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 buildah +1 2:1.33.7-2.el9_4 RHSA-2024:3827
RHEL 9 containernetworking-plugins 1:1.4.0-3.el9_4 RHSA-2024:3831
RHEL 9 git-lfs 3.4.1-2.el9_4 RHSA-2024:2724
RHEL 9 golang +6 1.21.9-2.el9_4 RHSA-2024:2562
RHEL 9 gvisor-tap-vsock 6:0.7.3-3.el9_4 RHSA-2024:3830
RHEL 9 podman +4 4:4.9.4-4.el9_4 RHSA-2024:3826
RHEL 9 toolbox +1 0.0.99.5-5.el9 RHSA-2024:9135
RHEL 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 buildah +1 2:1.33.8-4.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 container-selinux 2:2.229.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 containers-common 2:1-82.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 crit +4 3.18-5.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 crun 1.14.3-2.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 delve 1.21.2-3.module+el8.10.0+21244+5b2d9000 RHSA-2024:3259
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 git-lfs 3.4.1-2.el8_10 RHSA-2024:3346
RHEL 8 golang +6 1.21.9-1.module+el8.10.0+21671+b35c3b78 RHSA-2024:3259
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 podman +6 4:4.9.4-12.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 python-podman +1 4.9.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 runc 1:1.1.12-4.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 skopeo +1 2:1.14.5-3.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 toolbox +1 0.0.99.5-2.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
RHEL 8 udica 0.2.6-21.module+el8.10.0+22202+761b9a65 RHSA-2024:8038, RHSA-2024:6969, RHSA-2024:5258
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Serverless 1 openshift-serverless-clients 1.12.0-7.el8 RHSA-2024:4023
RHEL 9.2 EUS golang +6 1.19.13-9.el9_2 RHSA-2024:5075
RHEL 8.8 EUS delve 1.9.1-1.module+el8.8.0+16778+5fbb74f5 RHSA-2024:5077
RHEL 8.8 EUS go-toolset 1.19.13-2.module+el8.8.0+22004+c5f8797c RHSA-2024:5077
RHEL 8.8 EUS golang +6 1.19.13-9.module+el8.8.0+22163+5429357b RHSA-2024:5077
RHEL 7 ELS rhc-worker-script 0.9-5.el7_9 RHSA-2024:4893
Red Hat Openshift Ironic 4 python-eventlet +1 0.33.1-6.el9 RHSA-2024:0045
Red Hat Openshift Ironic 4 python-jinja2 +1 3.0.1-3.el9.1 RHSA-2024:5810
Red Hat Openshift Ironic 4 python-werkzeug +1 2.0.3-6.el9 RHSA-2024:5810
Red Hat OpenShift 4 butane +1 0.21.0-1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 cri-o 1.25.3-7.rhaos4.12.git44a2cb2.el9 RHSA-2024:5446, RHSA-2024:5442, RHSA-2024:5436
Red Hat OpenShift 4 cri-tools 1.29.0-3.1.el8 RHSA-2024:0045
Red Hat OpenShift 4 ignition +1 2.18.0-2.1.rhaos4.16.el9 RHSA-2024:0045
Red Hat OpenShift 4 openshift +1 4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8 RHSA-2024:5810, RHSA-2024:5446, RHSA-2024:5442
Red Hat OpenShift 4 openshift-kubelet +3 4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 openshift-prometheus-promu +1 0.15.0-15.2.gitd5383c5.el9 RHSA-2024:0045
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.14.0-202408072340.p0.g471f069.assembly.stream.el8 RHSA-2024:5442, RHSA-2024:5436, RHSA-2024:0045
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.15.0-202408091502.p0.g0d799a2.assembly.stream.el8 RHSA-2024:5442, RHSA-2024:0045
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.15.0-202408091502.p0.gfc50272.assembly.stream.el8 RHSA-2024:5442, RHSA-2024:0045
Red Hat OpenShift 4 podman +6 3:4.2.0-11.rhaos4.12.el9 RHSA-2024:5446, RHSA-2024:5442, RHSA-2024:5436
Red Hat OpenShift 4 runc 4:1.1.12-3.1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 skopeo +1 2:1.14.4-1.rhaos4.16.el8 RHSA-2024:0045
Red Hat Ansible Automation Platform Inside 2 python-black +1 22.8.0-2.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Inside 2 python-cryptography +1 42.0.5-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Inside 2 python-jinja2 +1 3.1.4-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Inside 2 python39-black +1 22.8.0-2.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Inside 2 python39-cryptography +1 42.0.5-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Inside 2 python39-jinja2 +1 3.1.4-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.4.8-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python-black +1 22.8.0-2.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python-cryptography +1 42.0.5-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python-idna +1 3.7-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python-jinja2 +1 3.1.4-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python-requests +1 2.32.2-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python39-black +1 22.8.0-2.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python39-cryptography +1 42.0.5-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python39-idna +1 3.7-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python39-jinja2 +1 3.1.4-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 python39-requests +1 2.32.2-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.4.8-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 automation-controller-venv-tower 4.5.7-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 automation-hub +2 4.9.2-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-aiohttp +1 3.9.5-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-black +1 22.8.0-2.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-cryptography +1 42.0.5-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-galaxy-ng +1 4.9.2-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-gunicorn +1 22.0.0-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-idna +1 3.7-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-jinja2 +1 3.1.4-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-pillow +1 10.3.0-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-pydantic +1 1.10.15-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-requests +1 2.32.2-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-social-auth-app-django +1 5.4.1-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python-sqlparse +1 0.5.0-1.el9ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-aiohttp +1 3.9.5-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-black +1 22.8.0-2.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-cryptography +1 42.0.5-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-gunicorn +1 22.0.0-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-idna +1 3.7-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-jinja2 +1 3.1.4-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-pillow +1 10.3.0-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-pydantic +1 1.10.15-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-requests +1 2.32.2-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-social-auth-app-django +1 5.4.1-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 python39-sqlparse +1 0.5.0-1.el8ap RHSA-2024:3781
Red Hat Ansible Automation Platform 2 receptor +1 1.4.8-1.el8ap RHSA-2024:3781

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 buildah +1 2:1.33.7-2.el9_4 ALSA-2024:3827
AlmaLinux 9 containernetworking-plugins 1:1.4.0-3.el9_4 ALSA-2024:3831
AlmaLinux 9 git-lfs 3.4.1-2.el9_4 ALSA-2024:2724
AlmaLinux 9 golang +6 1.21.9-2.el9_4 ALSA-2024:2562
AlmaLinux 9 gvisor-tap-vsock 6:0.7.3-3.el9_4.alma.1 ALSA-2024:3830
AlmaLinux 9 podman +4 4:4.9.4-4.el9_4 ALSA-2024:3826
AlmaLinux 9 toolbox +1 0.0.99.5-5.el9 ALSA-2024:9135
AlmaLinux 8 aardvark-dns 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 buildah +1 2:1.33.8-4.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3845+87b84552 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 container-selinux 2:2.229.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 containernetworking-plugins 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 crit +2 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 criu-devel +1 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 delve 1.21.2-3.module_el8.10.0+3760+4dd778f9 ALSA-2024:3259
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 git-lfs 3.4.1-2.el8_10 ALSA-2024:3346
AlmaLinux 8 golang +6 1.21.9-1.module_el8.10.0+3840+edaca3c3 ALSA-2024:3259
AlmaLinux 8 libslirp +1 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 podman +6 4:4.9.4-12.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 python3-podman 4.9.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 runc 1:1.1.12-4.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 skopeo +1 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 toolbox +1 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+3858+6ad51f9f ALSA-2024:8038, ALSA-2024:6969, ALSA-2024:5258

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 buildah 2:1.33.7-2.el9_4 RLSA-2024:3827
Rocky Linux 9 git-lfs 3.4.1-2.el9_4 RLSA-2024:2724
Rocky Linux 9 gvisor-tap-vsock 6:0.7.3-3.el9_4 RLSA-2024:3830
Rocky Linux 9 podman 4:4.9.4-4.el9_4 RLSA-2024:3826
Rocky Linux 9 toolbox 0.0.99.5-5.el9.rocky.0.2 RLSA-2024:9135
Rocky Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 buildah 2:1.33.8-4.module+el8.10.0+1843+6892ab28 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 git-lfs 3.4.1-2.el8_10 RLSA-2024:3346
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 podman 4:4.9.4-12.module+el8.10.0+1843+6892ab28 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 python-podman 4.9.0-2.module+el8.10.0+1843+6892ab28 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 runc 1:1.1.12-4.module+el8.10.0+1843+6892ab28 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 skopeo 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 toolbox 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:8038, RLSA-2024:6969, RLSA-2024:5258

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
SLES 15 SP6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
SLES 15 SP5 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLES 15 SP5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 15 SP5 go1.22 1.22.1-150000.1.9.1 SUSE-SU-2024:0812-1
SLES 15 SP5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1
SLES 15 SP4 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLES 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 12 SP5 go1.21 1.21.8-1.27.1 SUSE-SU-2024:0800-1
SLES 12 SP5 go1.22 1.22.1-1.3.1 SUSE-SU-2024:0936-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLES for SAP 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLE HPC 15 SP4 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLE HPC 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.21 1.21.8-1.1 openSUSE-SU-2024:13756-1
openSUSE Tumbleweed go1.22 1.22.1-1.1 openSUSE-SU-2024:13752-1
openSUSE Leap 15.6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
openSUSE Leap 15.6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
openSUSE Leap 15.5 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
openSUSE Leap 15.5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
openSUSE Leap 15.5 go1.22 1.22.1-150000.1.9.1 SUSE-SU-2024:0812-1
openSUSE Leap 15.5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.22.1-r0 —
Alpine v3.23 go 1.22.1-r0 —
Alpine v3.22 go 1.22.1-r0 —
Alpine v3.21 go 1.22.1-r0 —
Alpine v3.20 go 1.22.1-r0 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 go 1.21.8-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +6 1.22.3-1.amzn2023.0.1 ALAS2023-2024-629
Amazon Linux 2 golang +6 1.22.3-1.amzn2.0.1 ALAS2-2024-2554

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang No fix yet —
Azure Linux 2 (CBL-Mariner) golang 1.21.6-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 buildah +1 2:1.33.7-2.0.1.el9_4 ELSA-2024-3827
Oracle Linux 9 containernetworking-plugins 1:1.4.0-3.el9_4 ELSA-2024-3831
Oracle Linux 9 git-lfs 3.4.1-2.el9_4 ELSA-2024-2724
Oracle Linux 9 golang +6 1.21.9-2.el9_4 ELSA-2024-2562
Oracle Linux 9 gvisor-tap-vsock 6:0.7.3-3.el9_4 ELSA-2024-3830
Oracle Linux 9 podman +4 4:4.9.4-4.0.1.el9_4 ELSA-2024-3826
Oracle Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 buildah +1 2:1.33.8-4.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 delve 1.21.2-3.0.1.module+el8.10.0+90307+cdf2b281 ELSA-2024-3259
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 git-lfs 3.4.1-2.el8_10 ELSA-2024-3346
Oracle Linux 8 golang +6 1.21.9-1.module+el8.10.0+90336+233c4160 ELSA-2024-3259
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 podman +6 4:4.9.4-12.0.2.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 python3-podman 4.9.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 runc 1:1.1.12-4.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 skopeo +1 2:1.14.5-3.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90384+a78ffc57 ELSA-2024-8038, ELSA-2024-6969, ELSA-2024-5258

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling actions-runner-controller 0.8.3-r1 —
Wolfi rolling amass 4.2.0-r4 —
Wolfi rolling argo-workflows 3.6.5-r2 —
Wolfi rolling aws-efs-csi-driver 1.7.6-r1 —
Wolfi rolling aws-flb-cloudwatch 1.9.4-r7 —
Wolfi rolling aws-flb-firehose 1.7.2-r7 —
Wolfi rolling aws-flb-kinesis 1.10.2-r7 —
Wolfi rolling aws-load-balancer-controller 2.7.1-r1 —
Wolfi rolling bazelisk 1.19.0-r1 —
Wolfi rolling bom +1 0.6.0-r1 —
Wolfi rolling buildkitd 0.13.1-r2 —
Wolfi rolling caddy 2.7.6-r3 —
Wolfi rolling cadvisor +1 0.49.1-r3 —
Wolfi rolling capslock +1 0.2.1-r1 —
Wolfi rolling cass-operator 1.18.2-r4 —
Wolfi rolling cfssl 1.6.5-r0 —
Wolfi rolling chartmuseum 0.16.1-r4 —
Wolfi rolling cluster-proportional-autoscaler 1.8.11-r1 —
Wolfi rolling cni-plugins 1.4.0-r2 —
Wolfi rolling configmap-reload 0.12.0-r4 —
Wolfi rolling controller-gen 0.14.0-r1 —
Wolfi rolling cortex 1.16.0-r2 —
Wolfi rolling cri-tools 1.29.0-r4 —
Wolfi rolling ctop 0.7.7-r11 —
Wolfi rolling cue 0.7.1-r1 —
Wolfi rolling dagger 0.10.1-r1 —
Wolfi rolling dask-gateway 2024.1.0-r2 —
Wolfi rolling dataplaneapi 2.9.1-r1 —
Wolfi rolling delve 1.22.1-r1 —
Wolfi rolling dex 2.38.0-r1 —
Wolfi rolling dgraph 23.1.0-r5 —
Wolfi rolling direnv 2.34.0-r1 —
Wolfi rolling dive 0.12.0-r1 —
Wolfi rolling docker-cli 24.0.6-r2 —
Wolfi rolling docker-credential-acr-env 0.7.0-r11 —
Wolfi rolling docker-credential-ecr-login 0.7.1-r9 —
Wolfi rolling docker-credential-gcr 2.1.22-r1 —
Wolfi rolling dockerize 0.7.0-r5 —
Wolfi rolling dynamic-localpv-provisioner 3.5.0-r4 —
Wolfi rolling eksctl 0.173.0-r1 —
Wolfi rolling envoy-ratelimit 0.0_git20240220-r3 —
Wolfi rolling esbuild 0.20.1-r1 —
Wolfi rolling ferretdb 1.20.1-r1 —
Wolfi rolling flux 2.2.3-r1 —
Wolfi rolling flux-helm-controller 0.37.4-r3 —
Wolfi rolling flux-image-automation-controller 0.37.1-r1 —
Wolfi rolling flux-image-reflector-controller 0.31.2-r1 —
Wolfi rolling fq 0.10.0-r1 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.8-r4 —
Wolfi rolling gcsfuse 1.4.2-r1 —
Wolfi rolling gh 2.45.0-r1 —
Wolfi rolling gitness 3.0.0_beta5-r1 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r7 —
Wolfi rolling go-1.20 1.20.14-r9 —
Wolfi rolling go-bindata 3.1.3-r16 —
Wolfi rolling go-licenses 1.6.0-r10 —
Wolfi rolling go-md2man 2.0.3-r2 —
Wolfi rolling gobuster 3.6.0-r5 —
Wolfi rolling golangci-lint 1.56.2-r1 —
Wolfi rolling gomplate 3.11.7-r1 —
Wolfi rolling gops 0.3.28-r5 —
Wolfi rolling goreleaser 1.24.0-r1 —
Wolfi rolling gosu 1.17-r3 —
Wolfi rolling govulncheck 1.0.2-r1 —
Wolfi rolling grafana-operator 5.6.3-r1 —
Wolfi rolling grpcurl 1.8.9-r3 —
Wolfi rolling grype 0.74.7-r1 —
Wolfi rolling hello-world-golang 1.3-r1 —
Wolfi rolling helm 3.14.2-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-operator 1.34.1-r1 —
Wolfi rolling helm-push 0.10.4-r4 —
Wolfi rolling hey 0.1.4-r10 —
Wolfi rolling hubble-ui 0.13.0-r1 —
Wolfi rolling hubble-ui-backend 0.13.3-r1 —
Wolfi rolling influx 2.7.3-r9 —
Wolfi rolling ip-masq-agent 2.9.3-r7 —
Wolfi rolling k3d 5.6.0-r7 —
Wolfi rolling k3s 1.29.2-r1 —
Wolfi rolling k8sgpt 0.3.27-r3 —
Wolfi rolling k8sgpt-operator 0.1.0-r1 —
Wolfi rolling kaf 0.2.7-r1 —
Wolfi rolling kind 0.22.0-r2 —
Wolfi rolling kine 0.11.3-r2 —
Wolfi rolling kor +1 0.3.6-r1 —
Wolfi rolling kpt 1.0.0_beta49-r1 —
Wolfi rolling kube-bench 0.7.2-r1 —
Wolfi rolling kube-logging-operator 4.5.6-r1 —
Wolfi rolling kube-rbac-proxy 0.16.0-r1 —
Wolfi rolling kube-state-metrics 2.11.0-r0 —
Wolfi rolling kubebuilder 3.14.0-r2 —
Wolfi rolling kubeflow-katib 0.16.0-r5 —
Wolfi rolling kubeflow-pipelines 2.0.5-r4 —
Wolfi rolling kuberay-operator 1.0.0-r2 —
Wolfi rolling kubernetes-csi-external-provisioner 4.0.0-r1 —
Wolfi rolling kubernetes-csi-external-resizer 1.10.0-r2 —
Wolfi rolling kubernetes-dashboard 2.7.0-r12 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.0.9-r11 —
Wolfi rolling kubernetes-dns-node-cache 1.23.0-r1 —
Wolfi rolling kubernetes-event-exporter 1.7-r2 —
Wolfi rolling kubevela 1.9.9-r2 —
Wolfi rolling kubewatch 2.5.0-r10 —
Wolfi rolling kustomize 5.3.0-r2 —
Wolfi rolling kwok 0.5.1-r1 —
Wolfi rolling kyverno-policy-reporter 2.18.1-r1 —
Wolfi rolling lazygit 0.40.2-r2 —
Wolfi rolling litefs 0.5.11-r1 —
Wolfi rolling local-path-provisioner 0.0.26-r3 —
Wolfi rolling logstash-exporter +1 1.6.3-r1 —
Wolfi rolling mage 1.15.0-r5 —
Wolfi rolling memcached-exporter 0.14.2-r2 —
Wolfi rolling metallb 0.14.3-r1 —
Wolfi rolling metrics-server 0.7.0-r1 —
Wolfi rolling minio 0.20231220.010002-r3 —
Wolfi rolling mockery 2.42.0-r1 —
Wolfi rolling mongo-tools 100.9.4-r2 —
Wolfi rolling nats 0.1.3-r1 —
Wolfi rolling nats-server 2.10.11-r1 —
Wolfi rolling nerdctl 1.7.4-r1 —
Wolfi rolling newrelic-fluent-bit-output-compat 2.4.0-r5 —
Wolfi rolling newrelic-infra-operator 0.18.0-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.50.0-r1 —
Wolfi rolling newrelic-prometheus-configurator 1.14.0-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r4 —
Wolfi rolling nodetaint 0.0.4-r11 —
Wolfi rolling nri-apache 1.12.3-r1 —
Wolfi rolling nri-cassandra 2.13.4-r1 —
Wolfi rolling nri-couchbase 2.6.1-r5 —
Wolfi rolling nri-discovery-kubernetes 1.7.2-r3 —
Wolfi rolling nri-elasticsearch 5.2.3-r1 —
Wolfi rolling nri-f5 2.7.3-r1 —
Wolfi rolling nri-haproxy 3.0.0-r1 —
Wolfi rolling nri-kafka 3.7.1-r1 —
Wolfi rolling nri-memcached 2.5.3-r1 —
Wolfi rolling nri-mongodb 2.8.1-r5 —
Wolfi rolling nri-mssql +2 2.12.0-r1 —
Wolfi rolling nri-mysql 1.10.4-r1 —
Wolfi rolling nri-nagios 2.9.2-r1 —
Wolfi rolling nri-nginx 3.4.3-r1 —
Wolfi rolling nri-prometheus 2.21.0-r1 —
Wolfi rolling nri-rabbitmq 2.13.3-r1 —
Wolfi rolling nri-redis 1.11.4-r1 —
Wolfi rolling nuclei 3.1.7-r2 —
Wolfi rolling oras 1.1.0-r5 —
Wolfi rolling paranoia 0.2.1-r11 —
Wolfi rolling petname 2.11-r4 —
Wolfi rolling php-fpm_exporter 2.2.0-r1 —
Wolfi rolling pombump 0.0.11-r1 —
Wolfi rolling prometheus-adapter 0.11.2-r4 —
Wolfi rolling prometheus-alertmanager 0.27.0-r1 —
Wolfi rolling prometheus-operator 0.72.0-r1 —
Wolfi rolling prometheus-pushgateway 1.7.0-r2 —
Wolfi rolling protoc-gen-go-grpc 1.3.0-r8 —
Wolfi rolling pulumi 3.103.1-r3 —
Wolfi rolling pulumi-kubernetes-operator 1.15.0-r0 —
Wolfi rolling pulumi-language-java 0.9.9-r3 —
Wolfi rolling pulumi-language-yaml +2 1.5.0-r1 —
Wolfi rolling q 0.19.2-r1 —
Wolfi rolling rabbitmq-cluster-operator 2.7.0-r1 —
Wolfi rolling regclient 0.5.7-r1 —
Wolfi rolling render-template 1.0.6-r2 —
Wolfi rolling rqlite 8.22.2-r1 —
Wolfi rolling runc 1.1.12-r1 —
Wolfi rolling s5cmd 2.2.2-r1 —
Wolfi rolling sbom-scorecard 0.0.7-r7 —
Wolfi rolling sbomqs 0.0.30-r1 —
Wolfi rolling scorecard 4.13.1-r2 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.5.1-r1 —
Wolfi rolling shfmt 3.8.0-r1 —
Wolfi rolling skaffold 2.10.1-r1 —
Wolfi rolling slsa-verifier 2.4.1-r2 —
Wolfi rolling smarter-device-manager 1.20.11-r4 —
Wolfi rolling sonobuoy 0.57.1-r2 —
Wolfi rolling spark-operator +1 1.1.27-r19 —
Wolfi rolling speedtest-go 1.6.10-r1 —
Wolfi rolling src 5.3.0-r1 —
Wolfi rolling src-fingerprint 0.19.0-r10 —
Wolfi rolling stakater-reloader 1.0.69-r1 —
Wolfi rolling supercronic 0.2.29-r1 —
Wolfi rolling tailscale 1.60.1-r1 —
Wolfi rolling task 3.35.1-r1 —
Wolfi rolling temporal 0.11.0-r1 —
Wolfi rolling temporal-server 1.22.6-r1 —
Wolfi rolling temporal-ui-server 2.24.0-r1 —
Wolfi rolling terraform 1.5.7-r4 —
Wolfi rolling terraform-docs 0.17.0-r2 —
Wolfi rolling tflint 0.50.3-r1 —
Wolfi rolling thanos 0.34.1-r1 —
Wolfi rolling thanos-operator +1 0.3.7-r12 —
Wolfi rolling timoni 0.20.0-r1 —
Wolfi rolling up 0.25.0-r0 —
Wolfi rolling vault-k8s +1 1.4.0-r1 —
Wolfi rolling velero +1 1.13.0-r1 —
Wolfi rolling vertical-pod-autoscaler 1.0.0-r3 —
Wolfi rolling vexctl 0.2.6-r1 —
Wolfi rolling vite 5.2.2-r0 —
Wolfi rolling vt-cli +1 1.0.0-r4 —
Wolfi rolling wait-for-port 1.0.7-r2 —
Wolfi rolling wazero +1 1.6.0-r1 —
Wolfi rolling wireguard-go 0.0.20230223-r8 —
Wolfi rolling yam 0.0.2-r1 —
Wolfi rolling yq 4.42.1-r2 —
Wolfi rolling ytt 0.48.0-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.21.8 · >= 1.22.0-0, < 1.22.1 1.21.8, 1.22.1 GO-2024-2599

Advisories 50

References