Skip to content
OpenAdvisories
High · 7.5 CVE-2024-24784 BIT-golang-2024-24784EUVD-2024-22162GHSA-fgq5-q76c-gx78GO-2024-2609

Comments in display names are incorrectly handled in net/mail

Published Mar 5, 2024 · Updated Feb 13, 2025 · Assigned by Go

Vendor: Go standard library Product: net/mail Package: actions-runner-controller Package: amass Package: argo-workflows Package: aws-efs-csi-driver Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-flb-kinesis Package: aws-load-balancer-controller Package: bazelisk Package: bom Package: buildkitd Package: caddy Package: cadvisor Package: cadvisor-compat Package: capslock Package: cass-operator Package: cert-exporter Package: cfssl Package: chartmuseum Package: cluster-proportional-autoscaler Package: cni-plugins Package: configmap-reload Package: controller-gen Package: cortex Package: cri-tools Package: ctop Package: cue Package: dagger Package: dask-gateway Package: dataplaneapi Package: delve Package: dex Package: dgraph Package: direnv Package: dive Package: docker-cli Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-credential-gcr Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: envoy-ratelimit Package: esbuild Package: ferretdb Package: flannel-cni-plugin Package: flux Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: fq Package: fuse-overlayfs-snapshotter Package: gcsfuse Package: gh Package: gitness Package: gke-gcloud-auth-plugin Package: go Package: go-1.20 Package: go-bindata Package: go-licenses Package: go-md2man Package: gobuster Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golangci-lint Package: gomplate Package: gops Package: goreleaser Package: gosu Package: govulncheck Package: grafana-operator Package: grpcurl Package: grype Package: hello-world-golang Package: helm Package: helm-3 Package: helm-4 Package: helm-operator Package: helm-push Package: hey Package: http-echo Package: hubble-ui Package: hubble-ui-backend Package: influx Package: ip-masq-agent Package: k3d Package: k3s Package: k8sgpt Package: k8sgpt-operator Package: k8ssandra-operator Package: kaf Package: kind Package: kine Package: kor Package: kpt Package: kube-bench Package: kube-logging-operator Package: kube-rbac-proxy Package: kube-state-metrics Package: kubebuilder Package: kubeflow-katib Package: kubeflow-pipelines Package: kuberay-operator Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubevela Package: kubewatch Package: kustomize Package: kwok Package: kyverno-policy-reporter Package: kyverno-policy-reporter-kyverno-plugin Package: lazygit Package: litefs Package: local-path-provisioner Package: logstash-exporter Package: mage Package: memcached-exporter Package: metallb Package: metrics-server Package: minio Package: mockery Package: mongo-tools Package: nats Package: nats-server Package: nerdctl Package: newrelic-fluent-bit-output-compat Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-prometheus-configurator Package: nfs-subdir-external-provisioner Package: nodetaint Package: nri-apache Package: nri-cassandra Package: nri-couchbase Package: nri-discovery-kubernetes Package: nri-elasticsearch Package: nri-f5 Package: nri-haproxy Package: nri-kafka Package: nri-memcached Package: nri-mongodb Package: nri-mssql Package: nri-mysql Package: nri-nagios Package: nri-nginx Package: nri-prometheus Package: nri-rabbitmq Package: nri-redis Package: nuclei Package: oras Package: paranoia Package: petname Package: php-fpm_exporter Package: pombump Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-operator Package: prometheus-pushgateway Package: protoc-gen-go-grpc Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-java Package: pulumi-language-yaml Package: q Package: rabbitmq-cluster-operator Package: regclient Package: render-template Package: rqlite Package: runc Package: s5cmd Package: sbom-scorecard Package: sbomqs Package: scorecard Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: shfmt Package: skaffold Package: slsa-verifier Package: smarter-device-manager Package: sonobuoy Package: spark-operator Package: spark-operator-oci-entrypoint Package: speedtest-go Package: src Package: src-fingerprint Package: stakater-reloader Package: stdlib Package: supercronic Package: tailscale Package: task Package: temporal Package: temporal-server Package: temporal-ui-server Package: terraform Package: terraform-docs Package: tflint Package: thanos Package: thanos-operator Package: thanos-operator-compat Package: timoni Package: trillian Package: up Package: vault-k8s Package: velero Package: vertical-pod-autoscaler Package: vexctl Package: vite Package: volume-modifier-for-k8s Package: vt-cli Package: wait-for-port Package: wazero Package: wire-go Package: wireguard-go Package: yam Package: yq Package: ytt Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.

Affected products

VendorProductAffectedFixed
Go standard library net/mail < 1.21.8, 1.22.0-0 – < 1.22.1 1.21.8

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS golang-1.21 1.21.9-1ubuntu0.1 USN-6886-1
Ubuntu 24.04 LTS golang-1.22 1.22.2-2ubuntu0.1 USN-6886-1
Ubuntu 22.04 LTS golang-1.17 1.17.13-3ubuntu1.3 USN-7111-1
Ubuntu 22.04 LTS golang-1.18 1.18.1-1ubuntu1.2 USN-7109-1
Ubuntu 22.04 LTS golang-1.20 No fix yet —
Ubuntu 22.04 LTS golang-1.21 1.21.1-1~ubuntu22.04.3 USN-6886-1
Ubuntu 22.04 LTS golang-1.22 1.22.2-2~22.04.1 USN-6886-1
Ubuntu 20.04 LTS golang-1.13 +2 No fix yet —
Ubuntu 20.04 LTS golang-1.18 1.18.1-1ubuntu1~20.04.3 USN-7109-1
Ubuntu 20.04 LTS golang-1.21 1.21.1-1~ubuntu20.04.3 USN-6886-1
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +1 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.18 1.18.1-1ubuntu1~18.04.4+esm1 USN-7109-1
Ubuntu Pro 16.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.18 1.18.1-1ubuntu1~16.04.6+esm1 USN-7109-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 golang +6 1.21.9-2.el9_4 RHSA-2024:2562
RHEL 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 buildah +1 2:1.33.8-4.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 container-selinux 2:2.229.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 containers-common 2:1-82.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 crit +4 3.18-5.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 crun 1.14.3-2.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 delve 1.21.2-3.module+el8.10.0+21244+5b2d9000 RHSA-2024:3259
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 golang +6 1.21.9-1.module+el8.10.0+21671+b35c3b78 RHSA-2024:3259
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 podman +6 4:4.9.4-12.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 python-podman +1 4.9.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 runc 1:1.1.12-4.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 skopeo +1 2:1.14.5-3.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 toolbox +1 0.0.99.5-2.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
RHEL 8 udica 0.2.6-21.module+el8.10.0+22202+761b9a65 RHSA-2024:6969, RHSA-2024:5258
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Serverless 1 openshift-serverless-clients 1.12.0-7.el8 RHSA-2024:4023
Red Hat Openshift Ironic 4 python-eventlet +1 0.33.1-6.el9 RHSA-2024:0045
Red Hat OpenShift 4 butane +1 0.21.0-1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 cri-o 1.29.5-5.rhaos4.16.git7032128.el8 RHSA-2024:0045
Red Hat OpenShift 4 cri-tools 1.29.0-3.1.el8 RHSA-2024:0045
Red Hat OpenShift 4 ignition +1 2.18.0-2.1.rhaos4.16.el9 RHSA-2024:0045
Red Hat OpenShift 4 openshift +5 4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 openshift-prometheus-promu +1 0.15.0-15.2.gitd5383c5.el9 RHSA-2024:0045
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.16.0-202405311136.p0.ga53e9de.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.16.0-202404301345.p0.g0e95532.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.16.0-202404181812.p0.g26b43df.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 podman +6 4:4.9.4-5.1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 runc 4:1.1.12-3.1.rhaos4.16.el8 RHSA-2024:0045
Red Hat OpenShift 4 skopeo +1 2:1.14.4-1.rhaos4.16.el8 RHSA-2024:0045

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 golang +6 1.21.9-2.el9_4 ALSA-2024:2562
AlmaLinux 8 aardvark-dns 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 buildah +1 2:1.33.8-4.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3845+87b84552 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 container-selinux 2:2.229.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 containernetworking-plugins 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 crit +2 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 criu-devel +1 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 delve 1.21.2-3.module_el8.10.0+3760+4dd778f9 ALSA-2024:3259
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 golang +6 1.21.9-1.module_el8.10.0+3840+edaca3c3 ALSA-2024:3259
AlmaLinux 8 libslirp +1 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 podman +6 4:4.9.4-12.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 python3-podman 4.9.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 runc 1:1.1.12-4.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 skopeo +1 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 toolbox +1 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:6969, ALSA-2024:5258
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+3858+6ad51f9f ALSA-2024:6969, ALSA-2024:5258

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 buildah 2:1.33.8-4.module+el8.10.0+1843+6892ab28 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 podman 4:4.9.4-12.module+el8.10.0+1843+6892ab28 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 python-podman 4.9.0-2.module+el8.10.0+1843+6892ab28 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 runc 1:1.1.12-4.module+el8.10.0+1843+6892ab28 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 skopeo 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 toolbox 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:6969, RLSA-2024:5258
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:6969, RLSA-2024:5258

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
SLES 15 SP6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
SLES 15 SP5 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLES 15 SP5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 15 SP5 go1.22 1.22.1-150000.1.9.1 SUSE-SU-2024:0812-1
SLES 15 SP5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1
SLES 15 SP4 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLES 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 12 SP5 go1.21 1.21.8-1.27.1 SUSE-SU-2024:0800-1
SLES 12 SP5 go1.22 1.22.1-1.3.1 SUSE-SU-2024:0936-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLES for SAP 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLE HPC 15 SP4 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
SLE HPC 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.21 1.21.8-1.1 openSUSE-SU-2024:13756-1
openSUSE Tumbleweed go1.22 1.22.1-1.1 openSUSE-SU-2024:13752-1
openSUSE Leap 15.6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
openSUSE Leap 15.6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
openSUSE Leap 15.5 go1.21 1.21.8-150000.1.27.1 SUSE-SU-2024:0811-1
openSUSE Leap 15.5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
openSUSE Leap 15.5 go1.22 1.22.1-150000.1.9.1 SUSE-SU-2024:0812-1
openSUSE Leap 15.5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.22.1-r0 —
Alpine v3.23 go 1.22.1-r0 —
Alpine v3.22 go 1.22.1-r0 —
Alpine v3.21 go 1.22.1-r0 —
Alpine v3.20 go 1.22.1-r0 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 go 1.21.8-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +6 1.22.3-1.amzn2023.0.1 ALAS2023-2024-629
Amazon Linux 2 golang +6 1.22.3-1.amzn2.0.1 ALAS2-2024-2554

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang No fix yet —
Azure Linux 2 (CBL-Mariner) golang 1.21.6-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 golang +6 1.21.9-2.el9_4 ELSA-2024-2562
Oracle Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 buildah +1 2:1.33.8-4.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 delve 1.21.2-3.0.1.module+el8.10.0+90307+cdf2b281 ELSA-2024-3259
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 golang +6 1.21.9-1.module+el8.10.0+90336+233c4160 ELSA-2024-3259
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 podman +6 4:4.9.4-12.0.2.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 python3-podman 4.9.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 runc 1:1.1.12-4.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 skopeo +1 2:1.14.5-3.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90384+a78ffc57 ELSA-2024-6969, ELSA-2024-5258

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling actions-runner-controller 0.8.3-r1 —
Wolfi rolling amass 4.2.0-r4 —
Wolfi rolling argo-workflows 3.6.5-r2 —
Wolfi rolling aws-efs-csi-driver 1.7.6-r1 —
Wolfi rolling aws-flb-cloudwatch 1.9.4-r7 —
Wolfi rolling aws-flb-firehose 1.7.2-r7 —
Wolfi rolling aws-flb-kinesis 1.10.2-r7 —
Wolfi rolling aws-load-balancer-controller 2.7.1-r1 —
Wolfi rolling bazelisk 1.19.0-r1 —
Wolfi rolling bom +1 0.6.0-r1 —
Wolfi rolling buildkitd 0.13.1-r2 —
Wolfi rolling caddy 2.7.6-r3 —
Wolfi rolling cadvisor +1 0.49.1-r3 —
Wolfi rolling capslock +1 0.2.1-r1 —
Wolfi rolling cass-operator 1.18.2-r4 —
Wolfi rolling cfssl 1.6.5-r0 —
Wolfi rolling chartmuseum 0.16.1-r4 —
Wolfi rolling cluster-proportional-autoscaler 1.8.11-r1 —
Wolfi rolling cni-plugins 1.4.0-r2 —
Wolfi rolling configmap-reload 0.12.0-r4 —
Wolfi rolling controller-gen 0.14.0-r1 —
Wolfi rolling cortex 1.16.0-r2 —
Wolfi rolling cri-tools 1.29.0-r4 —
Wolfi rolling ctop 0.7.7-r11 —
Wolfi rolling cue 0.7.1-r1 —
Wolfi rolling dagger 0.10.1-r1 —
Wolfi rolling dask-gateway 2024.1.0-r2 —
Wolfi rolling dataplaneapi 2.9.1-r1 —
Wolfi rolling delve 1.22.1-r1 —
Wolfi rolling dex 2.38.0-r1 —
Wolfi rolling dgraph 23.1.0-r5 —
Wolfi rolling direnv 2.34.0-r1 —
Wolfi rolling dive 0.12.0-r1 —
Wolfi rolling docker-cli 24.0.6-r2 —
Wolfi rolling docker-credential-acr-env 0.7.0-r11 —
Wolfi rolling docker-credential-ecr-login 0.7.1-r9 —
Wolfi rolling docker-credential-gcr 2.1.22-r1 —
Wolfi rolling dockerize 0.7.0-r5 —
Wolfi rolling dynamic-localpv-provisioner 3.5.0-r4 —
Wolfi rolling eksctl 0.173.0-r1 —
Wolfi rolling envoy-ratelimit 0.0_git20240220-r3 —
Wolfi rolling esbuild 0.20.1-r1 —
Wolfi rolling ferretdb 1.20.1-r1 —
Wolfi rolling flux 2.2.3-r1 —
Wolfi rolling flux-helm-controller 0.37.4-r3 —
Wolfi rolling flux-image-automation-controller 0.37.1-r1 —
Wolfi rolling flux-image-reflector-controller 0.31.2-r1 —
Wolfi rolling fq 0.10.0-r1 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.8-r4 —
Wolfi rolling gcsfuse 1.4.2-r1 —
Wolfi rolling gh 2.45.0-r1 —
Wolfi rolling gitness 3.0.0_beta5-r1 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r7 —
Wolfi rolling go-1.20 1.20.14-r9 —
Wolfi rolling go-bindata 3.1.3-r16 —
Wolfi rolling go-licenses 1.6.0-r10 —
Wolfi rolling go-md2man 2.0.3-r2 —
Wolfi rolling gobuster 3.6.0-r5 —
Wolfi rolling golangci-lint 1.56.2-r1 —
Wolfi rolling gomplate 3.11.7-r1 —
Wolfi rolling gops 0.3.28-r5 —
Wolfi rolling goreleaser 1.24.0-r1 —
Wolfi rolling gosu 1.17-r3 —
Wolfi rolling govulncheck 1.0.2-r1 —
Wolfi rolling grafana-operator 5.6.3-r1 —
Wolfi rolling grpcurl 1.8.9-r3 —
Wolfi rolling grype 0.74.7-r1 —
Wolfi rolling hello-world-golang 1.3-r1 —
Wolfi rolling helm 3.14.2-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-operator 1.34.1-r1 —
Wolfi rolling helm-push 0.10.4-r4 —
Wolfi rolling hey 0.1.4-r10 —
Wolfi rolling hubble-ui 0.13.0-r1 —
Wolfi rolling hubble-ui-backend 0.13.3-r1 —
Wolfi rolling influx 2.7.3-r9 —
Wolfi rolling ip-masq-agent 2.9.3-r7 —
Wolfi rolling k3d 5.6.0-r7 —
Wolfi rolling k3s 1.29.2-r1 —
Wolfi rolling k8sgpt 0.3.27-r3 —
Wolfi rolling k8sgpt-operator 0.1.0-r1 —
Wolfi rolling kaf 0.2.7-r1 —
Wolfi rolling kind 0.22.0-r2 —
Wolfi rolling kine 0.11.3-r2 —
Wolfi rolling kor +1 0.3.6-r1 —
Wolfi rolling kpt 1.0.0_beta49-r1 —
Wolfi rolling kube-bench 0.7.2-r1 —
Wolfi rolling kube-logging-operator 4.5.6-r1 —
Wolfi rolling kube-rbac-proxy 0.16.0-r1 —
Wolfi rolling kube-state-metrics 2.11.0-r0 —
Wolfi rolling kubebuilder 3.14.0-r2 —
Wolfi rolling kubeflow-katib 0.16.0-r5 —
Wolfi rolling kubeflow-pipelines 2.0.5-r4 —
Wolfi rolling kuberay-operator 1.0.0-r2 —
Wolfi rolling kubernetes-csi-external-provisioner 4.0.0-r1 —
Wolfi rolling kubernetes-csi-external-resizer 1.10.0-r2 —
Wolfi rolling kubernetes-dashboard 2.7.0-r12 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.0.9-r11 —
Wolfi rolling kubernetes-dns-node-cache 1.23.0-r1 —
Wolfi rolling kubernetes-event-exporter 1.7-r2 —
Wolfi rolling kubevela 1.9.9-r2 —
Wolfi rolling kubewatch 2.5.0-r10 —
Wolfi rolling kustomize 5.3.0-r2 —
Wolfi rolling kwok 0.5.1-r1 —
Wolfi rolling kyverno-policy-reporter 2.18.1-r1 —
Wolfi rolling lazygit 0.40.2-r2 —
Wolfi rolling litefs 0.5.11-r1 —
Wolfi rolling local-path-provisioner 0.0.26-r3 —
Wolfi rolling logstash-exporter +1 1.6.3-r1 —
Wolfi rolling mage 1.15.0-r5 —
Wolfi rolling memcached-exporter 0.14.2-r2 —
Wolfi rolling metallb 0.14.3-r1 —
Wolfi rolling metrics-server 0.7.0-r1 —
Wolfi rolling minio 0.20231220.010002-r3 —
Wolfi rolling mockery 2.42.0-r1 —
Wolfi rolling mongo-tools 100.9.4-r2 —
Wolfi rolling nats 0.1.3-r1 —
Wolfi rolling nats-server 2.10.11-r1 —
Wolfi rolling nerdctl 1.7.4-r1 —
Wolfi rolling newrelic-fluent-bit-output-compat 2.4.0-r5 —
Wolfi rolling newrelic-infra-operator 0.18.0-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.50.0-r1 —
Wolfi rolling newrelic-prometheus-configurator 1.14.0-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r4 —
Wolfi rolling nodetaint 0.0.4-r11 —
Wolfi rolling nri-apache 1.12.3-r1 —
Wolfi rolling nri-cassandra 2.13.4-r1 —
Wolfi rolling nri-couchbase 2.6.1-r5 —
Wolfi rolling nri-discovery-kubernetes 1.7.2-r3 —
Wolfi rolling nri-elasticsearch 5.2.3-r1 —
Wolfi rolling nri-f5 2.7.3-r1 —
Wolfi rolling nri-haproxy 3.0.0-r1 —
Wolfi rolling nri-kafka 3.7.1-r1 —
Wolfi rolling nri-memcached 2.5.3-r1 —
Wolfi rolling nri-mongodb 2.8.1-r5 —
Wolfi rolling nri-mssql +2 2.12.0-r1 —
Wolfi rolling nri-mysql 1.10.4-r1 —
Wolfi rolling nri-nagios 2.9.2-r1 —
Wolfi rolling nri-nginx 3.4.3-r1 —
Wolfi rolling nri-prometheus 2.21.0-r1 —
Wolfi rolling nri-rabbitmq 2.13.3-r1 —
Wolfi rolling nri-redis 1.11.4-r1 —
Wolfi rolling nuclei 3.1.7-r2 —
Wolfi rolling oras 1.1.0-r5 —
Wolfi rolling paranoia 0.2.1-r11 —
Wolfi rolling petname 2.11-r4 —
Wolfi rolling php-fpm_exporter 2.2.0-r1 —
Wolfi rolling pombump 0.0.11-r1 —
Wolfi rolling prometheus-adapter 0.11.2-r4 —
Wolfi rolling prometheus-alertmanager 0.27.0-r1 —
Wolfi rolling prometheus-operator 0.72.0-r1 —
Wolfi rolling prometheus-pushgateway 1.7.0-r2 —
Wolfi rolling protoc-gen-go-grpc 1.3.0-r8 —
Wolfi rolling pulumi 3.103.1-r3 —
Wolfi rolling pulumi-kubernetes-operator 1.15.0-r0 —
Wolfi rolling pulumi-language-java 0.9.9-r3 —
Wolfi rolling pulumi-language-yaml +2 1.5.0-r1 —
Wolfi rolling q 0.19.2-r1 —
Wolfi rolling rabbitmq-cluster-operator 2.7.0-r1 —
Wolfi rolling regclient 0.5.7-r1 —
Wolfi rolling render-template 1.0.6-r2 —
Wolfi rolling rqlite 8.22.2-r1 —
Wolfi rolling runc 1.1.12-r1 —
Wolfi rolling s5cmd 2.2.2-r1 —
Wolfi rolling sbom-scorecard 0.0.7-r7 —
Wolfi rolling sbomqs 0.0.30-r1 —
Wolfi rolling scorecard 4.13.1-r2 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.5.1-r1 —
Wolfi rolling shfmt 3.8.0-r1 —
Wolfi rolling skaffold 2.10.1-r1 —
Wolfi rolling slsa-verifier 2.4.1-r2 —
Wolfi rolling smarter-device-manager 1.20.11-r4 —
Wolfi rolling sonobuoy 0.57.1-r2 —
Wolfi rolling spark-operator +1 1.1.27-r19 —
Wolfi rolling speedtest-go 1.6.10-r1 —
Wolfi rolling src 5.3.0-r1 —
Wolfi rolling src-fingerprint 0.19.0-r10 —
Wolfi rolling stakater-reloader 1.0.69-r1 —
Wolfi rolling supercronic 0.2.29-r1 —
Wolfi rolling tailscale 1.60.1-r1 —
Wolfi rolling task 3.35.1-r1 —
Wolfi rolling temporal 0.11.0-r1 —
Wolfi rolling temporal-server 1.22.6-r1 —
Wolfi rolling temporal-ui-server 2.24.0-r1 —
Wolfi rolling terraform 1.5.7-r4 —
Wolfi rolling terraform-docs 0.17.0-r2 —
Wolfi rolling tflint 0.50.3-r1 —
Wolfi rolling thanos 0.34.1-r1 —
Wolfi rolling thanos-operator +1 0.3.7-r12 —
Wolfi rolling timoni 0.20.0-r1 —
Wolfi rolling up 0.25.0-r0 —
Wolfi rolling vault-k8s +1 1.4.0-r1 —
Wolfi rolling velero +1 1.13.0-r1 —
Wolfi rolling vertical-pod-autoscaler 1.0.0-r3 —
Wolfi rolling vexctl 0.2.6-r1 —
Wolfi rolling vite 5.2.2-r0 —
Wolfi rolling vt-cli +1 1.0.0-r4 —
Wolfi rolling wait-for-port 1.0.7-r2 —
Wolfi rolling wazero +1 1.6.0-r1 —
Wolfi rolling wireguard-go 0.0.20230223-r8 —
Wolfi rolling yam 0.0.2-r1 —
Wolfi rolling yq 4.42.1-r2 —
Wolfi rolling ytt 0.48.0-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.21.8 · >= 1.22.0-0, < 1.22.1 1.21.8, 1.22.1 GO-2024-2609

Advisories 34

References