Skip to content
OpenAdvisories
High · 7.5 CVE-2024-24786 EUVD-2024-0879GHSA-8r3f-844c-mc37GO-2024-2611

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

Published Mar 5, 2024 · Updated Sep 23, 2026 · Assigned by Go

Vendor: google.golang.org/protobuf Product: google.golang.org/protobuf/encoding/protojson Product: google.golang.org/protobuf/internal/encoding/json Package: aactl Package: actions-runner-controller Package: actions-runner-controller-compat Package: amass Package: apisix-ingress-controller Package: argo-workflows Package: atlantis Package: aws-efs-csi-driver Package: aws-flb-kinesis Package: aws-flb-kinesis-compat Package: aws-load-balancer-controller Package: aws-load-balancer-controller-compat Package: azcopy Package: bank-vaults Package: bank-vaults-template Package: blobfuse2 Package: boring-registry Package: buf Package: buildah Package: buildctl Package: buildkitd Package: caddy Package: caddy-man Package: cadvisor Package: capslock Package: cass-operator Package: cass-operator-compat Package: cass-operator-config Package: cert-exporter Package: cert-manager Package: certificate-transparency Package: cf-cli Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: chartmuseum Package: cilium-cli Package: cloudflared Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: configmap-reload Package: conftest Package: containerd Package: containerized-data-importer Package: coredns Package: cortex Package: cosign Package: cri-tools Package: cri-tools Package: crictl Package: critest Package: crossplane-crank Package: crossplane-provider-aws Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudformation-compat Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudfront-compat Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-cloudwatchlogs-compat Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-dynamodb-compat Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-eks-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-elasticache-compat Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-firehose-compat Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-iam-compat Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kinesis-compat Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-kms-compat Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-lambda-compat Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-memorydb-compat Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-rds-compat Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-s3-compat Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sns-compat Package: crossplane-provider-aws-sqs Package: crossplane-provider-aws-sqs-compat Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-aws Package: crossplane-provider-family-aws-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: ctop Package: dagger Package: dex Package: dex-iamguarded-compat Package: dgraph Package: docker-buildx Package: docker-cli Package: docker-compose Package: docker-compose Package: docker-dind Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: envoy-ratelimit Package: etcd Package: falcoctl Package: falcosidekick Package: ferretdb Package: flannel Package: flannel Package: flux Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-image-automation-controller Package: flux-image-automation-controller-compat Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-source-controller Package: frp Package: fulcio Package: fuse-overlayfs-snapshotter Package: gcsfuse Package: gh Package: gh Package: gitness Package: gitsign Package: gitsign-config Package: gitsign-credential-cache Package: golang-google-protobuf Package: golang-google-protobuf Package: golangci-lint Package: gomplate Package: google-guest-agent Package: google-osconfig-agent Package: google.golang.org/protobuf Package: google.golang.org/protobuf/encoding/protojson Package: google.golang.org/protobuf/internal/encoding/json Package: goreleaser Package: grafana-agent-operator Package: grafana-operator Package: grafana-operator-bitnami-compat Package: grpc-health-probe Package: grpcurl Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: helm Package: helm-3 Package: helm-4 Package: helm-operator Package: helm-push Package: hubble Package: hubble-ui Package: hubble-ui-backend Package: hugo Package: hugo-extended Package: ig Package: influx Package: influxdb Package: ip-masq-agent Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k3s-multicall Package: k3s-static Package: k8sgpt Package: k8sgpt-operator Package: k8sgpt-operator-compat Package: k8ssandra-operator Package: k8ssandra-operator-compat Package: k9s Package: kaf Package: kaniko Package: kaniko-compat Package: kaniko-warmer Package: kaniko-warmer-compat Package: kargo Package: kata-containers Package: kata-containers-cc Package: katib-controller Package: katib-controller-compat Package: katib-db-manager Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: keda Package: kine Package: kor Package: kots Package: kpt Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-logging-operator Package: kube-state-metrics Package: kube-vip-cloud-provider Package: kubectl-1.25 Package: kubectl-1.25-default Package: kubectl-1.26 Package: kubectl-1.26-default Package: kubectl-1.27 Package: kubectl-1.27-default Package: kubectl-1.28 Package: kubectl-1.28-default Package: kubectl-1.29 Package: kubectl-1.29-default Package: kubectl-bash-completion-1.25 Package: kubectl-bash-completion-1.26 Package: kubectl-bash-completion-1.27 Package: kubectl-bash-completion-1.28 Package: kubectl-bash-completion-1.29 Package: kubeflow Package: kubeflow-access-management Package: kubeflow-access-management-compat Package: kubeflow-admission-webhook Package: kubeflow-admission-webhook-compat Package: kubeflow-katib Package: kubeflow-notebook-controller Package: kubeflow-notebook-controller-compat Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubeflow-profile-controller Package: kubeflow-profile-controller-compat Package: kubeflow-pvcviewer-controller Package: kubeflow-pvcviewer-controller-compat Package: kubeflow-tensorboard-controller Package: kubeflow-tensorboard-controller-compat Package: kuberay-operator Package: kubernetes Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubescape Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubevirt Package: kubewatch Package: kustomize Package: kwok Package: kwokctl Package: kyverno-policy-reporter Package: kyverno-policy-reporter-compat Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-kyverno-plugin-compat Package: kyverno-policy-reporter-ui Package: kyverno-policy-reporter-ui-compat Package: libcontainers-common Package: litefs Package: local-path-provisioner Package: logstash-exporter Package: mc Package: melange Package: memcached-exporter Package: memcached-exporter-iamguarded-compat Package: metacontroller Package: metallb Package: metallb-controller Package: metallb-controller-compat Package: metallb-cp-tool Package: metallb-cp-tool-compat Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metallb-speaker-compat Package: metrics-server Package: minio Package: moby-buildx Package: moby-cli Package: moby-compose Package: moby-containerd Package: moby-containerd-cc Package: moby-engine Package: nats Package: nerdctl Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-nri-kube-events Package: nfs-subdir-external-provisioner Package: node-problem-detector Package: nodetaint Package: nri-discovery-kubernetes Package: nri-kubernetes Package: nri-prometheus Package: nuclei Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: ollama Package: ollama-cpu Package: opa Package: osv-scanner Package: packer Package: pgpool2_exporter Package: php-fpm_exporter Package: policy-controller Package: policy-controller-tester Package: prometheus Package: prometheus-adapter Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-alertmanager-iamguarded-compat Package: prometheus-operator Package: prometheus-pushgateway Package: prometheus-pushgateway-iamguarded-compat Package: protoc-gen-go-grpc Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: rabbitmq-cluster-operator Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rclone Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: restic Package: rook Package: rqlite Package: runc Package: runc-doc Package: scorecard Package: secrets-store-csi-driver Package: secrets-store-csi-driver-crds Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sigstore-scaffolding Package: sigstore-scaffolding-cloudsqlproxy Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-ctlog-managectroots Package: sigstore-scaffolding-ctlog-verifyfulcio Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: skaffold Package: skopeo Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: sonobuoy Package: sops Package: spark-operator Package: spicedb Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: src Package: sriov-network-device-plugin Package: stakater-reloader Package: step Package: step-ca Package: supercronic Package: syft Package: tdbg Package: tdbg-compat Package: tekton-chains Package: telegraf Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: terraform Package: terraform Package: terraform-compat Package: terraform-docs Package: terraform-local-provider-config Package: terraform-provider-aws Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-sendgrid Package: terragrunt Package: terragrunt-docs Package: tflint Package: thanos Package: thanos-operator Package: timestamp-authority Package: timoni Package: tkn Package: trillian Package: trivy Package: trust-manager Package: up Package: vault-k8s Package: velero Package: vertical-pod-autoscaler Package: vexctl Package: vitess Package: volume-modifier-for-k8s Package: weaviate Package: zarf Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Affected products

VendorProductAffectedFixed
google.golang.org/protobuf google.golang.org/protobuf/encoding/protojson < 1.33.0 1.33.0
google.golang.org/protobuf google.golang.org/protobuf/internal/encoding/json < 1.33.0 1.33.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-google-protobuf 1.33.0-1 —
Debian 13 golang-google-protobuf 1.33.0-1 —
Debian 12 golang-google-protobuf No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-google-protobuf No fix yet —
Ubuntu 26.04 LTS golang-google-protobuf No fix yet —
Ubuntu 25.10 golang-google-protobuf No fix yet —
Ubuntu 24.04 LTS golang-google-protobuf No fix yet —
Ubuntu 24.04 LTS google-guest-agent 20240213.00-0ubuntu3.1 USN-6746-2
Ubuntu 24.04 LTS google-osconfig-agent 20240320.00-0ubuntu1~24.04.1 USN-6746-2
Ubuntu 22.04 LTS golang-google-protobuf No fix yet —
Ubuntu 22.04 LTS google-guest-agent 20231004.02-0ubuntu1~22.04.4 USN-6746-1
Ubuntu 22.04 LTS google-osconfig-agent 20230504.00-0ubuntu1~22.04.1 USN-6746-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS google-osconfig-agent No fix yet —
Ubuntu Pro 18.04 LTS google-osconfig-agent No fix yet —
Ubuntu Pro 16.04 LTS google-osconfig-agent No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 buildah +1 2:1.33.7-1.el9_4 RHSA-2024:2550
RHEL 9 podman +4 4:4.9.4-3.el9_4 RHSA-2024:2548
RHEL 9 skopeo +1 2:1.14.3-2.el9_4 RHSA-2024:2549
RHEL 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+21209+52deeb51 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 buildah +1 2:1.33.7-1.module+el8.10.0+21590+d7d75709 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+21373+0d273fdf RHSA-2024:4246, RHSA-2024:3254
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+21077+98b84d8a RHSA-2024:4246, RHSA-2024:3254
RHEL 8 container-selinux 2:2.229.0-2.module+el8.10.0+21196+3f0abbca RHSA-2024:4246, RHSA-2024:3254
RHEL 8 containernetworking-plugins 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 containers-common 2:1-81.module+el8.10.0+21340+c6c7475a RHSA-2024:4246, RHSA-2024:3254
RHEL 8 crit +4 3.18-5.module+el8.10.0+21672+01ba06ae RHSA-2024:4246, RHSA-2024:3254
RHEL 8 crun 1.14.3-2.module+el8.10.0+21340+c6c7475a RHSA-2024:4246, RHSA-2024:3254
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+20412+95ee28e2 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+21672+01ba06ae RHSA-2024:4246, RHSA-2024:3254
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+21306+6be40ce7 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+20565+a40ba0e5 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 podman +6 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 python-podman +1 4.9.0-1.module+el8.10.0+21196+3f0abbca RHSA-2024:4246, RHSA-2024:3254
RHEL 8 runc 1:1.1.12-1.module+el8.10.0+21251+62b7388c RHSA-2024:4246, RHSA-2024:3254
RHEL 8 skopeo +1 2:1.14.3-2.module+el8.10.0+21728+a1d9b0ab RHSA-2024:4246, RHSA-2024:3254
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+21306+6be40ce7 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 toolbox +1 0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 RHSA-2024:4246, RHSA-2024:3254
RHEL 8 udica 0.2.6-21.module+el8.10.0+21672+01ba06ae RHSA-2024:4246, RHSA-2024:3254
RHEL 7 rhc-worker-script 0.7-1.el7_9 RHSA-2024:1874
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Openshift Ironic 4 python-eventlet +1 0.33.1-6.el9 RHSA-2024:0045
Red Hat OpenShift 4 buildah +1 1:1.23.4-5.2.rhaos4.12.el8 RHSA-2024:1574, RHSA-2024:1563
Red Hat OpenShift 4 butane +1 0.16.0-2.2.rhaos4.12.el8 RHSA-2024:1574, RHSA-2024:1563, RHSA-2024:0045
Red Hat OpenShift 4 containernetworking-plugins 1:1.4.0-1.1.rhaos4.12.el8 RHSA-2024:1574, RHSA-2024:1563
Red Hat OpenShift 4 cri-o 1.25.3-5.2.rhaos4.12.git44a2cb2.el9 RHSA-2024:1574, RHSA-2024:1563, RHSA-2024:1461
Red Hat OpenShift 4 cri-tools 1.25.0-2.2.el8 RHSA-2024:1574, RHSA-2024:1563, RHSA-2024:0045
Red Hat OpenShift 4 ignition +1 2.14.0-5.2.rhaos4.12.el9 RHSA-2024:1574, RHSA-2024:1563, RHSA-2024:0045
Red Hat OpenShift 4 microshift +8 4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9 RHSA-2024:0043
Red Hat OpenShift 4 openshift +1 4.12.0-202406040636.p0.g306a47e.assembly.stream.el8 RHSA-2024:3715, RHSA-2024:0045
Red Hat OpenShift 4 openshift-clients +1 4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8 RHSA-2024:1574, RHSA-2024:1563
Red Hat OpenShift 4 openshift-kubelet +3 4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 openshift-prometheus-promu +1 0.15.0-15.2.gitd5383c5.el9 RHSA-2024:0045
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el8 RHSA-2024:1563, RHSA-2024:0045
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.16.0-202404301345.p0.g0e95532.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.16.0-202404181812.p0.g26b43df.assembly.stream.el8 RHSA-2024:0045
Red Hat OpenShift 4 podman +6 3:4.2.0-7.2.rhaos4.12.el9 RHSA-2024:1574, RHSA-2024:1563, RHSA-2024:0045
Red Hat OpenShift 4 runc 3:1.1.6-5.2.rhaos4.12.el8 RHSA-2024:1574, RHSA-2024:1563, RHSA-2024:0045
Red Hat OpenShift 4 skopeo +1 2:1.9.4-3.2.rhaos4.12.el8 RHSA-2024:1574, RHSA-2024:1563, RHSA-2024:0045
Red Hat Ocp Tools 4 jenkins 2.440.3.1716387933-3.el8 RHSA-2024:4597, RHSA-2024:3636, RHSA-2024:3635
Red Hat Ocp Tools 4 jenkins-2-plugins 4.12.1716445211-1.el8 RHSA-2024:4597, RHSA-2024:3636, RHSA-2024:3635
Red Hat Hardened Images 1 buildah 1.45.1-1.1.hum1 RHSA-2026:80643
Red Hat Hardened Images 1 caddy 2.11.7-0.2.hum1 RHSA-2026:80686
Red Hat Hardened Images 1 cosign 3.1.3-0.3.hum1 RHSA-2026:80682
Red Hat Hardened Images 1 dex 2.46.0-0.2.hum1 RHSA-2026:80646
Red Hat Hardened Images 1 distribution 3.1.2-0.2.hum1 RHSA-2026:80654
Red Hat Hardened Images 1 etcd 3.7.2-0.2.hum1 RHSA-2026:80650
Red Hat Hardened Images 1 fulcio 1.9.0-0.2.hum1 RHSA-2026:80634
Red Hat Hardened Images 1 git-sync 4.7.1-0.2.hum1 RHSA-2026:80637
Red Hat Hardened Images 1 grafana12.4 12.4.12-0.4.hum1 RHSA-2026:76677
Red Hat Hardened Images 1 grafana13.1 13.1.7-0.1.hum1 RHSA-2026:76448
Red Hat Hardened Images 1 grafana13.2 13.2.3-0.1.hum1 RHSA-2026:76430
Red Hat Hardened Images 1 grype 0.119.0-0.2.hum1 RHSA-2026:80649
Red Hat Hardened Images 1 helm3 3.22.0-0.3.hum1 RHSA-2026:80656
Red Hat Hardened Images 1 helm4 4.3.0-0.3.hum1 RHSA-2026:80657
Red Hat Hardened Images 1 hugo 0.167.0-0.2.hum1 RHSA-2026:80677
Red Hat Hardened Images 1 jaeger 2.21.0-0.1.hum1 RHSA-2026:76876
Red Hat Hardened Images 1 k6v1 1.8.1-0.2.hum1 RHSA-2026:80658
Red Hat Hardened Images 1 k6v2 2.3.0-0.2.hum1 RHSA-2026:80683
Red Hat Hardened Images 1 kube-state-metrics 2.20.0-0.3.hum1 RHSA-2026:80661
Red Hat Hardened Images 1 kubernetes1.35 +3 1.35.9-0.2.hum1 RHSA-2026:80671
Red Hat Hardened Images 1 kubernetes1.36 +3 1.36.5-1.1.hum1 RHSA-2026:80693
Red Hat Hardened Images 1 loki3.6 +2 3.6.17-0.3.hum1 RHSA-2026:72570
Red Hat Hardened Images 1 loki3.7 +2 3.7.8-0.3.hum1 RHSA-2026:72496
Red Hat Hardened Images 1 oauth2-proxy 7.15.5-0.2.hum1 RHSA-2026:80653
Red Hat Hardened Images 1 opentelemetry-collector +1 0.162.0-0.2.hum1 RHSA-2026:80668, RHSA-2026:80659
Red Hat Hardened Images 1 opentelemetry-collector-contrib 0.162.0-0.3.hum1 RHSA-2026:80672
Red Hat Hardened Images 1 opentofu1.10 1.10.10-0.5.hum1 RHSA-2026:80660
Red Hat Hardened Images 1 opentofu1.12 1.12.7-0.2.hum1 RHSA-2026:80666
Red Hat Hardened Images 1 podman +4 6.1.3-1.1.hum1 RHSA-2026:80651
Red Hat Hardened Images 1 prometheus3.13 3.13.4-0.1.hum1 RHSA-2026:77895
Red Hat Hardened Images 1 rekor +1 1.5.4-0.2.hum1 RHSA-2026:80652
Red Hat Hardened Images 1 skopeo +1 1.24.1-1.1.hum1 RHSA-2026:80632
Red Hat Hardened Images 1 spire1.14 +3 1.14.7-0.5.hum1 RHSA-2026:72489
Red Hat Hardened Images 1 spire1.15 +3 1.15.3-0.2.hum1 RHSA-2026:72493
Red Hat Hardened Images 1 syft 1.54.1-0.2.hum1 RHSA-2026:80647
Red Hat Hardened Images 1 tempo2.10 2.10.8-0.5.hum1 RHSA-2026:80670
Red Hat Hardened Images 1 tempo3.0 3.0.3-0.5.hum1 RHSA-2026:80673
Red Hat Hardened Images 1 trivy 0.75.0-0.2.hum1 RHSA-2026:80676

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 buildah +1 2:1.33.7-1.el9_4 ALSA-2024:2550
AlmaLinux 9 podman +4 4:4.9.4-3.el9_4 ALSA-2024:2548
AlmaLinux 9 skopeo +1 2:1.14.3-2.el9_4 ALSA-2024:2549
AlmaLinux 8 aardvark-dns 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 buildah +1 2:1.33.7-1.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 container-selinux 2:2.229.0-2.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 containernetworking-plugins 1:1.4.0-2.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 containers-common 2:1-81.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 crit +4 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 libslirp +1 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 podman +6 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 python3-podman 4.9.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 runc 1:1.1.12-1.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 skopeo +1 2:1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 toolbox +1 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+3845+87b84552 ALSA-2024:4246, ALSA-2024:3254

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 podman 4:4.9.4-3.el9_4 RLSA-2024:2548
Rocky Linux 9 skopeo 2:1.14.3-2.el9_4 RLSA-2024:2549
Rocky Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 buildah 2:1.33.8-1.module+el8.10.0+1833+b6e0f287 RLSA-2024:4246
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 containernetworking-plugins 1:1.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 containers-common 2:1-81.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 podman 4:4.9.4-4.module+el8.10.0+1833+b6e0f287 RLSA-2024:4246
Rocky Linux 8 python-podman 4.9.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 runc 1:1.1.12-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 skopeo 2:1.14.4-1.module+el8.10.0+1833+b6e0f287 RLSA-2024:4246
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:4246
Rocky Linux 8 toolbox 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:4246
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:4246

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 buildah 1.35.4-150500.3.10.1 SUSE-SU-2024:3151-1
SLES 15 SP6 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLES 15 SP6 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES 15 SP6 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES 15 SP6 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES 15 SP6 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES 15 SP6 podman 4.9.5-150500.3.12.1 SUSE-SU-2024:2031-1
SLES 15 SP5 buildah 1.35.4-150500.3.10.1 SUSE-SU-2024:3151-1
SLES 15 SP5 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLES 15 SP5 kubernetes1.24 1.24.17-150500.3.22.1 SUSE-SU-2024:3342-1
SLES 15 SP5 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES 15 SP5 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES 15 SP5 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES 15 SP5 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES 15 SP5 podman 4.9.5-150500.3.12.1 SUSE-SU-2024:2031-1
SLES 15 SP4 buildah 1.35.4-150400.3.30.1 SUSE-SU-2024:3186-1
SLES 15 SP4 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLES 15 SP4 kubernetes1.24 1.24.17-150400.9.16.1 SUSE-SU-2024:3341-1
SLES 15 SP4 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES 15 SP4 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES 15 SP4 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES 15 SP4 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES 15 SP4 podman 4.9.5-150400.4.27.1 SUSE-SU-2024:2090-1
SLES 15 SP3 buildah 1.35.4-150300.8.25.1 SUSE-SU-2024:3120-1
SLES 15 SP3 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLES 15 SP3 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1
SLES 15 SP3 podman 4.9.5-150300.9.31.1 SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1
SLES 15 SP2 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP4 buildah 1.35.4-150400.3.30.1 SUSE-SU-2024:3186-1
SLES for SAP 15 SP4 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLES for SAP 15 SP4 kubernetes1.24 1.24.17-150400.9.16.1 SUSE-SU-2024:3341-1
SLES for SAP 15 SP4 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLES for SAP 15 SP4 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLES for SAP 15 SP4 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLES for SAP 15 SP4 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLES for SAP 15 SP4 podman 4.9.5-150400.4.27.1 SUSE-SU-2024:2090-1
SLES for SAP 15 SP3 buildah 1.35.4-150300.8.25.1 SUSE-SU-2024:3120-1
SLES for SAP 15 SP3 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLES for SAP 15 SP3 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1
SLES for SAP 15 SP3 podman 4.9.5-150300.9.31.1 SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1
SLES for SAP 15 SP2 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE Micro 6.0 podman 4.9.5-1.1 SUSE-SU-2025:20013-1
SLE Micro 5.5 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE Micro 5.5 podman 4.9.5-150500.3.12.1 SUSE-SU-2024:2031-1
SLE Micro 5.4 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE Micro 5.4 podman 4.9.5-150400.4.27.1 SUSE-SU-2024:2090-1
SLE Micro 5.3 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE Micro 5.3 podman 4.9.5-150400.4.27.1 SUSE-SU-2024:2090-1
SLE Micro 5.2 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE Micro 5.2 podman 4.9.5-150300.9.31.1 SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1
SLE Micro 5.1 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE Micro 5.1 podman 4.9.5-150300.9.31.1 SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1
SLE HPC 15 SP4 buildah 1.35.4-150400.3.30.1 SUSE-SU-2024:3186-1
SLE HPC 15 SP4 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE HPC 15 SP4 kubernetes1.24 1.24.17-150400.9.16.1 SUSE-SU-2024:3341-1
SLE HPC 15 SP4 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
SLE HPC 15 SP4 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
SLE HPC 15 SP4 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
SLE HPC 15 SP4 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
SLE HPC 15 SP4 podman 4.9.5-150400.4.27.1 SUSE-SU-2024:2090-1
SLE HPC 15 SP3 buildah 1.35.4-150300.8.25.1 SUSE-SU-2024:3120-1
SLE HPC 15 SP3 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SLE HPC 15 SP3 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1
SLE HPC 15 SP3 podman 4.9.5-150300.9.31.1 SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1
SLE HPC 15 SP2 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SUSE Enterprise Storage 7.1 buildah 1.35.4-150300.8.25.1 SUSE-SU-2024:3120-1
SUSE Enterprise Storage 7.1 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
SUSE Enterprise Storage 7.1 kubernetes1.24 1.24.17-150300.7.6.1 SUSE-SU-2024:3343-1
SUSE Enterprise Storage 7.1 podman 4.9.5-150300.9.31.1 SUSE-SU-2024:2050-2, SUSE-SU-2024:2050-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed buildah 1.35.3-1.1 openSUSE-SU-2024:13814-1
openSUSE Tumbleweed kubernetes1.26 1.26.15-1.1 openSUSE-SU-2024:13838-1
openSUSE Tumbleweed kubernetes1.27 1.27.12-1.1 openSUSE-SU-2024:13839-1
openSUSE Tumbleweed kubernetes1.28 1.28.8-1.1 openSUSE-SU-2024:13840-1
openSUSE Tumbleweed kubernetes1.29 1.29.3-1.1 openSUSE-SU-2024:13841-1
openSUSE Tumbleweed rclone 1.66.0-1.1 openSUSE-SU-2024:13781-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git142.862ef23-1.1 openSUSE-SU-2025:14663-1
openSUSE Leap 15.6 buildah 1.35.4-150500.3.10.1 SUSE-SU-2024:3151-1
openSUSE Leap 15.6 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
openSUSE Leap 15.6 kubernetes1.24 1.24.17-150500.3.22.1 SUSE-SU-2024:3342-1
openSUSE Leap 15.6 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
openSUSE Leap 15.6 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
openSUSE Leap 15.6 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
openSUSE Leap 15.6 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
openSUSE Leap 15.6 podman 4.9.5-150500.3.12.1 SUSE-SU-2024:2031-1
openSUSE Leap 15.5 buildah 1.35.4-150500.3.10.1 SUSE-SU-2024:3151-1
openSUSE Leap 15.5 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
openSUSE Leap 15.5 kubernetes1.24 1.24.17-150500.3.22.1 SUSE-SU-2024:3342-1
openSUSE Leap 15.5 kubernetes1.25 1.25.16-150400.9.16.1 SUSE-SU-2024:3344-1
openSUSE Leap 15.5 kubernetes1.26 1.26.15-150400.9.11.1 SUSE-SU-2024:3094-1
openSUSE Leap 15.5 kubernetes1.27 1.27.16-150400.9.10.1 SUSE-SU-2024:3098-1
openSUSE Leap 15.5 kubernetes1.28 1.28.13-150400.9.8.1 SUSE-SU-2024:3097-1
openSUSE Leap 15.5 podman 4.9.5-150500.3.12.1 SUSE-SU-2024:2031-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.5 docker 25.0.6_ce-150000.207.1 SUSE-SU-2024:3120-1
openSUSE Leap Micro 5.4 podman 4.9.5-150400.4.27.1 SUSE-SU-2024:2090-1
openSUSE Leap Micro 5.3 podman 4.9.5-150400.4.27.1 SUSE-SU-2024:2090-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 buildah 1.35.4-r0 —
Alpine v3.23 buildah 1.35.4-r0 —
Alpine v3.22 buildah 1.35.4-r0 —
Alpine v3.21 buildah 1.35.4-r0 —
Alpine v3.20 buildah 1.35.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300039.0-1.amzn2023 ALAS2023-2024-625
Amazon Linux 2023 containerd +1 1.7.20-1.amzn2023.0.1 ALAS2023-2024-697
Amazon Linux 2023 docker 25.0.6-1.amzn2023.0.1 ALAS2023-2024-674
Amazon Linux 2023 nerdctl 1.7.6-1.amzn2023.0.1 ALAS2023-2024-700
Amazon Linux 2 amazon-cloudwatch-agent 1.300039.0-1.amzn2 ALAS2-2024-2550
Amazon Linux 2 cri-tools 1.29.0-1.amzn2.0.2 ALAS2-2024-2568
Amazon Linux 2 nerdctl 1.7.6-1.amzn2.0.1 ALAS2-2024-2618

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 azcopy 10.24.0-1 —
Azure Linux 3 blobfuse2 2.3.0-1 —
Azure Linux 3 cert-manager 1.12.12-1 —
Azure Linux 3 cf-cli 8.7.3-3 —
Azure Linux 3 containerd 1.7.13-5 —
Azure Linux 3 containerized-data-importer 1.57.0-6 —
Azure Linux 3 coredns 1.11.1-3 —
Azure Linux 3 cri-tools +1 1.30.1-1 —
Azure Linux 3 docker-buildx 0.14.0-1 —
Azure Linux 3 docker-cli 25.0.3-2 —
Azure Linux 3 docker-compose 2.27.0-1 —
Azure Linux 3 etcd 3.5.12-2 —
Azure Linux 3 flannel 0.24.2-8 —
Azure Linux 3 gh 2.62.0-1 —
Azure Linux 3 ig 0.29.0-1 —
Azure Linux 3 influxdb 2.7.3-7 —
Azure Linux 3 kata-containers +1 3.2.0.azl4-1 —
Azure Linux 3 keda 2.14.0-1 —
Azure Linux 3 kube-vip-cloud-provider 0.0.10-1 —
Azure Linux 3 kubevirt 1.2.0-10 —
Azure Linux 3 libcontainers-common 20240213-3 —
Azure Linux 3 moby-containerd-cc 1.7.7-5 —
Azure Linux 3 moby-engine 25.0.3-7 —
Azure Linux 3 node-problem-detector 0.8.15-2 —
Azure Linux 3 opa 0.63.0-1 —
Azure Linux 3 packer 1.9.5-3 —
Azure Linux 3 prometheus 2.45.4-6 —
Azure Linux 3 prometheus-adapter 0.12.0-1 —
Azure Linux 3 skopeo 1.14.4-1 —
Azure Linux 3 telegraf 1.31.0-1 —
Azure Linux 3 vitess 19.0.4-2 —
Azure Linux 2 (CBL-Mariner) azcopy 10.24.0-1 —
Azure Linux 2 (CBL-Mariner) blobfuse2 2.1.2-7 —
Azure Linux 2 (CBL-Mariner) cert-manager 1.11.2-14 —
Azure Linux 2 (CBL-Mariner) cf-cli 8.4.0-22 —
Azure Linux 2 (CBL-Mariner) coredns 1.11.1-12 —
Azure Linux 2 (CBL-Mariner) cri-tools 1.29.0-5 —
Azure Linux 2 (CBL-Mariner) etcd 3.5.12-6 —
Azure Linux 2 (CBL-Mariner) influxdb 2.6.1-18 —
Azure Linux 2 (CBL-Mariner) kata-containers +1 3.2.0.azl2-1 —
Azure Linux 2 (CBL-Mariner) keda 2.4.0-24 —
Azure Linux 2 (CBL-Mariner) kubernetes 1.28.4-12 —
Azure Linux 2 (CBL-Mariner) kubevirt 0.59.0-17 —
Azure Linux 2 (CBL-Mariner) moby-buildx 0.7.1-24 —
Azure Linux 2 (CBL-Mariner) moby-cli 24.0.9-6 —
Azure Linux 2 (CBL-Mariner) moby-compose 2.17.3-5 —
Azure Linux 2 (CBL-Mariner) moby-containerd 1.6.26-8 —
Azure Linux 2 (CBL-Mariner) moby-containerd-cc 1.7.7-8 —
Azure Linux 2 (CBL-Mariner) moby-engine 24.0.9-13 —
Azure Linux 2 (CBL-Mariner) node-problem-detector 0.8.17-2 —
Azure Linux 2 (CBL-Mariner) opa 0.63.0-1 —
Azure Linux 2 (CBL-Mariner) packer 1.9.5-4 —
Azure Linux 2 (CBL-Mariner) prometheus 2.37.9-1 —
Azure Linux 2 (CBL-Mariner) prometheus-adapter 0.10.0-12 —
Azure Linux 2 (CBL-Mariner) skopeo 1.14.2-9 —
Azure Linux 2 (CBL-Mariner) sriov-network-device-plugin 3.6.2-6 —
Azure Linux 2 (CBL-Mariner) telegraf 1.29.4-8 —
Azure Linux 2 (CBL-Mariner) terraform 1.3.2-20 —
Azure Linux 2 (CBL-Mariner) vitess 17.0.7-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 buildah +1 2:1.33.7-1.0.1.el9_4 ELSA-2024-2550
Oracle Linux 9 cri-o 1.26.4-2.el9 ELSA-2024-12347
Oracle Linux 9 cri-tools 1.26.1-5.el9 ELSA-2024-12347
Oracle Linux 9 etcd 3.5.10-3.el9 ELSA-2024-12347
Oracle Linux 9 istio +1 1.17.8-3.el9 ELSA-2024-12347
Oracle Linux 9 kubeadm +2 1.26.15-1.el9 ELSA-2024-12347
Oracle Linux 9 olcnectl +15 1.7.7-2.el9 ELSA-2024-12347
Oracle Linux 9 podman +4 4:4.9.4-3.0.1.el9_4 ELSA-2024-2548
Oracle Linux 9 skopeo +1 2:1.14.3-2.el9_4 ELSA-2024-2549
Oracle Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 buildah +1 2:1.33.7-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 containernetworking-plugins 1:1.4.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 containers-common 2:1-81.0.1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 cri-o 1.25.5-2.el8 ELSA-2024-12348, ELSA-2024-12328
Oracle Linux 8 cri-tools 1.25.0-4.el8 ELSA-2024-12348, ELSA-2024-12328
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 etcd 3.5.9-4.el8 ELSA-2024-12348, ELSA-2024-12328
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 istio +1 1.16.7-4.el8 ELSA-2024-12348, ELSA-2024-12328
Oracle Linux 8 kubeadm +2 1.25.16-2.el8 ELSA-2024-12348, ELSA-2024-12328
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 olcne-rook-chart +1 1.7.7-2.el8 ELSA-2024-12348
Oracle Linux 8 olcnectl +13 1.6.7-3.el8 ELSA-2024-12348, ELSA-2024-12328
Oracle Linux 8 podman +6 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 python3-podman 4.9.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 runc 1:1.1.12-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 skopeo +1 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90337+0d7b6e74 ELSA-2024-4246, ELSA-2024-3254
Oracle Linux 7 cri-o 1.25.5-2.el7 ELSA-2024-12329
Oracle Linux 7 cri-tools 1.25.0-4.el7 ELSA-2024-12329
Oracle Linux 7 etcd 3.5.9-4.el7 ELSA-2024-12329
Oracle Linux 7 istio +1 1.16.7-4.el7 ELSA-2024-12329
Oracle Linux 7 kubeadm +2 1.25.16-2.el7 ELSA-2024-12329
Oracle Linux 7 olcnectl +13 1.6.7-3.el7 ELSA-2024-12329

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r8 —
Wolfi rolling actions-runner-controller +1 0.8.3-r2 —
Wolfi rolling amass 4.2.0-r8 —
Wolfi rolling apisix-ingress-controller 2.0.1-r2 —
Wolfi rolling argo-workflows 3.5.5-r4 —
Wolfi rolling atlantis 0.27.2-r1 —
Wolfi rolling aws-efs-csi-driver 1.7.6-r2 —
Wolfi rolling aws-flb-kinesis +1 1.10.2-r8 —
Wolfi rolling aws-load-balancer-controller +1 2.7.1-r2 —
Wolfi rolling bank-vaults +1 1.20.4-r10 —
Wolfi rolling boring-registry 0.13.2-r3 —
Wolfi rolling buf 1.30.0-r0 —
Wolfi rolling buildctl +1 0.13.0-r1 —
Wolfi rolling caddy 2.7.6-r4 —
Wolfi rolling caddy-man 2.7.6-r1 —
Wolfi rolling cadvisor 0.49.1-r3 —
Wolfi rolling capslock 0.2.2-r0 —
Wolfi rolling cass-operator +6 1.18.2-r5 —
Wolfi rolling cert-exporter +1 2.12.0-r2 —
Wolfi rolling certificate-transparency 1.1.8-r0 —
Wolfi rolling cfssl +7 1.6.5-r1 —
Wolfi rolling chartmuseum 0.16.1-r5 —
Wolfi rolling cilium-cli 0.16.1-r0 —
Wolfi rolling cloudflared 2024.1.0-r5 —
Wolfi rolling cluster-proportional-autoscaler +1 1.8.11-r2 —
Wolfi rolling configmap-reload 0.12.0-r5 —
Wolfi rolling conftest 0.50.0-r1 —
Wolfi rolling cortex 1.16.0-r3 —
Wolfi rolling cosign 2.2.3-r3 —
Wolfi rolling crictl +2 1.29.0-r5 —
Wolfi rolling crossplane-crank 1.15.0-r2 —
Wolfi rolling crossplane-provider-azure-sql +9 0.42.1-r2 —
Wolfi rolling ctop 0.7.7-r13 —
Wolfi rolling dagger 0.10.2-r1 —
Wolfi rolling dex +1 2.38.0-r2 —
Wolfi rolling dgraph 23.1.0-r6 —
Wolfi rolling docker-compose +1 2.25.0-r1 —
Wolfi rolling docker-dind 25.0.4-r1 —
Wolfi rolling doppler-kubernetes-operator +1 1.5.0-r2 —
Wolfi rolling dynamic-localpv-provisioner 3.5.0-r5 —
Wolfi rolling eksctl 0.173.0-r2 —
Wolfi rolling envoy-ratelimit 0.0_git20240220-r4 —
Wolfi rolling falcoctl 0.7.3-r4 —
Wolfi rolling falcosidekick 2.31.1-r4 —
Wolfi rolling ferretdb 1.20.1-r2 —
Wolfi rolling flannel 0.24.3-r1 —
Wolfi rolling flux 2.2.3-r2 —
Wolfi rolling flux-helm-controller +1 0.37.4-r4 —
Wolfi rolling flux-image-automation-controller +2 0.37.1-r2 —
Wolfi rolling flux-image-reflector-controller +1 0.31.2-r2 —
Wolfi rolling flux-kustomize-controller +2 1.5.1-r2 —
Wolfi rolling flux-notification-controller 1.2.4-r2 —
Wolfi rolling flux-source-controller 1.2.4-r5 —
Wolfi rolling frp 0.55.1-r1 —
Wolfi rolling fulcio 1.4.4-r3 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.8-r5 —
Wolfi rolling gcsfuse 1.4.2-r5 —
Wolfi rolling gh 2.46.0-r0 —
Wolfi rolling gitness 3.0.0_beta6-r0 —
Wolfi rolling gitsign +2 0.8.1-r4 —
Wolfi rolling golangci-lint 1.57.0-r0 —
Wolfi rolling gomplate 3.11.7-r1 —
Wolfi rolling goreleaser 1.25.0-r0 —
Wolfi rolling grafana-agent-operator 0.40.2-r1 —
Wolfi rolling grafana-operator +1 5.7.0-r1 —
Wolfi rolling grpc-health-probe 0.4.25-r0 —
Wolfi rolling grpcurl 1.8.9-r4 —
Wolfi rolling grype 0.74.7-r2 —
Wolfi rolling guac +4 0.5.1-r3 —
Wolfi rolling helm 3.14.3-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-operator 1.34.1-r2 —
Wolfi rolling helm-push 0.10.4-r24 —
Wolfi rolling hubble 0.13.2-r1 —
Wolfi rolling hubble-ui 0.13.0-r2 —
Wolfi rolling hubble-ui-backend 0.13.3-r1 —
Wolfi rolling hugo 0.124.0-r1 —
Wolfi rolling hugo-extended 0.125.0-r0 —
Wolfi rolling influx 2.7.3-r10 —
Wolfi rolling ip-masq-agent 2.9.3-r8 —
Wolfi rolling k3d +2 5.6.0-r8 —
Wolfi rolling k3s +2 1.29.2-r2 —
Wolfi rolling k8sgpt 0.3.28-r1 —
Wolfi rolling k8sgpt-operator +1 0.1.0-r2 —
Wolfi rolling k8ssandra-operator +1 1.13.0-r2 —
Wolfi rolling k9s 0.32.3-r1 —
Wolfi rolling kaf 0.2.8-r0 —
Wolfi rolling kaniko +3 1.21.1-r1 —
Wolfi rolling kargo 0.4.4-r1 —
Wolfi rolling kine 0.11.6-r1 —
Wolfi rolling kor +1 0.3.6-r2 —
Wolfi rolling kots 1.108.1-r0 —
Wolfi rolling kpt 1.0.0_beta49-r2 —
Wolfi rolling kube-bench +1 0.7.2-r2 —
Wolfi rolling kube-logging-operator 4.5.6-r2 —
Wolfi rolling kube-state-metrics 2.11.0-r1 —
Wolfi rolling kubectl-1.25 +2 No fix yet —
Wolfi rolling kubectl-1.26 +2 1.26.15-r0 —
Wolfi rolling kubectl-1.27 +2 1.27.12-r0 —
Wolfi rolling kubectl-1.28 +2 1.28.8-r0 —
Wolfi rolling kubectl-1.29 +2 1.29.3-r0 —
Wolfi rolling kubeflow +13 1.10.0-r3 —
Wolfi rolling kubeflow-katib +17 0.16.0-r6 —
Wolfi rolling kubeflow-pipelines +11 2.0.5-r5 —
Wolfi rolling kuberay-operator 1.0.0-r3 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.13.0-r1 —
Wolfi rolling kubernetes-csi-external-provisioner 4.0.0-r2 —
Wolfi rolling kubernetes-dashboard 2.7.0-r13 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.0.9-r12 —
Wolfi rolling kubernetes-dns-node-cache 1.23.0-r2 —
Wolfi rolling kubernetes-event-exporter 1.7-r3 —
Wolfi rolling kubescape 3.0.6-r1 —
Wolfi rolling kubevela +3 1.9.10-r0 —
Wolfi rolling kubewatch 2.5.0-r11 —
Wolfi rolling kustomize 5.3.0-r3 —
Wolfi rolling kwok +1 0.5.2-r1 —
Wolfi rolling kyverno-policy-reporter +1 2.18.1-r2 —
Wolfi rolling kyverno-policy-reporter-ui +1 1.9.2-r2 —
Wolfi rolling litefs 0.5.11-r2 —
Wolfi rolling local-path-provisioner 0.0.26-r4 —
Wolfi rolling logstash-exporter +2 1.6.3-r2 —
Wolfi rolling mc 0.20231220.071422-r5 —
Wolfi rolling melange 0.6.9-r3 —
Wolfi rolling memcached-exporter +1 0.14.2-r3 —
Wolfi rolling metacontroller 4.11.10-r0 —
Wolfi rolling metallb +8 0.14.3-r2 —
Wolfi rolling metrics-server 0.7.0-r2 —
Wolfi rolling minio 0.20231220.010002-r4 —
Wolfi rolling nats 0.1.4-r0 —
Wolfi rolling nerdctl 1.7.5-r0 —
Wolfi rolling newrelic-infra-operator 0.18.0-r2 —
Wolfi rolling newrelic-infrastructure-agent 1.50.0-r2 —
Wolfi rolling newrelic-nri-kube-events 2.9.3-r0 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r4 —
Wolfi rolling nodetaint 0.0.4-r12 —
Wolfi rolling nri-discovery-kubernetes 1.7.2-r4 —
Wolfi rolling nri-kubernetes 3.27.0-r0 —
Wolfi rolling nri-prometheus 2.21.0-r2 —
Wolfi rolling nuclei 3.2.0-r0 —
Wolfi rolling oauth2-proxy +1 7.6.0-r3 —
Wolfi rolling ollama +1 0.1.29-r1 —
Wolfi rolling osv-scanner 1.7.0-r0 —
Wolfi rolling pgpool2_exporter 1.2.2-r1 —
Wolfi rolling php-fpm_exporter 2.2.0-r2 —
Wolfi rolling policy-controller +1 0.8.4-r4 —
Wolfi rolling prometheus-adapter 0.11.2-r5 —
Wolfi rolling prometheus-alertmanager +1 0.27.0-r2 —
Wolfi rolling prometheus-operator 0.72.0-r2 —
Wolfi rolling prometheus-pushgateway +1 1.7.0-r3 —
Wolfi rolling protoc-gen-go-grpc 1.3.0-r11 —
Wolfi rolling pulumi +3 3.110.0-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.15.0-r1 —
Wolfi rolling pulumi-language-dotnet 3.60.0-r1 —
Wolfi rolling pulumi-language-java 0.9.9-r4 —
Wolfi rolling pulumi-language-yaml 1.6.0-r1 —
Wolfi rolling rabbitmq-cluster-operator 2.7.0-r2 —
Wolfi rolling rabbitmq-messaging-topology-operator +2 1.13.0-r3 —
Wolfi rolling rclone 1.66.0-r0 —
Wolfi rolling rekor +3 1.3.5-r3 —
Wolfi rolling restic 0.16.4-r2 —
Wolfi rolling rook 1.13.6-r2 —
Wolfi rolling rqlite 8.22.2-r2 —
Wolfi rolling runc +1 1.1.12-r2 —
Wolfi rolling scorecard 4.13.1-r4 —
Wolfi rolling secrets-store-csi-driver +1 1.4.2-r1 —
Wolfi rolling sigstore-scaffolding +13 0.6.17-r1 —
Wolfi rolling skaffold 2.10.1-r2 —
Wolfi rolling skopeo 1.15.0-r0 —
Wolfi rolling slsa-verifier 2.5.1-r4 —
Wolfi rolling smarter-device-manager 1.20.11-r5 —
Wolfi rolling sonobuoy 0.57.1-r3 —
Wolfi rolling sops 3.8.1-r6 —
Wolfi rolling spark-operator 1.1.27-r20 —
Wolfi rolling spicedb 1.29.5-r0 —
Wolfi rolling spire-agent +2 1.9.1-r3 —
Wolfi rolling src 5.3.0-r2 —
Wolfi rolling stakater-reloader 1.0.69-r2 —
Wolfi rolling step 0.28.6-r0 —
Wolfi rolling step-ca 0.25.2-r5 —
Wolfi rolling supercronic 0.2.29-r5 —
Wolfi rolling syft +39 1.2.0-r0 —
Wolfi rolling tdbg +9 1.22.6-r2 —
Wolfi rolling tekton-chains 0.20.1-r1 —
Wolfi rolling temporal +1 0.11.0-r2 —
Wolfi rolling terraform 1.5.7-r5 —
Wolfi rolling terraform-compat +1 1.5.7-r36 —
Wolfi rolling terraform-docs 0.17.0-r4 —
Wolfi rolling terraform-provider-aws 5.41.0-r1 —
Wolfi rolling terraform-provider-azurerm 3.96.0-r0 —
Wolfi rolling terraform-provider-google 5.20.0-r1 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r1 —
Wolfi rolling terragrunt +1 0.55.15-r1 —
Wolfi rolling tflint 0.50.3-r2 —
Wolfi rolling thanos 0.34.1-r2 —
Wolfi rolling thanos-operator 0.3.7-r12 —
Wolfi rolling timestamp-authority 1.2.2-r3 —
Wolfi rolling timoni 0.20.0-r2 —
Wolfi rolling tkn 0.36.0-r0 —
Wolfi rolling trillian 1.6.0-r2 —
Wolfi rolling trivy 0.49.1-r5 —
Wolfi rolling trust-manager 0.9.1-r1 —
Wolfi rolling up 0.26.0-r1 —
Wolfi rolling vault-k8s 1.4.0-r2 —
Wolfi rolling velero 1.13.1-r1 —
Wolfi rolling vertical-pod-autoscaler 1.0.0-r4 —
Wolfi rolling vexctl 0.2.6-r7 —
Wolfi rolling volume-modifier-for-k8s 0.2.1-r2 —
Wolfi rolling weaviate 1.24.2-r0 —
Wolfi rolling zarf 0.32.5-r1 —
Wolfi rolling zot 2.0.2-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go google.golang.org/protobuf < 1.33.0 1.33.0 GHSA-8r3f-844c-mc37
Go google.golang.org/protobuf/encoding/protojson < 1.33.0 1.33.0 GHSA-8r3f-844c-mc37
Go google.golang.org/protobuf/internal/encoding/json < 1.33.0 1.33.0 GHSA-8r3f-844c-mc37

Advisories 50

References