Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-24788 BIT-golang-2024-24788EUVD-2024-22165GHSA-2jwv-jmq4-4j3rGO-2024-2824

Malformed DNS message can cause infinite loop in net

Published May 8, 2024 · Updated Feb 13, 2025 · Assigned by Go

Vendor: Go standard library Product: net Package: aactl Package: atlantis Package: aws-efs-csi-driver Package: bank-vaults Package: bom Package: boring-registry Package: buildkitd Package: caddy Package: cadvisor Package: capslock Package: cert-exporter Package: cert-manager-webhook-pdns Package: certificate-transparency Package: cfssl Package: chartmuseum Package: cilium-cli Package: cloudflared Package: configmap-reload Package: confluent-common-docker Package: conftest Package: cortex Package: cosign Package: crane Package: cri-tools Package: croc Package: crossplane-provider-aws Package: ctop Package: cue Package: dask-gateway Package: delve Package: dex Package: dgraph Package: direnv Package: dive Package: docker-compose Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-credential-gcr Package: dockerize Package: dynamic-localpv-provisioner Package: eksctl Package: extism Package: falcoctl Package: falcosidekick Package: ferretdb Package: flannel Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: flyte Package: forgejo Package: frp Package: fulcio Package: fuse-overlayfs-snapshotter Package: ghaudit Package: git-lfs Package: gitleaks Package: gitness Package: gke-gcloud-auth-plugin Package: glab Package: go Package: go-1.22 Package: go-bindata Package: go-licenses Package: go-md2man Package: gobump Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.20 Package: golang-1.22 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golangci-lint Package: gomplate Package: gops Package: gostatsd Package: gosu Package: govulncheck Package: grafana-agent-operator Package: grafana-operator Package: grpcurl Package: guac Package: harbor-cli Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: hello-world-golang Package: helm Package: helm-3 Package: helm-4 Package: helm-operator Package: helm-push Package: hey Package: http-echo Package: hubble-ui Package: influx Package: ip-masq-agent Package: jitsucom-bulker Package: k3d Package: k8sgpt Package: k9s Package: kaf Package: kafka_exporter Package: kind Package: ko Package: kpt Package: ksops Package: kube-bench Package: kube-state-metrics Package: kubebuilder Package: kubecolor Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dns-node-cache Package: kubernetes-ingress-defaultbackend Package: kubescape Package: kubewatch Package: kustomize Package: kwok Package: kwokctl Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-ui Package: lazygit Package: libnvidia-container Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: logstash-exporter Package: mage Package: mc Package: melange Package: metacontroller Package: metrics-server Package: mkcert Package: mockery Package: mods Package: mongo-tools Package: msft-golang Package: multus-cni Package: nats-server Package: neuvector-scanner Package: newrelic-infra-operator Package: newrelic-nri-statsd Package: newrelic-prometheus-configurator Package: nfs-subdir-external-provisioner Package: nri-prometheus Package: nvidia-container-toolkit Package: oauth2-proxy Package: opa Package: oras Package: osv-scanner Package: overmind Package: paranoia Package: petname Package: php-fpm_exporter Package: policy-controller Package: pombump Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-pushgateway Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-yaml Package: q Package: rabbitmq-default-user-credential-updater Package: rclone Package: redka Package: regclient Package: rekor Package: render-template Package: rootlesskit Package: runc Package: s5cmd Package: scorecard Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: shfmt Package: skaffold Package: skopeo Package: smarter-device-manager Package: snyk-cli Package: sonobuoy Package: sops Package: spark-operator Package: spegel Package: spicedb Package: spqr Package: src Package: src-fingerprint Package: stdlib Package: step Package: step-ca Package: stern Package: tekton-chains Package: terraform-docs Package: tfsec Package: thanos Package: timoni Package: trillian Package: trivy Package: trust-manager Package: vault-k8s Package: vertical-pod-autoscaler Package: volume-modifier-for-k8s Package: vt-cli Package: wait-for-port Package: wave Package: wgcf Package: wire-go Package: wireguard-go Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

Affected products

VendorProductAffectedFixed
Go standard library net 1.22.0-0 – < 1.22.3 1.22.3

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS golang-1.21 1.21.9-1ubuntu0.1 USN-6886-1
Ubuntu 24.04 LTS golang-1.22 1.22.2-2ubuntu0.1 USN-6886-1
Ubuntu 22.04 LTS golang-1.17 +1 No fix yet —
Ubuntu 22.04 LTS golang-1.21 1.21.1-1~ubuntu22.04.3 USN-6886-1
Ubuntu 22.04 LTS golang-1.22 1.22.2-2~22.04.1 USN-6886-1
Ubuntu 20.04 LTS golang-1.13 +3 No fix yet —
Ubuntu 20.04 LTS golang-1.21 1.21.1-1~ubuntu20.04.3 USN-6886-1
Ubuntu 20.04 LTS golang-1.22 1.22.2-2~20.04.1 —
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 containernetworking-plugins 1:1.5.1-2.el9 RHSA-2024:9089
RHEL 9 git-lfs 3.6.1-1.el9 RHSA-2025:7256
RHEL 9 golang +6 1.21.10-1.el9_4 RHBA-2024:3840
RHEL 9 grafana +1 10.2.6-4.el9 RHSA-2024:9115
RHEL 9 oci-seccomp-bpf-hook 1.2.10-2.el9 RHSA-2024:9277
RHEL 9 runc 4:1.1.13-4.el9 RHSA-2024:9200
RHEL 9 skopeo +1 2:1.16.1-1.el9 RHSA-2024:9098
RHEL 9 toolbox +1 0.0.99.5-5.el9 RHSA-2024:9135
RHEL 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 buildah +1 2:1.33.8-4.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 container-selinux 2:2.229.0-2.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 containers-common 2:1-82.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 crit +4 3.18-5.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 crun 1.14.3-2.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 grafana +1 9.2.10-17.el8_10 RHSA-2024:5291
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 podman +6 4:4.9.4-13.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 python-podman +1 4.9.0-2.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 runc 1:1.1.12-4.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 skopeo +1 2:1.14.5-3.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 toolbox +1 0.0.99.5-2.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
RHEL 8 udica 0.2.6-21.module+el8.10.0+22283+6d6d094a RHSA-2024:6969
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Openshift Pipelines 1 openshift-pipelines-client +1 1.16.0-11647.el8 RHEA-2024:7866
Red Hat Openshift Ironic 4 python-jinja2 +1 3.0.1-3.el9.1 RHSA-2024:4616
Red Hat OpenShift 4 openshift-clients +1 4.16.0-202407111006.p0.gfa84651.assembly.stream.el8 RHSA-2024:4616
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.16.0-202407120242.p0.ga53e9de.assembly.stream.el8 RHSA-2024:4616
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.16.0-202407120242.p0.g0e95532.assembly.stream.el8 RHSA-2024:4616
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.16.0-202407120242.p0.g26b43df.assembly.stream.el8 RHSA-2024:4616
Red Hat OpenShift 4 skopeo +1 2:1.14.5-1.rhaos4.16.el8 RHSA-2024:4616
Red Hat Ocp Tools 4 helm +1 3.15.4-60.el9 RHEA-2025:0507
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.4.8-1.1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.5.11-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 python-urllib3 +1 1.26.20-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 python39-urllib3 +1 1.26.20-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.4.8-1.1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 automation-controller +4 4.5.11-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python-django +1 4.2.16-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python-pulpcore +1 3.28.32-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python-urllib3 +1 1.26.20-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python39-django +1 4.2.16-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python39-pulpcore +1 3.28.32-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python39-urllib3 +1 1.26.20-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 receptor +1 1.4.8-1.1.el8ap RHSA-2024:6765

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 containernetworking-plugins 1:1.5.1-2.el9 ALSA-2024:9089
AlmaLinux 9 git-lfs 3.6.1-1.el9 ALSA-2025:7256
AlmaLinux 9 grafana +1 10.2.6-4.el9 ALSA-2024:9115
AlmaLinux 9 oci-seccomp-bpf-hook 1.2.10-2.el9 ALSA-2024:9277
AlmaLinux 9 runc 4:1.1.13-4.el9 ALSA-2024:9200
AlmaLinux 9 skopeo +1 2:1.16.1-1.el9 ALSA-2024:9098
AlmaLinux 9 toolbox +1 0.0.99.5-5.el9 ALSA-2024:9135
AlmaLinux 8 aardvark-dns 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:6969
AlmaLinux 8 buildah +1 2:1.33.8-4.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3845+87b84552 ALSA-2024:6969
AlmaLinux 8 container-selinux 2:2.229.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 containernetworking-plugins 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 crit +2 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:6969
AlmaLinux 8 criu-devel +1 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:6969
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:6969
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:6969
AlmaLinux 8 grafana +1 9.2.10-17.el8_10 ALSA-2024:5291
AlmaLinux 8 libslirp +1 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2024:6969
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:6969
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:6969
AlmaLinux 8 podman +6 4:4.9.4-13.module_el8.10.0+3898+7a25cb1a ALSA-2024:6969
AlmaLinux 8 python3-podman 4.9.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 runc 1:1.1.12-4.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 skopeo +1 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2024:6969
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:6969
AlmaLinux 8 toolbox +1 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:6969
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+3876+e55593a8 ALSA-2024:6969

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 git-lfs 3.6.1-1.el9 RLSA-2025:7256
Rocky Linux 9 oci-seccomp-bpf-hook 1.2.10-2.el9 RLSA-2024:9277
Rocky Linux 9 runc 4:1.1.13-4.el9 RLSA-2024:9200
Rocky Linux 9 toolbox 0.0.99.5-5.el9.rocky.0.2 RLSA-2024:9135
Rocky Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 buildah 2:1.33.8-4.module+el8.10.0+1843+6892ab28 RLSA-2024:6969
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2024:6969
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2024:6969
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 grafana 9.2.10-17.el8_10 RLSA-2024:5291
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 podman 4:4.9.4-13.module+el8.10.0+1871+e6fa1069 RLSA-2024:6969
Rocky Linux 8 python-podman 4.9.0-2.module+el8.10.0+1843+6892ab28 RLSA-2024:6969
Rocky Linux 8 runc 1:1.1.12-4.module+el8.10.0+1843+6892ab28 RLSA-2024:6969
Rocky Linux 8 skopeo 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2024:6969
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:6969
Rocky Linux 8 toolbox 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:6969
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:6969

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
SLES 15 SP5 go1.22 1.22.3-150000.1.15.1 SUSE-SU-2024:1587-1
SLES 15 SP5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1
SLES 12 SP5 go1.22 1.22.3-1.9.1 SUSE-SU-2024:1573-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed forgejo 7.0.3-1.1 openSUSE-SU-2024:13990-1
openSUSE Tumbleweed go1.22 1.22.3-1.1 openSUSE-SU-2024:13936-1
openSUSE Tumbleweed traefik 3.0.1-1.1 openSUSE-SU-2024:14000-1
openSUSE Tumbleweed traefik2 2.11.5-1.1 openSUSE-SU-2024:14076-1
openSUSE Leap 15.6 go1.22 1.22.3-150000.1.15.1 SUSE-SU-2024:1587-1
openSUSE Leap 15.6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
openSUSE Leap 15.5 go1.22 1.22.3-150000.1.15.1 SUSE-SU-2024:1587-1
openSUSE Leap 15.5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 forgejo 7.0.3-r0 —
Alpine v3.24 go 1.22.3-r0 —
Alpine v3.23 forgejo 7.0.3-r0 —
Alpine v3.23 go 1.22.3-r0 —
Alpine v3.22 forgejo 7.0.3-r0 —
Alpine v3.22 go 1.22.3-r0 —
Alpine v3.21 forgejo 7.0.3-r0 —
Alpine v3.21 go 1.22.3-r0 —
Alpine v3.20 go 1.22.3-r0 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 go 1.21.10-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang 1.22.3-1 —
Azure Linux 2 (CBL-Mariner) golang +1 1.22.3 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 containernetworking-plugins 1:1.5.1-2.el9 ELSA-2024-9089
Oracle Linux 9 git-lfs 3.6.1-1.el9 ELSA-2025-7256
Oracle Linux 9 grafana +1 10.2.6-4.el9 ELSA-2024-9115
Oracle Linux 9 oci-seccomp-bpf-hook 1.2.10-2.el9 ELSA-2024-9277
Oracle Linux 9 runc 4:1.1.13-4.el9 ELSA-2024-9200
Oracle Linux 9 skopeo +1 2:1.16.1-1.el9 ELSA-2024-9098
Oracle Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 buildah +1 2:1.33.8-4.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 grafana +1 9.2.10-17.el8_10 ELSA-2024-5291
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 podman +6 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 python3-podman 4.9.0-2.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 runc 1:1.1.12-4.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 skopeo +1 2:1.14.5-3.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90412+9b361f34 ELSA-2024-6969
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90412+9b361f34 ELSA-2024-6969

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r12 —
Wolfi rolling atlantis 0.27.3-r1 —
Wolfi rolling aws-efs-csi-driver 2.0.2-r1 —
Wolfi rolling bank-vaults 1.20.4-r13 —
Wolfi rolling bom 0.6.0-r5 —
Wolfi rolling boring-registry 0.14.0-r1 —
Wolfi rolling buildkitd 0.13.2-r1 —
Wolfi rolling caddy 2.7.6-r9 —
Wolfi rolling cadvisor 0.49.1-r7 —
Wolfi rolling capslock 0.2.2-r2 —
Wolfi rolling cert-exporter +1 2.12.0-r5 —
Wolfi rolling cert-manager-webhook-pdns 2.5.1-r3 —
Wolfi rolling certificate-transparency 1.1.8-r3 —
Wolfi rolling cfssl 1.6.5-r4 —
Wolfi rolling chartmuseum 0.16.1-r10 —
Wolfi rolling cilium-cli 0.16.7-r1 —
Wolfi rolling cloudflared 2024.1.0-r10 —
Wolfi rolling configmap-reload 0.13.0-r1 —
Wolfi rolling confluent-common-docker 7.6.0-r5 —
Wolfi rolling conftest 0.52.0-r1 —
Wolfi rolling cortex 1.17.0-r1 —
Wolfi rolling cosign 2.2.4-r4 —
Wolfi rolling crane 0.19.1-r5 —
Wolfi rolling cri-tools 1.30.0-r2 —
Wolfi rolling croc 9.6.15-r1 —
Wolfi rolling crossplane-provider-aws 1.4.0-r1 —
Wolfi rolling ctop 0.7.7-r14 —
Wolfi rolling cue 0.8.2-r1 —
Wolfi rolling dask-gateway 2024.1.0-r4 —
Wolfi rolling delve 1.22.1-r4 —
Wolfi rolling dex 2.39.1-r2 —
Wolfi rolling dgraph 23.1.1-r1 —
Wolfi rolling direnv 2.34.0-r3 —
Wolfi rolling dive 0.12.0-r5 —
Wolfi rolling docker-compose 2.27.0-r1 —
Wolfi rolling docker-credential-acr-env 0.7.0-r12 —
Wolfi rolling docker-credential-ecr-login 0.7.1-r11 —
Wolfi rolling docker-credential-gcr 2.1.22-r5 —
Wolfi rolling dockerize 0.7.0-r8 —
Wolfi rolling dynamic-localpv-provisioner 4.0.0-r3 —
Wolfi rolling eksctl 0.176.0-r1 —
Wolfi rolling extism 1.4.0-r0 —
Wolfi rolling falcoctl 0.7.3-r9 —
Wolfi rolling falcosidekick 2.28.0-r6 —
Wolfi rolling ferretdb 1.21.0-r3 —
Wolfi rolling flannel 0.25.1-r2 —
Wolfi rolling flux-image-reflector-controller 0.32.0-r1 —
Wolfi rolling flux-source-controller +2 1.3.0-r1 —
Wolfi rolling flyte 1.12.0-r1 —
Wolfi rolling frp 0.58.0-r1 —
Wolfi rolling fulcio 1.4.5-r2 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.8-r9 —
Wolfi rolling ghaudit 0.4.0-r3 —
Wolfi rolling git-lfs 3.5.1-r4 —
Wolfi rolling gitleaks 8.18.2-r3 —
Wolfi rolling gitness 3.0.0_beta6-r3 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r10 —
Wolfi rolling glab 1.40.0-r1 —
Wolfi rolling go-1.22 1.22.3-r0 —
Wolfi rolling go-bindata 3.1.3-r19 —
Wolfi rolling go-licenses 1.6.0-r13 —
Wolfi rolling go-md2man 2.0.4-r3 —
Wolfi rolling gobump 0.7.7-r2 —
Wolfi rolling golangci-lint 1.58.1-r0 —
Wolfi rolling gomplate 3.11.7-r5 —
Wolfi rolling gops 0.3.28-r10 —
Wolfi rolling gostatsd 28.3.0-r2 —
Wolfi rolling gosu 1.17-r5 —
Wolfi rolling govulncheck 1.0.2-r4 —
Wolfi rolling grafana-agent-operator 0.40.4-r2 —
Wolfi rolling grafana-operator 5.9.0-r1 —
Wolfi rolling grpcurl 1.9.1-r3 —
Wolfi rolling guac 0.6.0-r1 —
Wolfi rolling harbor-cli 0.0.1-r2 —
Wolfi rolling harbor-registry 3.0.0_alpha1-r3 —
Wolfi rolling harbor-scanner-trivy 0.31.1-r1 —
Wolfi rolling hcloud 1.43.1-r1 —
Wolfi rolling hello-world-golang 1.3-r3 —
Wolfi rolling helm 3.14.4-r3 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-operator 1.34.1-r5 —
Wolfi rolling helm-push 0.10.4-r10 —
Wolfi rolling hey 0.1.4-r13 —
Wolfi rolling hubble-ui 0.13.0-r9 —
Wolfi rolling influx 2.7.5-r1 —
Wolfi rolling ip-masq-agent 2.9.3-r11 —
Wolfi rolling k3d 5.6.3-r2 —
Wolfi rolling k8sgpt 0.3.30-r1 —
Wolfi rolling k9s 0.32.4-r4 —
Wolfi rolling kaf 0.2.8-r3 —
Wolfi rolling kafka_exporter 1.7.0-r3 —
Wolfi rolling kind 0.22.0-r4 —
Wolfi rolling ko 0.15.2-r9 —
Wolfi rolling kpt 1.0.0_beta49-r6 —
Wolfi rolling ksops 4.3.1-r1 —
Wolfi rolling kube-bench 0.7.3-r2 —
Wolfi rolling kube-state-metrics 2.12.0-r3 —
Wolfi rolling kubebuilder 3.14.2-r1 —
Wolfi rolling kubecolor 0.3.2-r1 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.13.0-r4 —
Wolfi rolling kubernetes-csi-external-provisioner 4.0.1-r2 —
Wolfi rolling kubernetes-dashboard 2.7.0-r18 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.0.9-r16 —
Wolfi rolling kubernetes-dns-node-cache 1.23.0-r6 —
Wolfi rolling kubernetes-ingress-defaultbackend 1.29.1-r0 —
Wolfi rolling kubescape 3.0.10-r1 —
Wolfi rolling kubewatch +1 2.6.0-r1 —
Wolfi rolling kustomize 5.4.1-r4 —
Wolfi rolling kwok +1 0.5.2-r2 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin 1.6.3-r5 —
Wolfi rolling kyverno-policy-reporter-ui 1.9.2-r6 —
Wolfi rolling lazygit 0.42.0-r0 —
Wolfi rolling libnvidia-container +1 1.15.0-r1 —
Wolfi rolling litefs 0.5.11-r5 —
Wolfi rolling litestream 0.3.13-r2 —
Wolfi rolling local-path-provisioner 0.0.27-r0 —
Wolfi rolling local-static-provisioner 2.7.0-r2 —
Wolfi rolling logstash-exporter 1.6.4-r1 —
Wolfi rolling mage 1.15.0-r7 —
Wolfi rolling mc 0.20231220.071422-r8 —
Wolfi rolling melange 0.6.11-r5 —
Wolfi rolling metacontroller 4.11.12-r0 —
Wolfi rolling metrics-server 0.7.1-r3 —
Wolfi rolling mkcert 1.4.4-r2 —
Wolfi rolling mockery 2.43.0-r1 —
Wolfi rolling mods 1.3.1-r1 —
Wolfi rolling mongo-tools 100.9.4-r4 —
Wolfi rolling multus-cni 4.0.2-r3 —
Wolfi rolling nats-server 2.10.14-r1 —
Wolfi rolling neuvector-scanner 0_git20240417-r2 —
Wolfi rolling newrelic-infra-operator 0.18.0-r5 —
Wolfi rolling newrelic-nri-statsd 2.9.1-r3 —
Wolfi rolling newrelic-prometheus-configurator 1.16.0-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r7 —
Wolfi rolling nri-prometheus 2.21.1-r1 —
Wolfi rolling oauth2-proxy 7.6.0-r7 —
Wolfi rolling opa 0.64.1-r1 —
Wolfi rolling oras 1.1.0-r7 —
Wolfi rolling osv-scanner 1.7.3-r0 —
Wolfi rolling overmind 2.5.1-r1 —
Wolfi rolling paranoia 0.2.1-r14 —
Wolfi rolling petname 2.11-r7 —
Wolfi rolling php-fpm_exporter 2.2.0-r4 —
Wolfi rolling policy-controller 0.9.0-r2 —
Wolfi rolling pombump 0.0.12-r2 —
Wolfi rolling prometheus-adapter 0.11.2-r8 —
Wolfi rolling prometheus-alertmanager 0.27.0-r5 —
Wolfi rolling prometheus-pushgateway 1.8.0-r2 —
Wolfi rolling pulumi-language-dotnet 3.63.1-r1 —
Wolfi rolling pulumi-language-yaml 1.7.0-r1 —
Wolfi rolling q 0.19.2-r5 —
Wolfi rolling rabbitmq-default-user-credential-updater 1.0.4-r1 —
Wolfi rolling rclone 1.66.0-r3 —
Wolfi rolling redka 0.4.0-r1 —
Wolfi rolling regclient 0.6.0-r4 —
Wolfi rolling rekor 1.3.6-r3 —
Wolfi rolling render-template 1.0.6-r4 —
Wolfi rolling rootlesskit 2.1.0-r1 —
Wolfi rolling runc 1.1.12-r6 —
Wolfi rolling s5cmd 2.2.2-r3 —
Wolfi rolling scorecard 4.13.1-r8 —
Wolfi rolling secrets-store-csi-driver 1.4.3-r1 —
Wolfi rolling secrets-store-csi-driver-provider-aws 0.3.8-r3 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.5.2-r1 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.5.0-r5 —
Wolfi rolling shfmt 3.8.0-r3 —
Wolfi rolling skaffold 2.11.1-r3 —
Wolfi rolling skopeo +1 1.15.0-r4 —
Wolfi rolling smarter-device-manager 1.20.11-r7 —
Wolfi rolling snyk-cli 1.1291.0-r1 —
Wolfi rolling sonobuoy 0.57.1-r6 —
Wolfi rolling sops 3.8.1-r7 —
Wolfi rolling spark-operator 1.2.15-r0 —
Wolfi rolling spegel 0.0.22-r1 —
Wolfi rolling spicedb 1.32.0-r1 —
Wolfi rolling spqr 1.3.0-r3 —
Wolfi rolling src 5.3.0-r5 —
Wolfi rolling src-fingerprint 0.19.0-r13 —
Wolfi rolling step +1 0.26.1-r1 —
Wolfi rolling stern 1.29.0-r1 —
Wolfi rolling tekton-chains 0.20.1-r5 —
Wolfi rolling terraform-docs 0.17.0-r5 —
Wolfi rolling tfsec 1.28.6-r1 —
Wolfi rolling thanos 0.35.0-r1 —
Wolfi rolling timoni 0.21.0-r1 —
Wolfi rolling trillian 1.6.0-r5 —
Wolfi rolling trivy 0.51.1-r1 —
Wolfi rolling trust-manager 0.9.2-r3 —
Wolfi rolling vault-k8s 1.4.1-r1 —
Wolfi rolling vertical-pod-autoscaler 1.1.1-r2 —
Wolfi rolling volume-modifier-for-k8s 0.2.1-r5 —
Wolfi rolling vt-cli +1 1.0.0-r6 —
Wolfi rolling wait-for-port 1.0.7-r4 —
Wolfi rolling wave 0.8.0-r1 —
Wolfi rolling wgcf 2.2.22-r1 —
Wolfi rolling wire-go 0.6.0-r3 —
Wolfi rolling wireguard-go 0.0.20230223-r11 —
Wolfi rolling zot 2.0.4-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib >= 1.22.0-0, < 1.22.3 1.22.3 GO-2024-2824

Advisories 48

References