Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-24789 BIT-golang-2024-24789EUVD-2024-22166GHSA-236w-p7wf-5ph8GO-2024-2888

Mishandling of corrupt central directory record in archive/zip

Published Jun 5, 2024 · Updated Feb 13, 2025 · Assigned by Go

Vendor: Go standard library Product: archive/zip Package: aactl Package: actions-runner-controller Package: addon-resizer Package: age Package: amass Package: argo-workflows Package: atlantis Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-flb-kinesis Package: aws-load-balancer-controller Package: bank-vaults Package: bazelisk Package: bom Package: boring-registry Package: buf Package: buildah Package: buildkitd Package: caddy Package: cadvisor Package: capslock Package: cass-operator Package: cert-exporter Package: cert-manager-webhook-pdns Package: certificate-transparency Package: cfssl Package: chartmuseum Package: chezmoi Package: cilium-cli Package: cloudflared Package: cluster-proportional-autoscaler Package: cni-plugins Package: configmap-reload Package: confluent-common-docker Package: conftest Package: controller-gen Package: cortex Package: cosign Package: crane Package: cri-tools Package: croc Package: crossplane-provider-aws Package: ctop Package: dagdotdev Package: dagger Package: dask-gateway Package: dataplaneapi Package: delve Package: dex Package: dgraph Package: direnv Package: dive Package: docker-compose Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-credential-gcr Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: envoy-ratelimit Package: extism Package: falcoctl Package: falcosidekick Package: ferretdb Package: flannel Package: flannel-cni-plugin Package: fluent-bit-plugin-loki Package: fluent-operator Package: flux Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: flyte Package: forgejo Package: fq Package: frp Package: fulcio Package: fuse-overlayfs-snapshotter Package: gcsfuse Package: gh Package: ghaudit Package: git-lfs Package: gitleaks Package: gitness Package: gitsign Package: gke-gcloud-auth-plugin Package: glab Package: go Package: go-1.20 Package: go-1.21 Package: go-1.22 Package: go-bindata Package: go-licenses Package: go-md2man Package: gobump Package: gobuster Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golangci-lint Package: gomplate Package: gops Package: gostatsd Package: gosu Package: govulncheck Package: gpu-feature-discovery Package: grafana-agent-operator Package: grafana-mimir Package: grafana-operator Package: grpc-health-probe Package: grpcurl Package: grype Package: harbor-cli Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: hello-world-golang Package: helm Package: helm-3 Package: helm-4 Package: helm-docs Package: helm-operator Package: helm-push Package: hey Package: hivemind Package: http-echo Package: hubble-ui Package: influx Package: ip-masq-agent Package: jitsucom-bulker Package: k3d Package: k3s Package: k8sgpt Package: k8ssandra-operator Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kaniko Package: kargo Package: kind Package: ko Package: kots Package: kpt Package: ksops Package: kube-bench Package: kube-fluentd-operator Package: kube-logging-operator Package: kube-state-metrics Package: kube-vip Package: kubebuilder Package: kubecolor Package: kubeflow-katib Package: kuberay-operator Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-ingress-defaultbackend Package: kubescape Package: kubevela Package: kubewatch Package: kustomize Package: kwok Package: kyverno-policy-reporter Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-ui Package: lazygit Package: libnvidia-container Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: logstash-exporter Package: mage Package: mc Package: memcached-exporter Package: metacontroller Package: metallb Package: metrics-server Package: minify Package: mkcert Package: mockery Package: mods Package: mongo-tools Package: msft-golang Package: nats Package: nats-server Package: nerdctl Package: neuvector-dbgen Package: neuvector-scanner Package: neuvector-sigstore-interface Package: newrelic-fluent-bit-output-compat Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-nri-kube-events Package: newrelic-nri-statsd Package: newrelic-prometheus-configurator Package: nfs-subdir-external-provisioner Package: nodetaint Package: nri-apache Package: nri-cassandra Package: nri-consul Package: nri-couchbase Package: nri-discovery-kubernetes Package: nri-elasticsearch Package: nri-f5 Package: nri-haproxy Package: nri-jmx Package: nri-kafka Package: nri-kubernetes Package: nri-memcached Package: nri-mongodb Package: nri-mssql Package: nri-mysql Package: nri-nagios Package: nri-nginx Package: nri-postgresql Package: nri-prometheus Package: nri-rabbitmq Package: nri-redis Package: nsc Package: nvidia-container-toolkit Package: oauth2-proxy Package: octo-sts Package: ollama Package: opa Package: oras Package: osv-scanner Package: overmind Package: paranoia Package: petname Package: php-fpm_exporter Package: pluto Package: policy-controller Package: pombump Package: postgres-operator Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-operator Package: prometheus-pushgateway Package: protoc-gen-go Package: protoc-gen-go-grpc Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-java Package: q Package: rabbitmq-cluster-operator Package: rabbitmq-default-user-credential-updater Package: rabbitmq-messaging-topology-operator Package: rclone Package: redka Package: regclient Package: rekor Package: render-template Package: restic Package: rook Package: rootlesskit Package: runc Package: s5cmd Package: sbom-scorecard Package: sbomqs Package: scorecard Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: shfmt Package: sigstore-scaffolding Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: snyk-cli Package: sonobuoy Package: sops Package: speedtest-go Package: spegel Package: spicedb Package: spire-server Package: spqr Package: src Package: src-fingerprint Package: stdlib Package: step Package: step-ca Package: step-issuer Package: stern Package: supercronic Package: swagger Package: syft Package: tailscale Package: task Package: tekton-chains Package: temporal Package: temporal-ui-server Package: terraform Package: terraform-docs Package: terraform-provider-aws Package: terraform-provider-azurerm Package: terraform-provider-google Package: terragrunt Package: tflint Package: tfsec Package: thanos Package: thanos-operator Package: timestamp-authority Package: timoni Package: tkn Package: trillian Package: trivy Package: trust-manager Package: up Package: vault-k8s Package: vcluster Package: velero Package: velero-plugin-for-aws Package: velero-plugin-for-csi Package: vexctl Package: volume-modifier-for-k8s Package: vt-cli Package: wait-for-port Package: wave Package: wazero Package: weaviate Package: wgcf Package: wire-go Package: wireguard-go Package: wolfictl Package: xcaddy Package: yam Package: yq Package: ytt Package: zarf Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

Affected products

VendorProductAffectedFixed
Go standard library archive/zip < 1.21.11, 1.22.0-0 – < 1.22.4 1.21.11

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 12 golang-1.19 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS golang-1.21 1.21.9-1ubuntu0.1 USN-6886-1
Ubuntu 24.04 LTS golang-1.22 1.22.2-2ubuntu0.1 USN-6886-1
Ubuntu 22.04 LTS golang-1.17 1.17.13-3ubuntu1.3 USN-7111-1
Ubuntu 22.04 LTS golang-1.18 1.18.1-1ubuntu1.2 USN-7109-1
Ubuntu 22.04 LTS golang-1.20 No fix yet —
Ubuntu 22.04 LTS golang-1.21 1.21.1-1~ubuntu22.04.3 USN-6886-1
Ubuntu 22.04 LTS golang-1.22 1.22.2-2~22.04.1 USN-6886-1
Ubuntu 20.04 LTS golang-1.13 +2 No fix yet —
Ubuntu 20.04 LTS golang-1.18 1.18.1-1ubuntu1~20.04.3 USN-7109-1
Ubuntu 20.04 LTS golang-1.21 1.21.1-1~ubuntu20.04.3 USN-6886-1
Ubuntu 20.04 LTS golang-1.22 1.22.2-2~20.04.1 —
Ubuntu 18.04 LTS golang-1.10 No fix yet —
Ubuntu 16.04 LTS golang-1.10 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +1 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.18 1.18.1-1ubuntu1~18.04.4+esm1 USN-7109-1
Ubuntu Pro 16.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.18 1.18.1-1ubuntu1~16.04.6+esm1 USN-7109-1
ReleasePackageFixed inAdvisory
RHEL 9 golang +6 1.21.11-1.el9_4 RHSA-2024:4212
RHEL 9 grafana +1 10.2.6-4.el9 RHSA-2024:9115
RHEL 9 podman +4 2:5.2.2-1.el9 RHSA-2024:9102
RHEL 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 buildah +1 2:1.33.8-4.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 container-selinux 2:2.229.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 containers-common 2:1-82.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 crit +4 3.18-5.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 crun 1.14.3-2.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 delve 1.21.2-3.module+el8.10.0+21244+5b2d9000 RHSA-2024:4237
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 golang +6 1.21.11-1.module+el8.10.0+21986+2112108a RHSA-2024:4237
RHEL 8 grafana +1 9.2.10-17.el8_10 RHSA-2024:5291
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 podman +6 4:4.9.4-12.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 python-podman +1 4.9.0-2.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 runc 1:1.1.12-4.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 skopeo +1 2:1.14.5-3.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 toolbox +1 0.0.99.5-2.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
RHEL 8 udica 0.2.6-21.module+el8.10.0+22202+761b9a65 RHSA-2024:5258
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Serverless 1 openshift-serverless-clients 1.12.0-10.el8 RHSA-2024:4867
Red Hat OpenShift 4 openshift +1 4.17.0-202409121706.p0.gd3adea4.assembly.stream.el8 RHSA-2024:3722
Red Hat OpenShift 4 openshift-clients +1 4.17.0-202409111134.p0.gbc58b3a.assembly.stream.el8 RHSA-2024:3722
Red Hat OpenShift 4 podman +4 4:5.2.0-2.rhaos4.17.el9 RHSA-2024:3722
Red Hat OpenShift 4 podman-gvproxy +1 4:5.2.0-3.rhaos4.17.el8 RHSA-2024:3722
Red Hat OpenShift 4 skopeo +1 2:1.16.0-2.rhaos4.17.el8 RHSA-2024:3722
Red Hat Ocp Tools 4 helm +1 3.15.4-60.el9 RHEA-2025:0507

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 golang +6 1.21.11-1.el9_4 ALSA-2024:4212
AlmaLinux 9 grafana +1 10.2.6-4.el9 ALSA-2024:9115
AlmaLinux 8 aardvark-dns 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:5258
AlmaLinux 8 buildah +1 2:1.33.8-4.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:5258
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3845+87b84552 ALSA-2024:5258
AlmaLinux 8 container-selinux 2:2.229.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 containernetworking-plugins 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 crit +2 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:5258
AlmaLinux 8 criu-devel 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2024:5258
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:5258
AlmaLinux 8 delve 1.21.2-3.module_el8.10.0+3760+4dd778f9 ALSA-2024:4237
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:5258
AlmaLinux 8 golang +6 1.21.11-1.module_el8.10.0+3863+bb82df69 ALSA-2024:4237
AlmaLinux 8 grafana +1 9.2.10-17.el8_10 ALSA-2024:5291
AlmaLinux 8 libslirp +1 4.4.0-2.module_el8.10.0+3858+6ad51f9f ALSA-2024:5258
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3858+6ad51f9f ALSA-2024:5258
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:5258
AlmaLinux 8 podman +6 4:4.9.4-12.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 python3-criu 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 python3-podman 4.9.0-2.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 runc 1:1.1.12-4.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 skopeo +1 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2024:5258
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:5258
AlmaLinux 8 toolbox +1 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:5258
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+3858+6ad51f9f ALSA-2024:5258

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 golang 1.21.11-1.el9_4 RLSA-2024:4212
Rocky Linux 9 podman 4:5.2.2-13.el9_5 RLSA-2024:9102
Rocky Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 buildah 2:1.33.8-4.module+el8.10.0+1843+6892ab28 RLSA-2024:5258
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2024:5258
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2024:5258
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 delve 1.21.2-3.module+el8.10.0+1814+f68f8a63 RLSA-2024:4237
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 golang +1 1.21.11-1.module+el8.10.0+1831+fc70fba6 RLSA-2024:4237
Rocky Linux 8 grafana 9.2.10-17.el8_10 RLSA-2024:5291
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 podman 4:4.9.4-12.module+el8.10.0+1843+6892ab28 RLSA-2024:5258
Rocky Linux 8 python-podman 4.9.0-2.module+el8.10.0+1843+6892ab28 RLSA-2024:5258
Rocky Linux 8 runc 1:1.1.12-4.module+el8.10.0+1843+6892ab28 RLSA-2024:5258
Rocky Linux 8 skopeo 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2024:5258
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
Rocky Linux 8 toolbox 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:5258
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2024:5258
ReleasePackageFixed inAdvisory
SLES 15 SP6 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP6 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
SLES 15 SP6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
SLES 15 SP6 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
SLES 15 SP6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
SLES 15 SP5 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP5 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
SLES 15 SP5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 15 SP5 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
SLES 15 SP5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1
SLES 15 SP4 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 15 SP3 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP2 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 go1.21 1.21.11-1.36.1 SUSE-SU-2024:1936-1
SLES 12 SP5 go1.22 1.22.4-1.12.1 SUSE-SU-2024:1935-1
SLES for SAP 15 SP4 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES for SAP 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES for SAP 15 SP3 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES for SAP 15 SP2 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLE HPC 15 SP4 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLE HPC 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLE HPC 15 SP3 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLE HPC 15 SP2 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SUSE Enterprise Storage 7.1 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed forgejo 7.0.4-1.1 openSUSE-SU-2024:14050-1
openSUSE Tumbleweed go1.21 1.21.11-1.1 openSUSE-SU-2024:14023-1
openSUSE Tumbleweed go1.22 1.22.4-1.1 openSUSE-SU-2024:14020-1
openSUSE Leap 15.6 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
openSUSE Leap 15.6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
openSUSE Leap 15.6 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
openSUSE Leap 15.6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
openSUSE Leap 15.5 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
openSUSE Leap 15.5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
openSUSE Leap 15.5 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
openSUSE Leap 15.5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1
ReleasePackageFixed inAdvisory
Alpine v3.24 forgejo 7.0.4-r0 —
Alpine v3.24 go 1.22.4-r0 —
Alpine v3.23 forgejo 7.0.4-r0 —
Alpine v3.23 go 1.22.4-r0 —
Alpine v3.22 forgejo 7.0.4-r0 —
Alpine v3.22 go 1.22.4-r0 —
Alpine v3.21 forgejo 7.0.4-r0 —
Alpine v3.21 go 1.22.4-r0 —
Alpine v3.20 go 1.22.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +6 1.22.4-1.amzn2023.0.1 ALAS2023-2024-646
Amazon Linux 2 golang +6 1.22.4-1.amzn2.0.1 ALAS2-2024-2576

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang 1.22.3-1 —
Azure Linux 2 (CBL-Mariner) golang 1.18.8-8 —
Azure Linux 2 (CBL-Mariner) msft-golang 1.22.4-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 golang +6 1.21.11-1.el9_4 ELSA-2024-4212
Oracle Linux 9 grafana +1 10.2.6-4.el9 ELSA-2024-9115
Oracle Linux 9 podman +4 4:5.2.2-1.0.2.el9 ELSA-2024-9102
Oracle Linux 8 aardvark-dns 2:1.10.0-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 buildah +1 2:1.33.8-4.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 delve 1.21.2-3.0.1.module+el8.10.0+90307+cdf2b281 ELSA-2024-4237
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 golang +6 1.21.11-1.module+el8.10.0+90357+32bea22c ELSA-2024-4237
Oracle Linux 8 grafana +1 9.2.10-17.el8_10 ELSA-2024-5291
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 podman +6 4:4.9.4-12.0.2.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 python3-podman 4.9.0-2.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 runc 1:1.1.12-4.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 skopeo +1 2:1.14.5-3.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90384+a78ffc57 ELSA-2024-5258

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r13 —
Wolfi rolling actions-runner-controller 0.9.2-r1 —
Wolfi rolling addon-resizer 1.8.21-r1 —
Wolfi rolling age 1.1.1-r1 —
Wolfi rolling amass 4.2.0-r11 —
Wolfi rolling argo-workflows 3.6.5-r2 —
Wolfi rolling atlantis 0.28.1-r1 —
Wolfi rolling aws-flb-cloudwatch 1.9.4-r11 —
Wolfi rolling aws-flb-firehose 1.7.2-r11 —
Wolfi rolling aws-flb-kinesis 1.10.2-r12 —
Wolfi rolling aws-load-balancer-controller 2.8.1-r1 —
Wolfi rolling bank-vaults 1.20.4-r14 —
Wolfi rolling bazelisk 1.20.0-r1 —
Wolfi rolling bom 0.6.0-r6 —
Wolfi rolling boring-registry 0.14.0-r2 —
Wolfi rolling buf 1.32.2-r1 —
Wolfi rolling buildah 1.36.0-r1 —
Wolfi rolling buildkitd 0.13.2-r2 —
Wolfi rolling caddy 2.8.4-r1 —
Wolfi rolling cadvisor 0.49.1-r8 —
Wolfi rolling capslock 0.2.2-r3 —
Wolfi rolling cass-operator 1.21.0-r1 —
Wolfi rolling cert-exporter 2.12.0-r6 —
Wolfi rolling cert-manager-webhook-pdns 2.5.1-r4 —
Wolfi rolling certificate-transparency 1.2.1-r1 —
Wolfi rolling cfssl 1.6.5-r5 —
Wolfi rolling chartmuseum 0.16.2-r1 —
Wolfi rolling chezmoi 2.48.2-r1 —
Wolfi rolling cilium-cli 0.16.9-r1 —
Wolfi rolling cloudflared 2024.1.0-r11 —
Wolfi rolling cluster-proportional-autoscaler 1.8.11-r7 —
Wolfi rolling configmap-reload 0.13.0-r2 —
Wolfi rolling confluent-common-docker 7.6.0-r6 —
Wolfi rolling conftest 0.52.0-r3 —
Wolfi rolling controller-gen 0.15.0-r5 —
Wolfi rolling cortex 1.17.1-r1 —
Wolfi rolling cosign 2.2.4-r5 —
Wolfi rolling crane 0.19.1-r6 —
Wolfi rolling cri-tools 1.30.0-r3 —
Wolfi rolling croc 10.0.7-r1 —
Wolfi rolling crossplane-provider-aws 1.4.0-r3 —
Wolfi rolling ctop 0.7.7-r15 —
Wolfi rolling dagdotdev 0.0.3-r1 —
Wolfi rolling dagger 0.11.6-r1 —
Wolfi rolling dask-gateway 2024.1.0-r5 —
Wolfi rolling dataplaneapi 2.9.3-r1 —
Wolfi rolling delve 1.22.1-r5 —
Wolfi rolling dex 2.40.0-r1 —
Wolfi rolling dgraph 23.1.1-r2 —
Wolfi rolling direnv 2.34.0-r4 —
Wolfi rolling dive 0.12.0-r7 —
Wolfi rolling docker-compose 2.27.1-r1 —
Wolfi rolling docker-credential-acr-env 0.7.0-r13 —
Wolfi rolling docker-credential-gcr 2.1.22-r6 —
Wolfi rolling dockerize 0.7.0-r9 —
Wolfi rolling doppler-kubernetes-operator 1.5.1-r2 —
Wolfi rolling dynamic-localpv-provisioner 4.0.0-r4 —
Wolfi rolling envoy-ratelimit 0.0_git20240220-r11 —
Wolfi rolling falcoctl +1 0.8.0-r1 —
Wolfi rolling falcosidekick 2.28.0-r7 —
Wolfi rolling ferretdb 1.21.0-r4 —
Wolfi rolling flannel 0.25.3-r1 —
Wolfi rolling flannel-cni-plugin 1.4.1-r4 —
Wolfi rolling fluent-bit-plugin-loki 3.0.0-r2 —
Wolfi rolling fluent-operator 2.8.0-r1 —
Wolfi rolling flux 2.3.0-r1 —
Wolfi rolling flux-helm-controller 1.0.1-r2 —
Wolfi rolling flux-image-automation-controller 0.38.0-r3 —
Wolfi rolling flux-image-reflector-controller 0.32.0-r2 —
Wolfi rolling flux-kustomize-controller +1 1.3.0-r3 —
Wolfi rolling flux-source-controller 1.3.0-r2 —
Wolfi rolling flyte 1.12.0-r2 —
Wolfi rolling fq 0.11.0-r5 —
Wolfi rolling frp 0.58.1-r1 —
Wolfi rolling fulcio 1.4.5-r3 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.8-r10 —
Wolfi rolling gcsfuse 1.4.2-r8 —
Wolfi rolling gh 2.50.0-r1 —
Wolfi rolling ghaudit 0.4.0-r4 —
Wolfi rolling git-lfs 3.5.1-r6 —
Wolfi rolling gitleaks 8.18.3-r1 —
Wolfi rolling gitness 3.0.0_beta6-r4 —
Wolfi rolling gitsign 0.10.2-r2 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r11 —
Wolfi rolling glab 1.41.0-r1 —
Wolfi rolling go-1.20 No fix yet —
Wolfi rolling go-1.21 1.21.11-r0 —
Wolfi rolling go-1.22 1.22.4-r0 —
Wolfi rolling go-bindata 3.1.3-r21 —
Wolfi rolling go-licenses 1.6.0-r14 —
Wolfi rolling go-md2man 2.0.4-r4 —
Wolfi rolling gobump 0.7.7-r3 —
Wolfi rolling gobuster 3.6.0-r12 —
Wolfi rolling golangci-lint 1.59.0-r1 —
Wolfi rolling gomplate 3.11.8-r1 —
Wolfi rolling gops 0.3.28-r11 —
Wolfi rolling gostatsd 28.3.0-r4 —
Wolfi rolling gosu 1.17-r6 —
Wolfi rolling govulncheck 1.0.2-r5 —
Wolfi rolling gpu-feature-discovery 0.8.2-r2 —
Wolfi rolling grafana-agent-operator 0.41.0-r1 —
Wolfi rolling grafana-operator 5.9.2-r1 —
Wolfi rolling grpc-health-probe 0.4.26-r3 —
Wolfi rolling grpcurl 1.9.1-r4 —
Wolfi rolling grype 0.78.0-r1 —
Wolfi rolling harbor-cli 0.0.1-r3 —
Wolfi rolling harbor-registry 3.0.0_alpha1-r4 —
Wolfi rolling harbor-scanner-trivy 0.31.2-r2 —
Wolfi rolling hcloud 1.43.1-r2 —
Wolfi rolling hello-world-golang 1.3-r4 —
Wolfi rolling helm 3.15.1-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-docs 1.13.1-r1 —
Wolfi rolling helm-operator 1.34.2-r1 —
Wolfi rolling helm-push 0.10.4-r11 —
Wolfi rolling hey 0.1.4-r14 —
Wolfi rolling hivemind 1.1.0-r1 —
Wolfi rolling hubble-ui 0.13.1-r1 —
Wolfi rolling influx 2.7.5-r2 —
Wolfi rolling ip-masq-agent 2.9.3-r12 —
Wolfi rolling jitsucom-bulker 2.7.0-r1 —
Wolfi rolling k3d 5.6.3-r3 —
Wolfi rolling k3s 1.30.1-r1 —
Wolfi rolling k8sgpt 0.3.32-r2 —
Wolfi rolling k8ssandra-operator 1.16.0-r3 —
Wolfi rolling k9s 0.32.4-r5 —
Wolfi rolling kaf 0.2.8-r4 —
Wolfi rolling kafka-proxy 0.3.10-r1 —
Wolfi rolling kafka_exporter 1.7.0-r4 —
Wolfi rolling kaniko 1.23.0-r1 —
Wolfi rolling kargo 0.6.0-r3 —
Wolfi rolling kind 0.23.0-r1 —
Wolfi rolling ko 0.15.4-r1 —
Wolfi rolling kots 1.109.9-r1 —
Wolfi rolling kpt 1.0.0_beta49-r7 —
Wolfi rolling ksops 4.3.1-r3 —
Wolfi rolling kube-bench 0.7.3-r3 —
Wolfi rolling kube-fluentd-operator 1.18.2-r11 —
Wolfi rolling kube-logging-operator 4.7.0-r1 —
Wolfi rolling kube-state-metrics 2.12.0-r4 —
Wolfi rolling kubebuilder 4.0.0-r1 —
Wolfi rolling kubecolor 0.3.3-r1 —
Wolfi rolling kubeflow-katib 0.16.0-r12 —
Wolfi rolling kuberay-operator 1.0.0-r8 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.13.0-r5 —
Wolfi rolling kubernetes-csi-external-provisioner 5.0.1-r1 —
Wolfi rolling kubernetes-csi-livenessprobe 2.13.0-r1 —
Wolfi rolling kubernetes-dashboard 2.7.0-r19 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.0.9-r17 —
Wolfi rolling kubernetes-dns-node-cache 1.23.1-r1 —
Wolfi rolling kubernetes-event-exporter 1.7-r8 —
Wolfi rolling kubernetes-ingress-defaultbackend 1.29.1-r1 —
Wolfi rolling kubescape 3.0.11-r1 —
Wolfi rolling kubevela 1.9.11-r4 —
Wolfi rolling kubewatch 2.6.0-r2 —
Wolfi rolling kustomize 5.4.2-r2 —
Wolfi rolling kwok 0.5.2-r2 —
Wolfi rolling kyverno-policy-reporter 2.19.0-r1 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin 1.6.3-r6 —
Wolfi rolling kyverno-policy-reporter-ui 1.9.2-r7 —
Wolfi rolling lazygit 0.42.0-r1 —
Wolfi rolling libnvidia-container +1 1.15.0-r2 —
Wolfi rolling litefs 0.5.11-r5 —
Wolfi rolling litestream 0.3.13-r3 —
Wolfi rolling local-path-provisioner 0.0.27-r1 —
Wolfi rolling local-static-provisioner 2.7.0-r3 —
Wolfi rolling logstash-exporter 1.6.4-r2 —
Wolfi rolling mage 1.15.0-r8 —
Wolfi rolling mc 0.20231220.071422-r9 —
Wolfi rolling memcached-exporter 0.14.3-r6 —
Wolfi rolling metacontroller 4.11.14-r1 —
Wolfi rolling metallb 0.14.5-r3 —
Wolfi rolling metrics-server 0.7.1-r4 —
Wolfi rolling minify 2.20.32-r2 —
Wolfi rolling mkcert 1.4.4-r3 —
Wolfi rolling mockery 2.43.2-r1 —
Wolfi rolling mods +1 1.4.0-r1 —
Wolfi rolling mongo-tools 100.9.4-r5 —
Wolfi rolling nats 0.1.4-r5 —
Wolfi rolling nats-server 2.10.16-r1 —
Wolfi rolling nerdctl 1.7.6-r5 —
Wolfi rolling neuvector-dbgen 0_git20240423-r1 —
Wolfi rolling neuvector-scanner 0_git20240528-r4 —
Wolfi rolling neuvector-sigstore-interface 0_git20240520-r2 —
Wolfi rolling newrelic-fluent-bit-output-compat 2.4.0-r5 —
Wolfi rolling newrelic-infra-operator 0.18.1-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.52.3-r1 —
Wolfi rolling newrelic-nri-kube-events 2.9.8-r1 —
Wolfi rolling newrelic-nri-statsd 2.9.1-r4 —
Wolfi rolling newrelic-prometheus-configurator 1.16.2-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r8 —
Wolfi rolling nodetaint 0.0.4-r19 —
Wolfi rolling nri-apache 1.12.5-r1 —
Wolfi rolling nri-consul 2.7.11-r1 —
Wolfi rolling nri-couchbase 2.6.5-r1 —
Wolfi rolling nri-discovery-kubernetes 1.9.1-r1 —
Wolfi rolling nri-elasticsearch 5.2.5-r1 —
Wolfi rolling nri-f5 2.7.5-r1 —
Wolfi rolling nri-haproxy 3.0.1-r3 —
Wolfi rolling nri-jmx 3.7.0-r1 —
Wolfi rolling nri-kafka 3.7.3-r2 —
Wolfi rolling nri-kubernetes 3.28.8-r1 —
Wolfi rolling nri-memcached 2.5.6-r1 —
Wolfi rolling nri-mongodb 2.8.5-r1 —
Wolfi rolling nri-mssql 2.12.4-r1 —
Wolfi rolling nri-mysql 1.10.8-r1 —
Wolfi rolling nri-nagios 2.9.5-r1 —
Wolfi rolling nri-nginx 3.4.6-r1 —
Wolfi rolling nri-postgresql 2.13.5-r1 —
Wolfi rolling nri-prometheus 2.21.2-r1 —
Wolfi rolling nri-rabbitmq +1 2.13.6-r1 —
Wolfi rolling nri-redis 1.11.6-r1 —
Wolfi rolling nsc 2.8.6-r7 —
Wolfi rolling oauth2-proxy 7.6.0-r8 —
Wolfi rolling octo-sts 0.2.0-r1 —
Wolfi rolling ollama 0.1.41-r1 —
Wolfi rolling opa 0.65.0-r1 —
Wolfi rolling oras 1.2.0-r1 —
Wolfi rolling osv-scanner 1.7.4-r1 —
Wolfi rolling overmind 2.5.1-r2 —
Wolfi rolling paranoia 0.2.1-r15 —
Wolfi rolling petname 2.11-r8 —
Wolfi rolling php-fpm_exporter 2.2.0-r5 —
Wolfi rolling pluto 5.19.4-r1 —
Wolfi rolling policy-controller 0.9.0-r3 —
Wolfi rolling pombump 0.0.12-r3 —
Wolfi rolling postgres-operator 1.12.0-r1 —
Wolfi rolling prometheus-adapter +1 0.12.0-r1 —
Wolfi rolling prometheus-alertmanager 0.27.0-r6 —
Wolfi rolling prometheus-operator 0.74.0-r1 —
Wolfi rolling prometheus-pushgateway 1.8.0-r4 —
Wolfi rolling protoc-gen-go 1.34.1-r3 —
Wolfi rolling pulumi-kubernetes-operator 1.15.0-r5 —
Wolfi rolling pulumi-language-dotnet 3.63.1-r2 —
Wolfi rolling q 0.19.2-r6 —
Wolfi rolling rabbitmq-cluster-operator 2.9.0-r1 —
Wolfi rolling rabbitmq-default-user-credential-updater 1.0.4-r2 —
Wolfi rolling rabbitmq-messaging-topology-operator 1.14.1-r2 —
Wolfi rolling rclone 1.66.0-r4 —
Wolfi rolling redka 0.5.0-r1 —
Wolfi rolling regclient 0.6.1-r1 —
Wolfi rolling rekor 1.3.6-r4 —
Wolfi rolling render-template 1.0.6-r5 —
Wolfi rolling restic 0.16.4-r10 —
Wolfi rolling rook 1.14.5-r1 —
Wolfi rolling rootlesskit 2.1.0-r2 —
Wolfi rolling runc 1.1.12-r7 —
Wolfi rolling s5cmd 2.2.2-r4 —
Wolfi rolling sbom-scorecard 0.0.7-r13 —
Wolfi rolling sbomqs 0.1.4-r1 —
Wolfi rolling scorecard 4.13.1-r9 —
Wolfi rolling secrets-store-csi-driver 1.4.3-r2 —
Wolfi rolling secrets-store-csi-driver-provider-aws 0.3.9-r1 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.5.2-r2 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.5.0-r6 —
Wolfi rolling shfmt 3.8.0-r4 —
Wolfi rolling sigstore-scaffolding 0.7.1-r1 —
Wolfi rolling skaffold +1 2.12.0-r1 —
Wolfi rolling skopeo 1.15.1-r1 —
Wolfi rolling slsa-verifier 2.5.1-r7 —
Wolfi rolling smarter-device-manager 1.20.11-r8 —
Wolfi rolling snyk-cli 1.1291.1-r1 —
Wolfi rolling sonobuoy 0.57.1-r7 —
Wolfi rolling sops 3.8.1-r8 —
Wolfi rolling speedtest-go 1.7.7-r1 —
Wolfi rolling spegel 0.0.22-r2 —
Wolfi rolling spicedb 1.33.0-r1 —
Wolfi rolling spire-server 1.9.6-r1 —
Wolfi rolling spqr 1.3.0-r4 —
Wolfi rolling src 5.4.0-r1 —
Wolfi rolling src-fingerprint 0.19.0-r15 —
Wolfi rolling step +1 0.26.1-r2 —
Wolfi rolling step-issuer 0.9.1-r5 —
Wolfi rolling stern 1.30.0-r1 —
Wolfi rolling supercronic 0.2.29-r8 —
Wolfi rolling swagger 0.31.0-r1 —
Wolfi rolling syft +2 1.5.0-r1 —
Wolfi rolling tailscale 1.66.4-r1 —
Wolfi rolling task 3.37.2-r2 —
Wolfi rolling tekton-chains 0.21.0-r1 —
Wolfi rolling temporal 0.12.0-r3 —
Wolfi rolling temporal-ui-server 2.27.2-r1 —
Wolfi rolling terraform 1.5.7-r12 —
Wolfi rolling terraform-docs 0.18.0-r1 —
Wolfi rolling terraform-provider-aws 5.52.0-r1 —
Wolfi rolling terraform-provider-azurerm 3.106.1-r1 —
Wolfi rolling terraform-provider-google 5.32.0-r1 —
Wolfi rolling terragrunt 0.58.14-r1 —
Wolfi rolling tflint 0.51.1-r1 —
Wolfi rolling tfsec 1.28.6-r2 —
Wolfi rolling thanos 0.35.1-r1 —
Wolfi rolling thanos-operator 0.3.7-r18 —
Wolfi rolling timestamp-authority 1.2.2-r8 —
Wolfi rolling timoni 0.21.0-r2 —
Wolfi rolling tkn 0.37.0-r1 —
Wolfi rolling trillian 1.6.0-r7 —
Wolfi rolling trivy 0.52.0-r2 —
Wolfi rolling trust-manager 0.11.0-r1 —
Wolfi rolling up 0.30.0-r1 —
Wolfi rolling vault-k8s 1.4.1-r2 —
Wolfi rolling vcluster 0.19.5-r2 —
Wolfi rolling velero 1.13.2-r5 —
Wolfi rolling velero-plugin-for-aws 1.9.2-r5 —
Wolfi rolling velero-plugin-for-csi 0.7.1-r5 —
Wolfi rolling vexctl 0.2.6-r8 —
Wolfi rolling volume-modifier-for-k8s 0.2.1-r6 —
Wolfi rolling vt-cli +1 1.0.0-r7 —
Wolfi rolling wait-for-port 1.0.7-r5 —
Wolfi rolling wave +1 0.8.0-r3 —
Wolfi rolling wazero 1.7.2-r1 —
Wolfi rolling weaviate 1.25.2-r1 —
Wolfi rolling wgcf 2.2.22-r2 —
Wolfi rolling wire-go 0.6.0-r4 —
Wolfi rolling wireguard-go 0.0.20230223-r12 —
Wolfi rolling wolfictl 0.16.15-r1 —
Wolfi rolling xcaddy 0.4.2-r1 —
Wolfi rolling yam 0.0.7-r2 —
Wolfi rolling yq 4.44.1-r2 —
Wolfi rolling ytt 0.49.0-r5 —
Wolfi rolling zarf 0.34.0-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.21.11 · >= 1.22.0-0, < 1.22.4 1.21.11, 1.22.4 GO-2024-2888

Advisories 44

References