Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-24790 BIT-golang-2024-24790EUVD-2024-22167GHSA-49gw-vxvf-fc2gGO-2024-2887

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Published Jun 5, 2024 · Updated Feb 13, 2025 · Assigned by Go

Vendor: Go standard library Product: net/netip Package: aactl Package: actions-runner-controller Package: addon-resizer Package: age Package: amass Package: argo-workflows Package: atlantis Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-flb-kinesis Package: aws-load-balancer-controller Package: bank-vaults Package: bazelisk Package: bom Package: boring-registry Package: buf Package: buildah Package: buildkitd Package: caddy Package: cadvisor Package: capslock Package: cass-operator Package: cert-exporter Package: cert-manager-webhook-pdns Package: certificate-transparency Package: cfssl Package: chartmuseum Package: chezmoi Package: cilium-cli Package: cloudflared Package: cluster-proportional-autoscaler Package: cni-plugins Package: configmap-reload Package: confluent-common-docker Package: conftest Package: controller-gen Package: cortex Package: cosign Package: crane Package: cri-tools Package: croc Package: crossplane-provider-aws Package: ctop Package: dagdotdev Package: dagger Package: dask-gateway Package: dataplaneapi Package: delve Package: dex Package: dgraph Package: direnv Package: dive Package: docker-compose Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-credential-gcr Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: envoy-ratelimit Package: extism Package: falcoctl Package: falcosidekick Package: ferretdb Package: flannel Package: flannel-cni-plugin Package: fluent-bit-plugin-loki Package: fluent-operator Package: flux Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: flyte Package: fq Package: frp Package: fulcio Package: fuse-overlayfs-snapshotter Package: gcsfuse Package: gh Package: ghaudit Package: git-lfs Package: gitleaks Package: gitness Package: gitsign Package: gke-gcloud-auth-plugin Package: glab Package: go Package: go-1.20 Package: go-1.21 Package: go-1.22 Package: go-bindata Package: go-licenses Package: go-md2man Package: gobump Package: gobuster Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golangci-lint Package: gomplate Package: gops Package: gostatsd Package: gosu Package: govulncheck Package: gpu-feature-discovery Package: grafana-agent-operator Package: grafana-mimir Package: grafana-operator Package: grpc-health-probe Package: grpcurl Package: grype Package: harbor-cli Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: hello-world-golang Package: helm Package: helm-3 Package: helm-4 Package: helm-docs Package: helm-operator Package: helm-push Package: hey Package: hivemind Package: http-echo Package: hubble-ui Package: influx Package: ip-masq-agent Package: jitsucom-bulker Package: k3d Package: k3s Package: k8sgpt Package: k8ssandra-operator Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kaniko Package: kargo Package: kind Package: ko Package: kots Package: kpt Package: ksops Package: kube-bench Package: kube-fluentd-operator Package: kube-logging-operator Package: kube-state-metrics Package: kube-vip Package: kubebuilder Package: kubecolor Package: kubeflow-katib Package: kuberay-operator Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-ingress-defaultbackend Package: kubescape Package: kubevela Package: kubewatch Package: kustomize Package: kwok Package: kyverno-policy-reporter Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-ui Package: lazygit Package: libnvidia-container Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: logstash-exporter Package: mage Package: mc Package: memcached-exporter Package: metacontroller Package: metallb Package: metrics-server Package: minify Package: mkcert Package: mockery Package: mods Package: mongo-tools Package: msft-golang Package: nats Package: nats-server Package: nerdctl Package: neuvector-dbgen Package: neuvector-scanner Package: neuvector-sigstore-interface Package: newrelic-fluent-bit-output-compat Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-nri-kube-events Package: newrelic-nri-statsd Package: newrelic-prometheus-configurator Package: nfs-subdir-external-provisioner Package: nodetaint Package: nri-apache Package: nri-cassandra Package: nri-consul Package: nri-couchbase Package: nri-discovery-kubernetes Package: nri-elasticsearch Package: nri-f5 Package: nri-haproxy Package: nri-jmx Package: nri-kafka Package: nri-kubernetes Package: nri-memcached Package: nri-mongodb Package: nri-mssql Package: nri-mysql Package: nri-nagios Package: nri-nginx Package: nri-postgresql Package: nri-prometheus Package: nri-rabbitmq Package: nri-redis Package: nsc Package: nvidia-container-toolkit Package: oauth2-proxy Package: octo-sts Package: ollama Package: opa Package: oras Package: osv-scanner Package: overmind Package: paranoia Package: petname Package: php-fpm_exporter Package: pluto Package: policy-controller Package: pombump Package: postgres-operator Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-operator Package: prometheus-pushgateway Package: protoc-gen-go Package: protoc-gen-go-grpc Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-java Package: q Package: rabbitmq-cluster-operator Package: rabbitmq-default-user-credential-updater Package: rabbitmq-messaging-topology-operator Package: rclone Package: redka Package: regclient Package: rekor Package: render-template Package: restic Package: rook Package: rootlesskit Package: runc Package: s5cmd Package: sbom-scorecard Package: sbomqs Package: scorecard Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: shfmt Package: sigstore-scaffolding Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: snyk-cli Package: sonobuoy Package: sops Package: speedtest-go Package: spegel Package: spicedb Package: spire-server Package: spqr Package: src Package: src-fingerprint Package: stdlib Package: step Package: step-ca Package: step-issuer Package: stern Package: supercronic Package: swagger Package: syft Package: tailscale Package: task Package: tekton-chains Package: temporal Package: temporal-ui-server Package: terraform Package: terraform-docs Package: terraform-provider-aws Package: terraform-provider-azurerm Package: terraform-provider-google Package: terragrunt Package: tflint Package: tfsec Package: thanos Package: thanos-operator Package: timestamp-authority Package: timoni Package: tkn Package: trillian Package: trivy Package: trust-manager Package: up Package: vault-k8s Package: vcluster Package: velero Package: velero-plugin-for-aws Package: velero-plugin-for-csi Package: vexctl Package: volume-modifier-for-k8s Package: vt-cli Package: wait-for-port Package: wave Package: wazero Package: weaviate Package: wgcf Package: wire-go Package: wireguard-go Package: wolfictl Package: xcaddy Package: yam Package: yq Package: ytt Package: zarf Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Affected products

VendorProductAffectedFixed
Go standard library net/netip < 1.21.11, 1.22.0-0 – < 1.22.4 1.21.11

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS golang-1.21 1.21.9-1ubuntu0.1 USN-6886-1
Ubuntu 24.04 LTS golang-1.22 1.22.2-2ubuntu0.1 USN-6886-1
Ubuntu 22.04 LTS golang-1.17 +1 No fix yet —
Ubuntu 22.04 LTS golang-1.18 1.18.1-1ubuntu1.2 USN-7109-1
Ubuntu 22.04 LTS golang-1.21 1.21.1-1~ubuntu22.04.3 USN-6886-1
Ubuntu 22.04 LTS golang-1.22 1.22.2-2~22.04.1 USN-6886-1
Ubuntu 20.04 LTS golang-1.13 +2 No fix yet —
Ubuntu 20.04 LTS golang-1.18 1.18.1-1ubuntu1~20.04.3 USN-7109-1
Ubuntu 20.04 LTS golang-1.21 1.21.1-1~ubuntu20.04.3 USN-6886-1
Ubuntu 20.04 LTS golang-1.22 1.22.2-2~20.04.1 —
Ubuntu 18.04 LTS golang-1.10 No fix yet —
Ubuntu 16.04 LTS golang-1.10 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +1 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.18 1.18.1-1ubuntu1~18.04.4+esm1 USN-7109-1
Ubuntu Pro 16.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.18 1.18.1-1ubuntu1~16.04.6+esm1 USN-7109-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 git-lfs 3.6.1-1.el9 RHSA-2025:7256
RHEL 9 golang +6 1.21.11-1.el9_4 RHSA-2024:4212
RHEL 9 grafana +1 10.2.6-4.el9 RHSA-2024:9115
RHEL 8 delve 1.21.2-3.module+el8.10.0+21244+5b2d9000 RHSA-2024:8876, RHSA-2024:4237
RHEL 8 golang +6 1.21.11-1.module+el8.10.0+21986+2112108a RHSA-2024:8876, RHSA-2024:4237
RHEL 8 grafana +1 9.2.10-17.el8_10 RHSA-2024:5291
Show 12 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Capsule 6 python-cryptography +1 42.0.8-1.el8pc RHSA-2024:7987
Red Hat Satellite Capsule 6 python-django +1 4.2.15-1.el8pc RHSA-2024:7987
Red Hat Satellite Capsule 6 python-gunicorn +1 22.0.0-1.el8pc RHSA-2024:7987
Red Hat Satellite 6 python-cryptography +1 42.0.8-1.el8pc RHSA-2024:7987
Red Hat Satellite 6 python-django +1 4.2.15-1.el8pc RHSA-2024:7987
Red Hat Satellite 6 python-gunicorn +1 22.0.0-1.el8pc RHSA-2024:7987
Red Hat Satellite 6 rubygem-foreman_theme_satellite 13.3.0-0.1.el8sat RHSA-2024:7987
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.0.3-2.el8sat RHSA-2024:7987
RHEL 9.2 EUS golang +6 1.19.13-9.el9_2 RHSA-2024:5075
RHEL 8.8 EUS delve 1.9.1-1.module+el8.8.0+16778+5fbb74f5 RHSA-2024:5077
RHEL 8.8 EUS go-toolset 1.19.13-2.module+el8.8.0+22004+c5f8797c RHSA-2024:5077
RHEL 8.8 EUS golang +6 1.19.13-9.module+el8.8.0+22163+5429357b RHSA-2024:5077
RHEL 7 ELS rhc-worker-script 0.9-5.el7_9 RHSA-2024:4893
Red Hat Openshift Ironic 4 python-zipp +1 3.19.1-1.el9 RHSA-2024:8418
Red Hat OpenShift 4 cri-o 1.25.3-7.rhaos4.12.git44a2cb2.el9 RHSA-2024:8418, RHSA-2024:5446, RHSA-2024:5442
Red Hat OpenShift 4 openshift +1 4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8 RHSA-2024:5446, RHSA-2024:5442, RHSA-2024:5436
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.14.0-202408072340.p0.g471f069.assembly.stream.el8 RHSA-2024:5442, RHSA-2024:5436
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.15.0-202408091502.p0.g0d799a2.assembly.stream.el8 RHSA-2024:5442
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.15.0-202408091502.p0.gfc50272.assembly.stream.el8 RHSA-2024:5442
Red Hat OpenShift 4 podman +6 3:4.2.0-11.rhaos4.12.el9 RHSA-2024:5446, RHSA-2024:5442, RHSA-2024:5436
Red Hat Ocp Tools 4 helm +1 3.15.4-60.el9 RHEA-2025:0507
Red Hat Ceph Storage 7 ceph +25 2:18.2.1-329.el8cp RHSA-2025:4664
Red Hat Ceph Storage 7 cephadm 2:18.2.1-329.el9cp RHSA-2025:4664
Red Hat Ceph Storage 7 liboath +1 2.6.12-1.el8cp RHSA-2025:4664
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.4.8-1.1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.5.11-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 python-urllib3 +1 1.26.20-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 python39-urllib3 +1 1.26.20-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.4.8-1.1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 automation-controller +4 4.5.11-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python-django +1 4.2.16-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python-pulpcore +1 3.28.32-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python-urllib3 +1 1.26.20-1.el9ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python39-django +1 4.2.16-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python39-pulpcore +1 3.28.32-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 python39-urllib3 +1 1.26.20-1.el8ap RHSA-2024:6765
Red Hat Ansible Automation Platform 2 receptor +1 1.4.8-1.1.el8ap RHSA-2024:6765

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 git-lfs 3.6.1-1.el9 ALSA-2025:7256
AlmaLinux 9 golang +6 1.21.11-1.el9_4 ALSA-2024:4212
AlmaLinux 9 grafana +1 10.2.6-4.el9 ALSA-2024:9115
AlmaLinux 8 delve 1.21.2-3.module_el8.10.0+3760+4dd778f9 ALSA-2024:4237
AlmaLinux 8 golang +6 1.21.11-1.module_el8.10.0+3863+bb82df69 ALSA-2024:4237
AlmaLinux 8 grafana +1 9.2.10-17.el8_10 ALSA-2024:5291

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 git-lfs 3.6.1-1.el9 RLSA-2025:7256
Rocky Linux 9 golang 1.21.11-1.el9_4 RLSA-2024:4212
Rocky Linux 8 delve 1.21.2-3.module+el8.10.0+1814+f68f8a63 RLSA-2024:8876, RLSA-2024:4237
Rocky Linux 8 golang +1 1.21.11-1.module+el8.10.0+1831+fc70fba6 RLSA-2024:8876, RLSA-2024:4237
Rocky Linux 8 grafana 9.2.10-17.el8_10 RLSA-2024:5291

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP6 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
SLES 15 SP6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
SLES 15 SP6 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
SLES 15 SP6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
SLES 15 SP6 google-osconfig-agent 20250115.01-150000.1.41.1 SUSE-SU-2025:0302-1
SLES 15 SP5 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP5 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
SLES 15 SP5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 15 SP5 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
SLES 15 SP5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1
SLES 15 SP5 google-osconfig-agent 20250115.01-150000.1.41.1 SUSE-SU-2025:0302-1
SLES 15 SP4 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES 15 SP4 google-osconfig-agent 20250115.01-150000.1.41.1 SUSE-SU-2025:0302-1
SLES 15 SP3 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES 15 SP3 google-osconfig-agent 20250115.01-150000.1.41.1 SUSE-SU-2025:0302-1
SLES 15 SP2 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 go1.21 1.21.11-1.36.1 SUSE-SU-2024:1936-1
SLES 12 SP5 go1.22 1.22.4-1.12.1 SUSE-SU-2024:1935-1
SLES 12 google-osconfig-agent 20250115.01-1.32.1 SUSE-SU-2025:0377-1
SLES for SAP 15 SP4 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES for SAP 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLES for SAP 15 SP3 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLES for SAP 15 SP2 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLE Micro 5.5 google-osconfig-agent 20250115.01-150000.1.41.1 SUSE-SU-2025:0302-1
SLE HPC 15 SP4 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLE HPC 15 SP4 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
SLE HPC 15 SP3 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SLE HPC 15 SP2 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1
SUSE Enterprise Storage 7.1 container-suseconnect 2.5.0-150000.4.55.1 SUSE-SU-2024:3360-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.21 1.21.11-1.1 openSUSE-SU-2024:14023-1
openSUSE Tumbleweed go1.22 1.22.4-1.1 openSUSE-SU-2024:14020-1
openSUSE Tumbleweed google-osconfig-agent 20250115.01-1.1 openSUSE-SU-2025:14723-1
openSUSE Tumbleweed helmfile 0.166.0-1.1 openSUSE-SU-2024:14077-1
openSUSE Tumbleweed kubelogin 0.1.4-1.1 openSUSE-SU-2024:14185-1
openSUSE Tumbleweed oras 1.2.1-1.1 openSUSE-SU-2024:14554-1
openSUSE Leap 15.6 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
openSUSE Leap 15.6 go1.21-openssl 1.21.13.1-150600.16.3.1 SUSE-SU-2024:3755-1
openSUSE Leap 15.6 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
openSUSE Leap 15.6 go1.22-openssl 1.22.7.1-150600.13.3.1 SUSE-SU-2024:3938-1
openSUSE Leap 15.6 google-osconfig-agent 20250115.01-150000.1.41.1 SUSE-SU-2025:0302-1
openSUSE Leap 15.5 go1.21 1.21.11-150000.1.36.1 SUSE-SU-2024:1969-1
openSUSE Leap 15.5 go1.21-openssl 1.21.13.1-150000.1.11.1 SUSE-SU-2024:3089-1
openSUSE Leap 15.5 go1.22 1.22.4-150000.1.18.1 SUSE-SU-2024:1970-1
openSUSE Leap 15.5 go1.22-openssl 1.22.7.1-150000.1.3.1 SUSE-SU-2024:3772-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.22.4-r0 —
Alpine v3.23 go 1.22.4-r0 —
Alpine v3.22 go 1.22.4-r0 —
Alpine v3.21 go 1.22.4-r0 —
Alpine v3.20 go 1.22.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-ecr-credential-helper 0.9.0-1.amzn2023 ALAS2023-2024-734
Amazon Linux 2023 amazon-ssm-agent 3.3.859.0-1.amzn2023 ALAS2023-2024-735
Amazon Linux 2023 cni-plugins 1.7.1-1.amzn2023.0.1 ALAS2023-2025-1012
Amazon Linux 2023 containerd +1 1.7.20-1.amzn2023.0.1 ALAS2023-2024-697
Amazon Linux 2023 docker 25.0.3-1.amzn2023.0.2 ALAS2023-2024-711
Amazon Linux 2023 golang +6 1.22.4-1.amzn2023.0.1 ALAS2023-2024-646
Amazon Linux 2023 runc 1.1.13-1.amzn2023.0.1 ALAS2023-2024-710
Amazon Linux 2 amazon-ssm-agent 3.3.859.0-1.amzn2 ALAS2-2024-2645
Amazon Linux 2 cri-tools 1.32.0-1.amzn2.0.1 ALAS2-2025-2870
Amazon Linux 2 golang +6 1.22.4-1.amzn2.0.1 ALAS2-2024-2576
Amazon Linux 2 nerdctl 1.7.6-1.amzn2.0.1 ALAS2-2024-2618

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang No fix yet —
Azure Linux 2 (CBL-Mariner) golang 1.18.8-4 —
Azure Linux 2 (CBL-Mariner) msft-golang 1.21.6-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 git-lfs 3.6.1-1.el9 ELSA-2025-7256
Oracle Linux 9 golang +6 1.21.11-1.el9_4 ELSA-2024-4212
Oracle Linux 9 grafana +1 10.2.6-4.el9 ELSA-2024-9115
Oracle Linux 8 delve 1.21.2-3.0.1.module+el8.10.0+90307+cdf2b281 ELSA-2024-8876, ELSA-2024-4237
Oracle Linux 8 golang +6 1.21.11-1.module+el8.10.0+90357+32bea22c ELSA-2024-8876, ELSA-2024-4237
Oracle Linux 8 grafana +1 9.2.10-17.el8_10 ELSA-2024-5291
Oracle Linux 8 terraform-provider-oci-fips 6.25.0-2.el9 ELSA-2025-31356

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r13 —
Wolfi rolling actions-runner-controller 0.9.2-r1 —
Wolfi rolling addon-resizer 1.8.21-r1 —
Wolfi rolling age 1.1.1-r1 —
Wolfi rolling amass 4.2.0-r11 —
Wolfi rolling argo-workflows 3.6.5-r2 —
Wolfi rolling atlantis 0.28.1-r1 —
Wolfi rolling aws-flb-cloudwatch 1.9.4-r11 —
Wolfi rolling aws-flb-firehose 1.7.2-r11 —
Wolfi rolling aws-flb-kinesis 1.10.2-r12 —
Wolfi rolling aws-load-balancer-controller 2.8.1-r1 —
Wolfi rolling bank-vaults 1.20.4-r14 —
Wolfi rolling bazelisk 1.20.0-r1 —
Wolfi rolling bom 0.6.0-r6 —
Wolfi rolling boring-registry 0.14.0-r2 —
Wolfi rolling buf 1.32.2-r1 —
Wolfi rolling buildah 1.36.0-r1 —
Wolfi rolling buildkitd 0.13.2-r2 —
Wolfi rolling caddy 2.8.4-r1 —
Wolfi rolling cadvisor 0.49.1-r8 —
Wolfi rolling capslock 0.2.2-r3 —
Wolfi rolling cass-operator 1.21.0-r1 —
Wolfi rolling cert-exporter 2.12.0-r6 —
Wolfi rolling cert-manager-webhook-pdns 2.5.1-r4 —
Wolfi rolling certificate-transparency 1.2.1-r1 —
Wolfi rolling cfssl 1.6.5-r5 —
Wolfi rolling chartmuseum 0.16.2-r1 —
Wolfi rolling chezmoi 2.48.2-r1 —
Wolfi rolling cilium-cli 0.16.9-r1 —
Wolfi rolling cloudflared 2024.1.0-r11 —
Wolfi rolling cluster-proportional-autoscaler 1.8.11-r7 —
Wolfi rolling configmap-reload 0.13.0-r2 —
Wolfi rolling confluent-common-docker 7.6.0-r6 —
Wolfi rolling conftest 0.52.0-r3 —
Wolfi rolling controller-gen 0.15.0-r5 —
Wolfi rolling cortex 1.17.1-r1 —
Wolfi rolling cosign 2.2.4-r5 —
Wolfi rolling crane 0.19.1-r6 —
Wolfi rolling cri-tools 1.30.0-r3 —
Wolfi rolling croc 10.0.7-r1 —
Wolfi rolling crossplane-provider-aws 1.4.0-r3 —
Wolfi rolling ctop 0.7.7-r15 —
Wolfi rolling dagdotdev 0.0.3-r1 —
Wolfi rolling dagger 0.11.6-r1 —
Wolfi rolling dask-gateway 2024.1.0-r5 —
Wolfi rolling dataplaneapi 2.9.3-r1 —
Wolfi rolling delve 1.22.1-r5 —
Wolfi rolling dex 2.40.0-r1 —
Wolfi rolling dgraph 23.1.1-r2 —
Wolfi rolling direnv 2.34.0-r4 —
Wolfi rolling dive 0.12.0-r7 —
Wolfi rolling docker-compose 2.27.1-r1 —
Wolfi rolling docker-credential-acr-env 0.7.0-r13 —
Wolfi rolling docker-credential-gcr 2.1.22-r6 —
Wolfi rolling dockerize 0.7.0-r9 —
Wolfi rolling doppler-kubernetes-operator 1.5.1-r2 —
Wolfi rolling dynamic-localpv-provisioner 4.0.0-r4 —
Wolfi rolling envoy-ratelimit 0.0_git20240220-r11 —
Wolfi rolling falcoctl +1 0.8.0-r1 —
Wolfi rolling falcosidekick 2.28.0-r7 —
Wolfi rolling ferretdb 1.21.0-r4 —
Wolfi rolling flannel 0.25.3-r1 —
Wolfi rolling flannel-cni-plugin 1.4.1-r4 —
Wolfi rolling fluent-bit-plugin-loki 3.0.0-r2 —
Wolfi rolling fluent-operator 2.8.0-r1 —
Wolfi rolling flux 2.3.0-r1 —
Wolfi rolling flux-helm-controller 1.0.1-r2 —
Wolfi rolling flux-image-automation-controller 0.38.0-r3 —
Wolfi rolling flux-image-reflector-controller 0.32.0-r2 —
Wolfi rolling flux-kustomize-controller +1 1.3.0-r3 —
Wolfi rolling flux-source-controller 1.3.0-r2 —
Wolfi rolling flyte 1.12.0-r2 —
Wolfi rolling fq 0.11.0-r5 —
Wolfi rolling frp 0.58.1-r1 —
Wolfi rolling fulcio 1.4.5-r3 —
Wolfi rolling fuse-overlayfs-snapshotter 1.0.8-r10 —
Wolfi rolling gcsfuse 1.4.2-r8 —
Wolfi rolling gh 2.50.0-r1 —
Wolfi rolling ghaudit 0.4.0-r4 —
Wolfi rolling git-lfs 3.5.1-r6 —
Wolfi rolling gitleaks 8.18.3-r1 —
Wolfi rolling gitness 3.0.0_beta6-r4 —
Wolfi rolling gitsign 0.10.2-r2 —
Wolfi rolling gke-gcloud-auth-plugin 0.0.2-r11 —
Wolfi rolling glab 1.41.0-r1 —
Wolfi rolling go-1.20 No fix yet —
Wolfi rolling go-1.21 1.21.11-r0 —
Wolfi rolling go-1.22 1.22.4-r0 —
Wolfi rolling go-bindata 3.1.3-r21 —
Wolfi rolling go-licenses 1.6.0-r14 —
Wolfi rolling go-md2man 2.0.4-r4 —
Wolfi rolling gobump 0.7.7-r3 —
Wolfi rolling gobuster 3.6.0-r12 —
Wolfi rolling golangci-lint 1.59.0-r1 —
Wolfi rolling gomplate 3.11.8-r1 —
Wolfi rolling gops 0.3.28-r11 —
Wolfi rolling gostatsd 28.3.0-r4 —
Wolfi rolling gosu 1.17-r6 —
Wolfi rolling govulncheck 1.0.2-r5 —
Wolfi rolling gpu-feature-discovery 0.8.2-r2 —
Wolfi rolling grafana-agent-operator 0.41.0-r1 —
Wolfi rolling grafana-operator 5.9.2-r1 —
Wolfi rolling grpc-health-probe 0.4.26-r3 —
Wolfi rolling grpcurl 1.9.1-r4 —
Wolfi rolling grype 0.78.0-r1 —
Wolfi rolling harbor-cli 0.0.1-r3 —
Wolfi rolling harbor-registry 3.0.0_alpha1-r4 —
Wolfi rolling harbor-scanner-trivy 0.31.2-r2 —
Wolfi rolling hcloud 1.43.1-r2 —
Wolfi rolling hello-world-golang 1.3-r4 —
Wolfi rolling helm 3.15.1-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-docs 1.13.1-r1 —
Wolfi rolling helm-operator 1.34.2-r1 —
Wolfi rolling helm-push 0.10.4-r11 —
Wolfi rolling hey 0.1.4-r14 —
Wolfi rolling hivemind 1.1.0-r1 —
Wolfi rolling hubble-ui 0.13.1-r1 —
Wolfi rolling influx 2.7.5-r2 —
Wolfi rolling ip-masq-agent 2.9.3-r12 —
Wolfi rolling jitsucom-bulker 2.7.0-r1 —
Wolfi rolling k3d 5.6.3-r3 —
Wolfi rolling k3s 1.30.1-r1 —
Wolfi rolling k8sgpt 0.3.32-r2 —
Wolfi rolling k8ssandra-operator 1.16.0-r3 —
Wolfi rolling k9s 0.32.4-r5 —
Wolfi rolling kaf 0.2.8-r4 —
Wolfi rolling kafka-proxy 0.3.10-r1 —
Wolfi rolling kafka_exporter 1.7.0-r4 —
Wolfi rolling kaniko 1.23.0-r1 —
Wolfi rolling kargo 0.6.0-r3 —
Wolfi rolling kind 0.23.0-r1 —
Wolfi rolling ko 0.15.4-r1 —
Wolfi rolling kots 1.109.9-r1 —
Wolfi rolling kpt 1.0.0_beta49-r7 —
Wolfi rolling ksops 4.3.1-r3 —
Wolfi rolling kube-bench 0.7.3-r3 —
Wolfi rolling kube-fluentd-operator 1.18.2-r11 —
Wolfi rolling kube-logging-operator 4.7.0-r1 —
Wolfi rolling kube-state-metrics 2.12.0-r4 —
Wolfi rolling kubebuilder 4.0.0-r1 —
Wolfi rolling kubecolor 0.3.3-r1 —
Wolfi rolling kubeflow-katib 0.16.0-r12 —
Wolfi rolling kuberay-operator 1.0.0-r8 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.13.0-r5 —
Wolfi rolling kubernetes-csi-external-provisioner 5.0.1-r1 —
Wolfi rolling kubernetes-csi-livenessprobe 2.13.0-r1 —
Wolfi rolling kubernetes-dashboard 2.7.0-r19 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.0.9-r17 —
Wolfi rolling kubernetes-dns-node-cache 1.23.1-r1 —
Wolfi rolling kubernetes-event-exporter 1.7-r8 —
Wolfi rolling kubernetes-ingress-defaultbackend 1.29.1-r1 —
Wolfi rolling kubescape 3.0.11-r1 —
Wolfi rolling kubevela 1.9.11-r4 —
Wolfi rolling kubewatch 2.6.0-r2 —
Wolfi rolling kustomize 5.4.2-r2 —
Wolfi rolling kwok 0.5.2-r2 —
Wolfi rolling kyverno-policy-reporter 2.19.0-r1 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin 1.6.3-r6 —
Wolfi rolling kyverno-policy-reporter-ui 1.9.2-r7 —
Wolfi rolling lazygit 0.42.0-r1 —
Wolfi rolling libnvidia-container +1 1.15.0-r2 —
Wolfi rolling litefs 0.5.11-r5 —
Wolfi rolling litestream 0.3.13-r3 —
Wolfi rolling local-path-provisioner 0.0.27-r1 —
Wolfi rolling local-static-provisioner 2.7.0-r3 —
Wolfi rolling logstash-exporter 1.6.4-r2 —
Wolfi rolling mage 1.15.0-r8 —
Wolfi rolling mc 0.20231220.071422-r9 —
Wolfi rolling memcached-exporter 0.14.3-r6 —
Wolfi rolling metacontroller 4.11.14-r1 —
Wolfi rolling metallb 0.14.5-r3 —
Wolfi rolling metrics-server 0.7.1-r4 —
Wolfi rolling minify 2.20.32-r2 —
Wolfi rolling mkcert 1.4.4-r3 —
Wolfi rolling mockery 2.43.2-r1 —
Wolfi rolling mods +1 1.4.0-r1 —
Wolfi rolling mongo-tools 100.9.4-r5 —
Wolfi rolling nats 0.1.4-r5 —
Wolfi rolling nats-server 2.10.16-r1 —
Wolfi rolling nerdctl 1.7.6-r5 —
Wolfi rolling neuvector-dbgen 0_git20240423-r1 —
Wolfi rolling neuvector-scanner 0_git20240528-r4 —
Wolfi rolling neuvector-sigstore-interface 0_git20240520-r2 —
Wolfi rolling newrelic-fluent-bit-output-compat 2.4.0-r5 —
Wolfi rolling newrelic-infra-operator 0.18.1-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.52.3-r1 —
Wolfi rolling newrelic-nri-kube-events 2.9.8-r1 —
Wolfi rolling newrelic-nri-statsd 2.9.1-r4 —
Wolfi rolling newrelic-prometheus-configurator 1.16.2-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r8 —
Wolfi rolling nodetaint 0.0.4-r19 —
Wolfi rolling nri-apache 1.12.5-r1 —
Wolfi rolling nri-consul 2.7.11-r1 —
Wolfi rolling nri-couchbase 2.6.5-r1 —
Wolfi rolling nri-discovery-kubernetes 1.9.1-r1 —
Wolfi rolling nri-elasticsearch 5.2.5-r1 —
Wolfi rolling nri-f5 2.7.5-r1 —
Wolfi rolling nri-haproxy 3.0.1-r3 —
Wolfi rolling nri-jmx 3.7.0-r1 —
Wolfi rolling nri-kafka 3.7.3-r2 —
Wolfi rolling nri-kubernetes 3.28.8-r1 —
Wolfi rolling nri-memcached 2.5.6-r1 —
Wolfi rolling nri-mongodb 2.8.5-r1 —
Wolfi rolling nri-mssql 2.12.4-r1 —
Wolfi rolling nri-mysql 1.10.8-r1 —
Wolfi rolling nri-nagios 2.9.5-r1 —
Wolfi rolling nri-nginx 3.4.6-r1 —
Wolfi rolling nri-postgresql 2.13.5-r1 —
Wolfi rolling nri-prometheus 2.21.2-r1 —
Wolfi rolling nri-rabbitmq +1 2.13.6-r1 —
Wolfi rolling nri-redis 1.11.6-r1 —
Wolfi rolling nsc 2.8.6-r7 —
Wolfi rolling oauth2-proxy 7.6.0-r8 —
Wolfi rolling octo-sts 0.2.0-r1 —
Wolfi rolling ollama 0.1.41-r1 —
Wolfi rolling opa 0.65.0-r1 —
Wolfi rolling oras 1.2.0-r1 —
Wolfi rolling osv-scanner 1.7.4-r1 —
Wolfi rolling overmind 2.5.1-r2 —
Wolfi rolling paranoia 0.2.1-r15 —
Wolfi rolling petname 2.11-r8 —
Wolfi rolling php-fpm_exporter 2.2.0-r5 —
Wolfi rolling pluto 5.19.4-r1 —
Wolfi rolling policy-controller 0.9.0-r3 —
Wolfi rolling pombump 0.0.12-r3 —
Wolfi rolling postgres-operator 1.12.0-r1 —
Wolfi rolling prometheus-adapter +1 0.12.0-r1 —
Wolfi rolling prometheus-alertmanager 0.27.0-r6 —
Wolfi rolling prometheus-operator 0.74.0-r1 —
Wolfi rolling prometheus-pushgateway 1.8.0-r4 —
Wolfi rolling protoc-gen-go 1.34.1-r3 —
Wolfi rolling pulumi-kubernetes-operator 1.15.0-r5 —
Wolfi rolling pulumi-language-dotnet 3.63.1-r2 —
Wolfi rolling q 0.19.2-r6 —
Wolfi rolling rabbitmq-cluster-operator 2.9.0-r1 —
Wolfi rolling rabbitmq-default-user-credential-updater 1.0.4-r2 —
Wolfi rolling rabbitmq-messaging-topology-operator 1.14.1-r2 —
Wolfi rolling rclone 1.66.0-r4 —
Wolfi rolling redka 0.5.0-r1 —
Wolfi rolling regclient 0.6.1-r1 —
Wolfi rolling rekor 1.3.6-r4 —
Wolfi rolling render-template 1.0.6-r5 —
Wolfi rolling restic 0.16.4-r10 —
Wolfi rolling rook 1.14.5-r1 —
Wolfi rolling rootlesskit 2.1.0-r2 —
Wolfi rolling runc 1.1.12-r7 —
Wolfi rolling s5cmd 2.2.2-r4 —
Wolfi rolling sbom-scorecard 0.0.7-r13 —
Wolfi rolling sbomqs 0.1.4-r1 —
Wolfi rolling scorecard 4.13.1-r9 —
Wolfi rolling secrets-store-csi-driver 1.4.3-r2 —
Wolfi rolling secrets-store-csi-driver-provider-aws 0.3.9-r1 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.5.2-r2 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.5.0-r6 —
Wolfi rolling shfmt 3.8.0-r4 —
Wolfi rolling sigstore-scaffolding 0.7.1-r1 —
Wolfi rolling skaffold +1 2.12.0-r1 —
Wolfi rolling skopeo 1.15.1-r1 —
Wolfi rolling slsa-verifier 2.5.1-r7 —
Wolfi rolling smarter-device-manager 1.20.11-r8 —
Wolfi rolling snyk-cli 1.1291.1-r1 —
Wolfi rolling sonobuoy 0.57.1-r7 —
Wolfi rolling sops 3.8.1-r8 —
Wolfi rolling speedtest-go 1.7.7-r1 —
Wolfi rolling spegel 0.0.22-r2 —
Wolfi rolling spicedb 1.33.0-r1 —
Wolfi rolling spire-server 1.9.6-r1 —
Wolfi rolling spqr 1.3.0-r4 —
Wolfi rolling src 5.4.0-r1 —
Wolfi rolling src-fingerprint 0.19.0-r15 —
Wolfi rolling step +1 0.26.1-r2 —
Wolfi rolling step-issuer 0.9.1-r5 —
Wolfi rolling stern 1.30.0-r1 —
Wolfi rolling supercronic 0.2.29-r8 —
Wolfi rolling swagger 0.31.0-r1 —
Wolfi rolling syft +2 1.5.0-r1 —
Wolfi rolling tailscale 1.66.4-r1 —
Wolfi rolling task 3.37.2-r2 —
Wolfi rolling tekton-chains 0.21.0-r1 —
Wolfi rolling temporal 0.12.0-r3 —
Wolfi rolling temporal-ui-server 2.27.2-r1 —
Wolfi rolling terraform 1.5.7-r12 —
Wolfi rolling terraform-docs 0.18.0-r1 —
Wolfi rolling terraform-provider-aws 5.52.0-r1 —
Wolfi rolling terraform-provider-azurerm 3.106.1-r1 —
Wolfi rolling terraform-provider-google 5.32.0-r1 —
Wolfi rolling terragrunt 0.58.14-r1 —
Wolfi rolling tflint 0.51.1-r1 —
Wolfi rolling tfsec 1.28.6-r2 —
Wolfi rolling thanos 0.35.1-r1 —
Wolfi rolling thanos-operator 0.3.7-r18 —
Wolfi rolling timestamp-authority 1.2.2-r8 —
Wolfi rolling timoni 0.21.0-r2 —
Wolfi rolling tkn 0.37.0-r1 —
Wolfi rolling trillian 1.6.0-r7 —
Wolfi rolling trivy 0.52.0-r2 —
Wolfi rolling trust-manager 0.11.0-r1 —
Wolfi rolling up 0.30.0-r1 —
Wolfi rolling vault-k8s 1.4.1-r2 —
Wolfi rolling vcluster 0.19.5-r2 —
Wolfi rolling velero 1.13.2-r5 —
Wolfi rolling velero-plugin-for-aws 1.9.2-r5 —
Wolfi rolling velero-plugin-for-csi 0.7.1-r5 —
Wolfi rolling vexctl 0.2.6-r8 —
Wolfi rolling volume-modifier-for-k8s 0.2.1-r6 —
Wolfi rolling vt-cli +1 1.0.0-r7 —
Wolfi rolling wait-for-port 1.0.7-r5 —
Wolfi rolling wave +1 0.8.0-r3 —
Wolfi rolling wazero 1.7.2-r1 —
Wolfi rolling weaviate 1.25.2-r1 —
Wolfi rolling wgcf 2.2.22-r2 —
Wolfi rolling wire-go 0.6.0-r4 —
Wolfi rolling wireguard-go 0.0.20230223-r12 —
Wolfi rolling wolfictl 0.16.15-r1 —
Wolfi rolling xcaddy 0.4.2-r1 —
Wolfi rolling yam 0.0.7-r2 —
Wolfi rolling yq 4.44.1-r2 —
Wolfi rolling ytt 0.49.0-r5 —
Wolfi rolling zarf 0.34.0-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.21.11 · >= 1.22.0-0, < 1.22.4 1.21.11, 1.22.4 GO-2024-2887

Advisories 50

References