Description
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | net/http | < 1.21.12, 1.22.0-0 – < 1.22.5 | 1.21.12 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | golang-1.21 | No fix yet | — |
| Ubuntu 24.04 LTS | golang-1.22 | 1.22.2-2ubuntu0.3 | USN-7081-1 |
| Ubuntu 22.04 LTS | golang-1.17 | 1.17.13-3ubuntu1.3 | USN-7111-1 |
| Ubuntu 22.04 LTS | golang-1.18 | 1.18.1-1ubuntu1.2 | USN-7109-1 |
| Ubuntu 22.04 LTS | golang-1.20 +1 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.22 | 1.22.2-2~22.04.2 | USN-7081-1 |
| Ubuntu 20.04 LTS | golang-1.13 +3 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~20.04.3 | USN-7109-1 |
| Ubuntu 20.04 LTS | golang-1.22 | 1.22.2-2~20.04.2 | USN-7081-1 |
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~18.04.4+esm1 | USN-7109-1 |
| Ubuntu Pro 16.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~16.04.6+esm1 | USN-7109-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | buildah +1 | 2:1.37.2-1.el9 | RHSA-2024:9097 |
| RHEL 9 | containernetworking-plugins | 1:1.5.1-2.el9 | RHSA-2024:9089 |
| RHEL 9 | git-lfs | 3.6.1-1.el9 | RHSA-2025:7256 |
| RHEL 9 | golang +6 | 1.21.13-3.el9_4 | RHSA-2024:6913 |
| RHEL 9 | grafana +1 | 10.2.6-4.el9 | RHSA-2024:9115 |
| RHEL 9 | podman +4 | 2:5.2.2-1.el9 | RHSA-2024:9102 |
| RHEL 9 | skopeo +1 | 2:1.16.1-1.el9 | RHSA-2024:9098 |
| RHEL 9 | toolbox +1 | 0.0.99.5-5.el9 | RHSA-2024:9135 |
| RHEL 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | delve | 1.21.2-4.module+el8.10.0+22329+6cd5c9c6 | RHSA-2024:6908 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | go-toolset | 1.21.13-1.module+el8.10.0+22329+6cd5c9c6 | RHSA-2024:6908 |
| RHEL 8 | golang +5 | 1.21.13-2.module+el8.10.0+22329+6cd5c9c6 | RHSA-2024:6908 |
| RHEL 8 | grafana +1 | 9.2.10-18.el8_10 | RHSA-2024:7349 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | podman +6 | 4:4.9.4-13.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | python-podman +1 | 4.9.0-2.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | runc | 1:1.1.12-4.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+22283+6d6d094a | RHSA-2024:6969 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | golang +6 | 1.19.13-12.el9_2 | RHSA-2024:6914 |
| RHEL 8.8 EUS | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2024:6912 |
| RHEL 8.8 EUS | go-toolset | 1.19.13-2.module+el8.8.0+22004+c5f8797c | RHSA-2024:6912 |
| RHEL 8.8 EUS | golang +6 | 1.19.13-11.module+el8.8.0+22321+ab0dcb1b | RHSA-2024:6912 |
| RHEL 7 ELS | rhc-worker-script | 0.10-2.el7_9 | RHSA-2024:10133 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | buildah +1 | 2:1.37.2-1.el9 | ALSA-2024:9097 |
| AlmaLinux 9 | containernetworking-plugins | 1:1.5.1-2.el9 | ALSA-2024:9089 |
| AlmaLinux 9 | git-lfs | 3.6.1-1.el9 | ALSA-2025:7256 |
| AlmaLinux 9 | golang +6 | 1.21.13-3.el9_4 | ALSA-2024:6913 |
| AlmaLinux 9 | grafana +1 | 10.2.6-4.el9 | ALSA-2024:9115 |
| AlmaLinux 9 | skopeo +1 | 2:1.16.1-1.el9 | ALSA-2024:9098 |
| AlmaLinux 9 | toolbox +1 | 0.0.99.5-5.el9 | ALSA-2024:9135 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.0-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:6969 |
| AlmaLinux 8 | buildah +1 | 2:1.33.8-4.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | ALSA-2024:6969 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-5.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | crit +2 | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:6969 |
| AlmaLinux 8 | criu-devel +1 | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2024:6969 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+3858+6ad51f9f | ALSA-2024:6969 |
| AlmaLinux 8 | delve | 1.21.2-4.module_el8.10.0+3895+92d465e0 | ALSA-2024:6908 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:6969 |
| AlmaLinux 8 | go-toolset | 1.21.13-1.module_el8.10.0+3895+92d465e0 | ALSA-2024:6908 |
| AlmaLinux 8 | golang +5 | 1.21.13-2.module_el8.10.0+3895+92d465e0 | ALSA-2024:6908 |
| AlmaLinux 8 | grafana +1 | 9.2.10-18.el8_10 | ALSA-2024:7349 |
| AlmaLinux 8 | libslirp +1 | 4.4.0-2.module_el8.10.0+3845+87b84552 | ALSA-2024:6969 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:6969 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:6969 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-13.module_el8.10.0+3898+7a25cb1a | ALSA-2024:6969 |
| AlmaLinux 8 | python3-podman | 4.9.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | runc | 1:1.1.12-4.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-3.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:6969 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2024:6969 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+3876+e55593a8 | ALSA-2024:6969 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | git-lfs | 3.6.1-1.el9 | RLSA-2025:7256 |
| Rocky Linux 9 | golang | 1.21.13-3.el9_4 | RLSA-2024:6913 |
| Rocky Linux 9 | podman | 4:5.2.2-13.el9_5 | RLSA-2024:9102 |
| Rocky Linux 9 | toolbox | 0.0.99.5-5.el9.rocky.0.2 | RLSA-2024:9135 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | buildah | 2:1.33.8-4.module+el8.10.0+1843+6892ab28 | RLSA-2024:6969 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+1843+6892ab28 | RLSA-2024:6969 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2024:6969 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | delve | 1.21.2-4.module+el8.10.0+1868+7f5969f2 | RLSA-2024:6908 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | go-toolset | 1.21.13-1.module+el8.10.0+1868+7f5969f2 | RLSA-2024:6908 |
| Rocky Linux 8 | golang | 1.21.13-2.module+el8.10.0+1868+7f5969f2 | RLSA-2024:6908 |
| Rocky Linux 8 | grafana | 9.2.10-18.el8_10 | RLSA-2024:7349 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | podman | 4:4.9.4-13.module+el8.10.0+1871+e6fa1069 | RLSA-2024:6969 |
| Rocky Linux 8 | python-podman | 4.9.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2024:6969 |
| Rocky Linux 8 | runc | 1:1.1.12-4.module+el8.10.0+1843+6892ab28 | RLSA-2024:6969 |
| Rocky Linux 8 | skopeo | 2:1.14.5-3.module+el8.10.0+1843+6892ab28 | RLSA-2024:6969 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2024:6969 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2024:6969 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLES 15 SP6 | go1.21 | 1.21.12-150000.1.39.1 | SUSE-SU-2024:2308-1 |
| SLES 15 SP6 | go1.21-openssl | 1.21.13.1-150600.16.3.1 | SUSE-SU-2024:3755-1 |
| SLES 15 SP6 | go1.22 | 1.22.5-150000.1.21.1 | SUSE-SU-2024:2309-1 |
| SLES 15 SP6 | go1.22-openssl | 1.22.7.1-150600.13.3.1 | SUSE-SU-2024:3938-1 |
| SLES 15 SP5 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLES 15 SP5 | go1.21 | 1.21.12-150000.1.39.1 | SUSE-SU-2024:2308-1 |
| SLES 15 SP5 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLES 15 SP5 | go1.22 | 1.22.5-150000.1.21.1 | SUSE-SU-2024:2309-1 |
| SLES 15 SP5 | go1.22-openssl | 1.22.7.1-150000.1.3.1 | SUSE-SU-2024:3772-1 |
| SLES 15 SP4 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLES 15 SP4 | go1.21 | 1.21.12-150000.1.39.1 | SUSE-SU-2024:2308-1 |
| SLES 15 SP4 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLES 15 SP3 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLES 15 SP2 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | go1.21 | 1.21.12-1.39.1 | SUSE-SU-2024:2294-1 |
| SLES 12 SP5 | go1.22 | 1.22.5-1.15.1 | SUSE-SU-2024:2295-1 |
| SLES for SAP 15 SP4 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLES for SAP 15 SP4 | go1.21 | 1.21.12-150000.1.39.1 | SUSE-SU-2024:2308-1 |
| SLES for SAP 15 SP4 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLES for SAP 15 SP3 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLES for SAP 15 SP2 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLE HPC 15 SP4 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLE HPC 15 SP4 | go1.21 | 1.21.12-150000.1.39.1 | SUSE-SU-2024:2308-1 |
| SLE HPC 15 SP4 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| SLE HPC 15 SP3 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SLE HPC 15 SP2 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
| SUSE Enterprise Storage 7.1 | container-suseconnect | 2.5.0-150000.4.55.1 | SUSE-SU-2024:3360-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | forgejo | 7.0.5-1.1 | openSUSE-SU-2024:14107-1 |
| openSUSE Tumbleweed | go1.21 | 1.21.12-1.1 | openSUSE-SU-2024:14091-1 |
| openSUSE Tumbleweed | go1.22 | 1.22.5-1.1 | openSUSE-SU-2024:14098-1 |
| openSUSE Tumbleweed | istioctl | 1.22.3-1.1 | openSUSE-SU-2024:14198-1 |
| openSUSE Leap 15.6 | go1.21 | 1.21.12-150000.1.39.1 | SUSE-SU-2024:2308-1 |
| openSUSE Leap 15.6 | go1.21-openssl | 1.21.13.1-150600.16.3.1 | SUSE-SU-2024:3755-1 |
| openSUSE Leap 15.6 | go1.22 | 1.22.5-150000.1.21.1 | SUSE-SU-2024:2309-1 |
| openSUSE Leap 15.6 | go1.22-openssl | 1.22.7.1-150600.13.3.1 | SUSE-SU-2024:3938-1 |
| openSUSE Leap 15.5 | go1.21 | 1.21.12-150000.1.39.1 | SUSE-SU-2024:2308-1 |
| openSUSE Leap 15.5 | go1.21-openssl | 1.21.13.1-150000.1.11.1 | SUSE-SU-2024:3089-1 |
| openSUSE Leap 15.5 | go1.22 | 1.22.5-150000.1.21.1 | SUSE-SU-2024:2309-1 |
| openSUSE Leap 15.5 | go1.22-openssl | 1.22.7.1-150000.1.3.1 | SUSE-SU-2024:3772-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.22.5-r0 | — |
| Alpine v3.23 | go | 1.22.5-r0 | — |
| Alpine v3.22 | go | 1.22.5-r0 | — |
| Alpine v3.21 | go | 1.22.5-r0 | — |
| Alpine v3.20 | go | 1.22.5-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | golang +6 | 1.22.5-1.amzn2023.0.1 | ALAS2023-2024-666 |
| Amazon Linux 2 | golang +6 | 1.22.5-1.amzn2.0.1 | ALAS2-2024-2598 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | 1.22.5-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | buildah +1 | 2:1.37.2-1.0.1.el9 | ELSA-2024-9097 |
| Oracle Linux 9 | containernetworking-plugins | 1:1.5.1-2.el9 | ELSA-2024-9089 |
| Oracle Linux 9 | git-lfs | 3.6.1-1.el9 | ELSA-2025-7256 |
| Oracle Linux 9 | golang +6 | 1.21.13-3.el9_4 | ELSA-2024-6913 |
| Oracle Linux 9 | grafana +1 | 10.2.6-4.el9 | ELSA-2024-9115 |
| Oracle Linux 9 | podman +4 | 4:5.2.2-1.0.2.el9 | ELSA-2024-9102 |
| Oracle Linux 9 | skopeo +1 | 2:1.16.1-1.el9 | ELSA-2024-9098 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | delve | 1.21.2-4.0.1.module+el8.10.0+90407+20770c94 | ELSA-2024-6908 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | go-toolset | 1.21.13-1.module+el8.10.0+90407+20770c94 | ELSA-2024-6908 |
| Oracle Linux 8 | golang +5 | 1.21.13-2.module+el8.10.0+90407+20770c94 | ELSA-2024-6908 |
| Oracle Linux 8 | grafana +1 | 9.2.10-18.el8_10 | ELSA-2024-7349 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-13.0.1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | python3-podman | 4.9.0-2.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | runc | 1:1.1.12-4.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90412+9b361f34 | ELSA-2024-6969 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r15 | — |
| Wolfi rolling | actions-runner-controller | 0.9.3-r1 | — |
| Wolfi rolling | addon-resizer | 1.8.22-r1 | — |
| Wolfi rolling | age | 1.2.0-r1 | — |
| Wolfi rolling | amass | 4.2.0-r12 | — |
| Wolfi rolling | argo-workflows | 3.6.5-r2 | — |
| Wolfi rolling | atlantis | 0.28.3-r1 | — |
| Wolfi rolling | authservice | 1.0.1-r1 | — |
| Wolfi rolling | aws-efs-csi-driver | 2.0.5-r1 | — |
| Wolfi rolling | aws-flb-cloudwatch | 1.9.4-r12 | — |
| Wolfi rolling | aws-flb-firehose | 1.7.2-r12 | — |
| Wolfi rolling | aws-flb-kinesis | 1.10.2-r13 | — |
| Wolfi rolling | aws-load-balancer-controller | 2.8.1-r2 | — |
| Wolfi rolling | aws-network-policy-agent | 1.1.2-r1 | — |
| Wolfi rolling | bank-vaults | 1.20.4-r17 | — |
| Wolfi rolling | bazelisk | 1.20.0-r4 | — |
| Wolfi rolling | bom | 0.6.0-r7 | — |
| Wolfi rolling | boring-registry | 0.14.0-r4 | — |
| Wolfi rolling | buf +1 | 1.34.0-r1 | — |
| Wolfi rolling | buildah | 1.36.0-r2 | — |
| Wolfi rolling | caddy | 2.8.4-r2 | — |
| Wolfi rolling | cadvisor | 0.49.1-r9 | — |
| Wolfi rolling | capslock | 0.2.3-r1 | — |
| Wolfi rolling | cass-operator | 1.21.1-r1 | — |
| Wolfi rolling | cert-exporter | 2.12.0-r7 | — |
| Wolfi rolling | cert-manager-cmctl | 2.1.0-r1 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.1-r5 | — |
| Wolfi rolling | certificate-transparency | 1.2.1-r2 | — |
| Wolfi rolling | cfssl | 1.6.5-r8 | — |
| Wolfi rolling | chartmuseum | 0.16.2-r3 | — |
| Wolfi rolling | cilium-cli | 0.16.11-r1 | — |
| Wolfi rolling | cloudflared | 2024.1.0-r12 | — |
| Wolfi rolling | cloudnative-pg | 1.23.2-r5 | — |
| Wolfi rolling | cluster-proportional-autoscaler | 1.8.11-r8 | — |
| Wolfi rolling | cni-plugins +1 | 1.5.1-r1 | — |
| Wolfi rolling | confluent-common-docker | 7.6.0-r7 | — |
| Wolfi rolling | conftest | 0.53.0-r2 | — |
| Wolfi rolling | controller-gen | 0.15.0-r6 | — |
| Wolfi rolling | cortex | 1.17.1-r3 | — |
| Wolfi rolling | cosign | 2.2.4-r8 | — |
| Wolfi rolling | crane | 0.19.2-r2 | — |
| Wolfi rolling | cri-tools | 1.30.0-r4 | — |
| Wolfi rolling | croc | 10.0.9-r1 | — |
| Wolfi rolling | ctop | 0.7.7-r16 | — |
| Wolfi rolling | cue +1 | 0.9.2-r1 | — |
| Wolfi rolling | dagdotdev | 0.0.3-r2 | — |
| Wolfi rolling | dagger | 0.11.9-r1 | — |
| Wolfi rolling | dask-gateway | 2024.1.0-r7 | — |
| Wolfi rolling | dataplaneapi | 2.9.4-r1 | — |
| Wolfi rolling | dbmate | 2.18.0-r1 | — |
| Wolfi rolling | delve | 1.22.1-r6 | — |
| Wolfi rolling | dex | 2.40.0-r2 | — |
| Wolfi rolling | dgraph | 24.0.0-r1 | — |
| Wolfi rolling | direnv | 2.34.0-r5 | — |
| Wolfi rolling | dive | 0.12.0-r9 | — |
| Wolfi rolling | docker-compose | 2.28.1-r1 | — |
| Wolfi rolling | docker-credential-acr-env | 0.7.0-r14 | — |
| Wolfi rolling | docker-credential-ecr-login | 0.8.0-r2 | — |
| Wolfi rolling | docker-credential-gcr | 2.1.22-r7 | — |
| Wolfi rolling | dockerize | 0.7.0-r10 | — |
| Wolfi rolling | doppler-kubernetes-operator | 1.5.1-r3 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 4.0.0-r5 | — |
| Wolfi rolling | eksctl | 0.183.0-r1 | — |
| Wolfi rolling | envoy-ratelimit | 0.0.0_git20250317-r0 | — |
| Wolfi rolling | esbuild | 0.23.0-r1 | — |
| Wolfi rolling | extism | 1.5.2-r1 | — |
| Wolfi rolling | falcoctl | 0.8.0-r4 | — |
| Wolfi rolling | falcosidekick | 2.29.0-r1 | — |
| Wolfi rolling | ferretdb | 1.22.0-r1 | — |
| Wolfi rolling | flannel | 0.25.4-r1 | — |
| Wolfi rolling | fluent-bit-plugin-loki | 3.0.0-r4 | — |
| Wolfi rolling | fluent-operator +1 | 2.9.0-r2 | — |
| Wolfi rolling | flux | 2.3.0-r4 | — |
| Wolfi rolling | flux-helm-controller | 1.0.1-r4 | — |
| Wolfi rolling | flux-image-automation-controller | 0.38.0-r5 | — |
| Wolfi rolling | flux-image-reflector-controller | 0.32.0-r5 | — |
| Wolfi rolling | flux-kustomize-controller | 1.3.0-r6 | — |
| Wolfi rolling | flyte | 1.12.0-r4 | — |
| Wolfi rolling | fulcio | 1.4.5-r6 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 1.0.8-r11 | — |
| Wolfi rolling | fzf | 0.53.0-r1 | — |
| Wolfi rolling | gcsfuse | 1.4.2-r9 | — |
| Wolfi rolling | gh | 2.52.0-r2 | — |
| Wolfi rolling | ghaudit | 0.4.0-r5 | — |
| Wolfi rolling | git-lfs | 3.5.1-r7 | — |
| Wolfi rolling | gitleaks | 8.18.4-r1 | — |
| Wolfi rolling | gitness | 3.0.0_beta6-r5 | — |
| Wolfi rolling | gitsign | 0.10.2-r4 | — |
| Wolfi rolling | gke-gcloud-auth-plugin | 0.0.2-r12 | — |
| Wolfi rolling | glab | 1.42.0-r1 | — |
| Wolfi rolling | go-1.20 | No fix yet | — |
| Wolfi rolling | go-1.21 | 1.21.12-r0 | — |
| Wolfi rolling | go-1.22 | 1.22.5-r0 | — |
| Wolfi rolling | go-bindata | 3.1.3-r22 | — |
| Wolfi rolling | go-licenses | 1.6.0-r15 | — |
| Wolfi rolling | go-md2man | 2.0.4-r5 | — |
| Wolfi rolling | gobump | 0.7.7-r4 | — |
| Wolfi rolling | gobuster | 3.6.0-r13 | — |
| Wolfi rolling | golangci-lint | 1.59.1-r1 | — |
| Wolfi rolling | gops | 0.3.28-r12 | — |
| Wolfi rolling | goreleaser | 2.0.1-r3 | — |
| Wolfi rolling | gostatsd | 28.3.0-r5 | — |
| Wolfi rolling | gosu | 1.17-r7 | — |
| Wolfi rolling | govulncheck | 1.0.2-r6 | — |
| Wolfi rolling | gpu-feature-discovery | 0.8.2-r3 | — |
| Wolfi rolling | grafana-agent-operator | 0.41.1-r2 | — |
| Wolfi rolling | grafana-mimir | 2.12.0-r4 | — |
| Wolfi rolling | grpcurl | 1.9.1-r5 | — |
| Wolfi rolling | grype | 0.79.2-r1 | — |
| Wolfi rolling | guac | 0.7.2-r4 | — |
| Wolfi rolling | harbor-cli | 0.0.1-r4 | — |
| Wolfi rolling | harbor-registry | 3.0.0_alpha1-r6 | — |
| Wolfi rolling | harbor-scanner-trivy | 0.31.3-r2 | — |
| Wolfi rolling | hello-world-golang | 1.3-r5 | — |
| Wolfi rolling | helm | 3.15.2-r1 | — |
| Wolfi rolling | helm-3 | 3.19.2-r1 | — |
| Wolfi rolling | helm-4 +1 | 4.0.1-r1 | — |
| Wolfi rolling | helm-docs | 1.13.1-r2 | — |
| Wolfi rolling | helm-operator | 1.35.0-r1 | — |
| Wolfi rolling | helm-push | 0.10.4-r12 | — |
| Wolfi rolling | hey | 0.1.4-r15 | — |
| Wolfi rolling | hivemind | 1.1.0-r2 | — |
| Wolfi rolling | hubble | 0.13.5-r2 | — |
| Wolfi rolling | hubble-ui | 0.13.1-r3 | — |
| Wolfi rolling | hugo | 0.128.1-r1 | — |
| Wolfi rolling | hugo-extended | 0.128.0-r1 | — |
| Wolfi rolling | influx | 2.7.5-r3 | — |
| Wolfi rolling | ip-masq-agent | 2.9.3-r13 | — |
| Wolfi rolling | jitsucom-bulker | 2.7.0-r2 | — |
| Wolfi rolling | k3d | 5.6.3-r5 | — |
| Wolfi rolling | k3s | 1.30.2-r1 | — |
| Wolfi rolling | k8sgpt | 0.3.37-r1 | — |
| Wolfi rolling | k8sgpt-operator | 0.1.6-r1 | — |
| Wolfi rolling | k8ssandra-operator +1 | 1.17.0-r1 | — |
| Wolfi rolling | k9s | 0.32.5-r2 | — |
| Wolfi rolling | kaf | 0.2.8-r5 | — |
| Wolfi rolling | kafka-proxy | 0.3.10-r2 | — |
| Wolfi rolling | kafka_exporter | 1.7.0-r5 | — |
| Wolfi rolling | kaniko | 1.23.1-r1 | — |
| Wolfi rolling | kargo | 0.7.1-r2 | — |
| Wolfi rolling | katib-earlystopping +8 | 0.19.0-r31 | — |
| Wolfi rolling | katib-suggestion-goptuna-compat | 0.19.0-r40 | — |
| Wolfi rolling | kind | 0.23.0-r2 | — |
| Wolfi rolling | kine | 0.11.10-r1 | — |
| Wolfi rolling | ko | 0.15.4-r2 | — |
| Wolfi rolling | kor +1 | 0.5.2-r1 | — |
| Wolfi rolling | kots | 1.110.0-r1 | — |
| Wolfi rolling | kpt | 1.0.0_beta49-r8 | — |
| Wolfi rolling | kube-bench | 0.8.0-r1 | — |
| Wolfi rolling | kube-logging-operator | 4.8.0-r1 | — |
| Wolfi rolling | kube-rbac-proxy | 0.18.0-r1 | — |
| Wolfi rolling | kube-state-metrics | 2.12.0-r5 | — |
| Wolfi rolling | kube-vip | 0.8.1-r1 | — |
| Wolfi rolling | kubebuilder | 4.0.0-r2 | — |
| Wolfi rolling | kubecolor | 0.3.3-r2 | — |
| Wolfi rolling | kubeflow-pipelines | 2.2.0-r5 | — |
| Wolfi rolling | kuberay-operator | 1.0.0-r9 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.14.0-r1 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 5.0.1-r2 | — |
| Wolfi rolling | kubernetes-csi-livenessprobe | 2.13.0-r2 | — |
| Wolfi rolling | kubernetes-dashboard | 2.7.0-r20 | — |
| Wolfi rolling | kubernetes-dashboard-metrics-scraper | 1.0.9-r18 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.23.1-r2 | — |
| Wolfi rolling | kubernetes-event-exporter | 1.7-r10 | — |
| Wolfi rolling | kubernetes-ingress-defaultbackend | 1.30.1-r1 | — |
| Wolfi rolling | kubevela | 1.9.11-r6 | — |
| Wolfi rolling | kubewatch | 2.7.0-r1 | — |
| Wolfi rolling | kustomize | 5.4.2-r3 | — |
| Wolfi rolling | kwok | 0.5.2-r3 | — |
| Wolfi rolling | kyverno-policy-reporter | 2.20.0-r1 | — |
| Wolfi rolling | kyverno-policy-reporter-kyverno-plugin | 1.6.3-r7 | — |
| Wolfi rolling | kyverno-policy-reporter-ui | 1.9.2-r8 | — |
| Wolfi rolling | lazygit | 0.42.0-r2 | — |
| Wolfi rolling | libnvidia-container +1 | 1.15.0-r3 | — |
| Wolfi rolling | litefs | 0.5.11-r6 | — |
| Wolfi rolling | litestream | 0.3.13-r4 | — |
| Wolfi rolling | local-path-provisioner | 0.0.28-r1 | — |
| Wolfi rolling | local-static-provisioner | 2.7.0-r4 | — |
| Wolfi rolling | logstash-exporter | 1.6.4-r3 | — |
| Wolfi rolling | mage | 1.15.0-r9 | — |
| Wolfi rolling | mc | 0.20231220.071422-r10 | — |
| Wolfi rolling | memcached-exporter | 0.14.4-r1 | — |
| Wolfi rolling | metacontroller | 4.11.17-r1 | — |
| Wolfi rolling | metallb | 0.14.5-r4 | — |
| Wolfi rolling | metrics-server | 0.7.1-r5 | — |
| Wolfi rolling | minify | 2.20.35-r1 | — |
| Wolfi rolling | minio | 0.20240629.012047-r1 | — |
| Wolfi rolling | mkcert | 1.4.4-r4 | — |
| Wolfi rolling | mockery | 2.43.2-r2 | — |
| Wolfi rolling | mods | 1.4.1-r1 | — |
| Wolfi rolling | mongo-tools | 100.9.5-r2 | — |
| Wolfi rolling | multus-cni | 4.0.2-r7 | — |
| Wolfi rolling | nats | 0.1.4-r6 | — |
| Wolfi rolling | nats-server | 2.10.17-r1 | — |
| Wolfi rolling | nerdctl | 1.7.6-r6 | — |
| Wolfi rolling | neuvector-scanner | 0_git20240528-r5 | — |
| Wolfi rolling | neuvector-sigstore-interface | 0_git20240605-r1 | — |
| Wolfi rolling | newrelic-fluent-bit-output | 2.4.0-r5 | — |
| Wolfi rolling | newrelic-infra-operator | 0.19.0-r1 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.53.0-r1 | — |
| Wolfi rolling | newrelic-nri-kube-events | 2.10.0-r1 | — |
| Wolfi rolling | newrelic-nri-statsd | 2.9.1-r5 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r9 | — |
| Wolfi rolling | nodetaint | 0.0.4-r20 | — |
| Wolfi rolling | nri-apache | 1.12.5-r2 | — |
| Wolfi rolling | nri-cassandra | 2.13.6-r2 | — |
| Wolfi rolling | nri-consul | 2.7.12-r1 | — |
| Wolfi rolling | nri-discovery-kubernetes | 1.9.1-r2 | — |
| Wolfi rolling | nri-elasticsearch | 5.2.5-r2 | — |
| Wolfi rolling | nri-f5 | 2.7.5-r2 | — |
| Wolfi rolling | nri-haproxy | 3.0.1-r4 | — |
| Wolfi rolling | nri-jmx | 3.7.0-r2 | — |
| Wolfi rolling | nri-kafka | 3.7.3-r3 | — |
| Wolfi rolling | nri-kubernetes | 3.29.0-r1 | — |
| Wolfi rolling | nri-memcached | 2.5.6-r2 | — |
| Wolfi rolling | nri-mongodb | 2.8.5-r2 | — |
| Wolfi rolling | nri-mssql | 2.12.5-r1 | — |
| Wolfi rolling | nri-mysql | 1.10.8-r2 | — |
| Wolfi rolling | nri-nagios | 2.9.5-r2 | — |
| Wolfi rolling | nri-nginx | 3.4.6-r2 | — |
| Wolfi rolling | nri-postgresql | 2.13.5-r2 | — |
| Wolfi rolling | nri-prometheus | 2.21.3-r1 | — |
| Wolfi rolling | nri-redis | 1.11.6-r2 | — |
| Wolfi rolling | nsc | 2.8.6-r8 | — |
| Wolfi rolling | nuclei | 3.2.9-r2 | — |
| Wolfi rolling | oauth2-proxy | 7.6.0-r9 | — |
| Wolfi rolling | octo-sts | 0.2.0-r2 | — |
| Wolfi rolling | ollama | 0.1.48-r1 | — |
| Wolfi rolling | opa | 0.66.0-r1 | — |
| Wolfi rolling | opentelemetry-collector +1 | 0.104.0-r1 | — |
| Wolfi rolling | oras | 1.2.0-r2 | — |
| Wolfi rolling | osv-scanner | 1.8.1-r1 | — |
| Wolfi rolling | overmind | 2.5.1-r3 | — |
| Wolfi rolling | paranoia | 0.2.1-r16 | — |
| Wolfi rolling | petname | 2.11-r9 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r6 | — |
| Wolfi rolling | pluto | 5.19.4-r2 | — |
| Wolfi rolling | policy-controller | 0.9.0-r6 | — |
| Wolfi rolling | pombump | 0.0.13-r1 | — |
| Wolfi rolling | postgres-operator | 1.12.2-r1 | — |
| Wolfi rolling | prometheus-adapter +1 | 0.12.0-r2 | — |
| Wolfi rolling | prometheus-alertmanager | 0.27.0-r7 | — |
| Wolfi rolling | protoc-gen-go | 1.34.2-r1 | — |
| Wolfi rolling | protoc-gen-go-grpc | 1.4.0-r2 | — |
| Wolfi rolling | pulumi | 3.122.0-r1 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 1.15.0-r7 | — |
| Wolfi rolling | pulumi-language-dotnet | 3.64.0-r1 | — |
| Wolfi rolling | pulumi-language-yaml +1 | 1.9.0-r1 | — |
| Wolfi rolling | q | 0.19.2-r7 | — |
| Wolfi rolling | rabbitmq-default-user-credential-updater | 1.0.4-r3 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator | 1.14.2-r2 | — |
| Wolfi rolling | rclone | 1.67.0-r1 | — |
| Wolfi rolling | regclient | 0.6.1-r2 | — |
| Wolfi rolling | rekor | 1.3.6-r7 | — |
| Wolfi rolling | render-template | 1.0.7-r1 | — |
| Wolfi rolling | restic | 0.16.5-r1 | — |
| Wolfi rolling | rootlesskit | 2.1.0-r3 | — |
| Wolfi rolling | runc | 1.1.13-r1 | — |
| Wolfi rolling | s5cmd | 2.2.2-r5 | — |
| Wolfi rolling | sbom-convert | 0.0.4-r1 | — |
| Wolfi rolling | sbom-scorecard | 0.0.7-r14 | — |
| Wolfi rolling | scorecard | 4.13.1-r11 | — |
| Wolfi rolling | secrets-store-csi-driver | 1.4.4-r1 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-aws | 0.3.9-r2 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.5.3-r1 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.5.0-r7 | — |
| Wolfi rolling | shfmt | 3.8.0-r5 | — |
| Wolfi rolling | skaffold | 2.12.0-r2 | — |
| Wolfi rolling | skopeo | 1.15.1-r3 | — |
| Wolfi rolling | slsa-verifier | 2.5.1-r9 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r9 | — |
| Wolfi rolling | snyk-cli | 1.1292.1-r1 | — |
| Wolfi rolling | sonobuoy | 0.57.1-r8 | — |
| Wolfi rolling | speedtest-go | 1.7.7-r2 | — |
| Wolfi rolling | spegel | 0.0.23-r1 | — |
| Wolfi rolling | spqr +2 | 1.3.0-r5 | — |
| Wolfi rolling | src | 5.4.0-r2 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r17 | — |
| Wolfi rolling | stakater-reloader | 1.0.115-r1 | — |
| Wolfi rolling | step | 0.26.2-r1 | — |
| Wolfi rolling | step-ca | 0.26.2-r2 | — |
| Wolfi rolling | stern | 1.30.0-r2 | — |
| Wolfi rolling | supercronic | 0.2.30-r1 | — |
| Wolfi rolling | syft +1 | 1.8.0-r1 | — |
| Wolfi rolling | tailscale | 1.68.1-r1 | — |
| Wolfi rolling | task | 3.38.0-r1 | — |
| Wolfi rolling | tekton-chains | 0.21.1-r3 | — |
| Wolfi rolling | temporal +1 | 0.13.1-r1 | — |
| Wolfi rolling | temporal-ui-server | 2.27.3-r1 | — |
| Wolfi rolling | terraform | 1.5.7-r15 | — |
| Wolfi rolling | terraform-docs | 0.18.0-r2 | — |
| Wolfi rolling | terraform-provider-aws | 5.56.0-r1 | — |
| Wolfi rolling | terraform-provider-azurerm | 3.110.0-r1 | — |
| Wolfi rolling | terraform-provider-google | 5.36.0-r1 | — |
| Wolfi rolling | terragrunt | 0.59.6-r1 | — |
| Wolfi rolling | tflint | 0.51.2-r1 | — |
| Wolfi rolling | thanos | 0.35.1-r3 | — |
| Wolfi rolling | thanos-operator | 0.3.7-r19 | — |
| Wolfi rolling | timestamp-authority | 1.2.2-r11 | — |
| Wolfi rolling | timoni | 0.22.0-r1 | — |
| Wolfi rolling | tkn | 0.37.0-r4 | — |
| Wolfi rolling | trillian | 1.6.0-r8 | — |
| Wolfi rolling | trust-manager | 0.11.0-r2 | — |
| Wolfi rolling | up +1 | 0.31.0-r2 | — |
| Wolfi rolling | vault-k8s | 1.4.1-r3 | — |
| Wolfi rolling | vcluster | 0.19.6-r1 | — |
| Wolfi rolling | velero | 1.14.0-r2 | — |
| Wolfi rolling | velero-plugin-for-aws | 1.10.0-r1 | — |
| Wolfi rolling | velero-plugin-for-csi | 0.7.1-r6 | — |
| Wolfi rolling | vertical-pod-autoscaler | 1.1.2-r3 | — |
| Wolfi rolling | vexctl | 0.2.6-r10 | — |
| Wolfi rolling | volume-modifier-for-k8s | 0.2.1-r7 | — |
| Wolfi rolling | vt-cli +1 | 1.0.0-r8 | — |
| Wolfi rolling | wait-for-port | 1.0.8-r1 | — |
| Wolfi rolling | wave | 0.9.0-r1 | — |
| Wolfi rolling | wazero | 1.7.3-r1 | — |
| Wolfi rolling | weaviate | 1.25.6-r1 | — |
| Wolfi rolling | wgcf | 2.2.22-r3 | — |
| Wolfi rolling | whereabouts | 0.7.0-r2 | — |
| Wolfi rolling | wire-go | 0.6.0-r5 | — |
| Wolfi rolling | wireguard-go | 0.0.20230223-r13 | — |
| Wolfi rolling | wolfictl | 0.19.2-r1 | — |
| Wolfi rolling | wuzz | 0.5.0-r1 | — |
| Wolfi rolling | xcaddy | 0.4.2-r2 | — |
| Wolfi rolling | yam | 0.0.10-r1 | — |
| Wolfi rolling | yq | 4.44.2-r1 | — |
| Wolfi rolling | ytt | 0.49.1-r1 | — |
| Wolfi rolling | zarf | 0.35.0-r3 | — |
| Wolfi rolling | zot | 2.0.4-r10 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.21.12 · >= 1.22.0-0, < 1.22.5 | 1.21.12, 1.22.5 | GO-2024-2963 |
Advisories 50
- ALSA-2025:7256 Moderate: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6913 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9089 Moderate: containernetworking-plugins security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9115 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9135 Moderate: toolbox security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9097 Moderate: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9098 Moderate: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6969 Moderate: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:7349 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6908 Important: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:7256 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:6913 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:6908 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:9135 Red Hat Security Advisory: toolbox security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9102 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9115 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9097 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9098 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:9089 Red Hat Security Advisory: containernetworking-plugins security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:7349 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:6914 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:6969 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:6912 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:10133 Red Hat Security Advisory: rhc-worker-script security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- USN-7109-1 golang-1.18 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-7111-1 golang-1.17 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7081-1 golang-1.22 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RLSA-2024:9102 Moderate: podman security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:9135 Moderate: toolbox security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:6913 Important: golang security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:6908 Important: go-toolset:rhel8 security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:7349 Moderate: grafana security update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2024:14107-1 forgejo-7.0.5-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14098-1 go1.22-1.22.5-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2295-1 Security update for go1.22 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2309-1 Security update for go1.22 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3360-1 Security update for container-suseconnect SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14198-1 istioctl-1.22.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3938-1 Security update for go1.22-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14091-1 go1.21-1.21.12-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3089-1 Security update for go1.21-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3772-1 Security update for go1.22-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3755-1 Security update for go1.21-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2294-1 Security update for go1.21 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2308-1 Security update for go1.21 SUSE / openSUSE Security Updates · Feb 4, 2026
- RLSA-2025:7256 Moderate: git-lfs security update Rocky Linux Security Advisories · Oct 7, 2025
- WID-SEC-2024-1505 Golang Go: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Aug 4, 2025
- ELSA-2025-7256 Moderate: git-lfs security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 16, 2025
- RLSA-2024:6969 Moderate: container-tools:rhel8 security update Rocky Linux Security Advisories · May 7, 2025
- NCSC-2025-0021 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Jan 22, 2025