Description
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | go/build/constraint | < 1.22.7, 1.23.0-0 – < 1.23.1 | 1.22.7 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | golang-1.21 | No fix yet | — |
| Ubuntu 24.04 LTS | golang-1.22 | 1.22.2-2ubuntu0.3 | USN-7081-1 |
| Ubuntu 22.04 LTS | golang-1.17 | 1.17.13-3ubuntu1.3 | USN-7111-1 |
| Ubuntu 22.04 LTS | golang-1.18 | 1.18.1-1ubuntu1.2 | USN-7109-1 |
| Ubuntu 22.04 LTS | golang-1.20 +1 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.22 | 1.22.2-2~22.04.2 | USN-7081-1 |
| Ubuntu 20.04 LTS | golang-1.13 +3 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~20.04.3 | USN-7109-1 |
| Ubuntu 20.04 LTS | golang-1.22 | 1.22.2-2~20.04.2 | USN-7081-1 |
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~18.04.4+esm1 | USN-7109-1 |
| Ubuntu Pro 16.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~16.04.6+esm1 | USN-7109-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | buildah +1 | 2:1.33.9-1.el9_4 | RHSA-2024:9459, RHSA-2024:8112 |
| RHEL 9 | golang +6 | 1.21.13-3.el9_4 | RHSA-2024:6913 |
| RHEL 9 | osbuild-composer +2 | 132-1.el9 | RHSA-2025:7118 |
| RHEL 9 | podman +4 | 4:4.9.4-13.el9_4 | RHSA-2024:9454, RHSA-2024:8039 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | delve | 1.21.2-4.module+el8.10.0+22329+6cd5c9c6 | RHSA-2024:6908 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | go-toolset | 1.21.13-1.module+el8.10.0+22329+6cd5c9c6 | RHSA-2024:6908 |
| RHEL 8 | golang +5 | 1.21.13-2.module+el8.10.0+22329+6cd5c9c6 | RHSA-2024:6908 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | podman +6 | 4:4.9.4-13.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | python-podman +1 | 4.9.0-2.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | runc | 1:1.1.12-5.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+22346+28c02849 | RHSA-2024:8038 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Openshift Ironic 4 | openstack-ironic +5 | 1:21.0.1-0.20240913135525.114badc.el9 | RHSA-2024:8694 |
| Red Hat Openshift Ironic 4 | python-zipp +1 | 3.19.1-1.el9 | RHSA-2024:8232 |
| Red Hat OpenShift 4 | buildah +1 | 1:1.29.1-5.rhaos4.13.el9 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | conmon | 3:2.1.7-5.rhaos4.13.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-4.rhaos4.12.el8 | RHSA-2024:8700, RHSA-2024:8694, RHSA-2024:8690 |
| Red Hat OpenShift 4 | cri-o | 1.25.5-5.rhaos4.12.git53dc492.el9 | RHSA-2024:8700, RHSA-2024:8694, RHSA-2024:8690 |
| Red Hat OpenShift 4 | cri-tools | 1.26.0-7.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | haproxy +1 | 2.2.24-5.rhaos4.13.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | ignition +1 | 2.15.0-10.rhaos4.13.el9 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | openshift +1 | 4.13.0-202410181847.p0.g53fd427.assembly.stream.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.13.0-202410181847.p0.g1397e80.assembly.stream.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.13.0-202410181847.p0.gd192e90.assembly.stream.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | openshift4-aws-iso | 4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | podman +6 | 3:4.2.0-12.rhaos4.12.el9 | RHSA-2024:8700, RHSA-2024:8694, RHSA-2024:8690 |
| Red Hat OpenShift 4 | runc | 4:1.1.14-2.rhaos4.13.el8 | RHSA-2024:8690 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.9.4-7.rhaos4.12.el8 | RHSA-2024:8700, RHSA-2024:8694, RHSA-2024:8690 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | buildah +1 | 2:1.33.9-1.el9_4 | ALSA-2024:9459, ALSA-2024:8112 |
| AlmaLinux 9 | golang +6 | 1.21.13-3.el9_4 | ALSA-2024:6913 |
| AlmaLinux 9 | osbuild +6 | 141-1.el9.alma.1 | ALSA-2025:7118 |
| AlmaLinux 9 | osbuild-composer +2 | 132-1.el9.alma.1 | ALSA-2025:7118 |
| AlmaLinux 9 | podman +4 | 4:4.9.4-13.el9_4 | ALSA-2024:9454, ALSA-2024:8039 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2024:8038 |
| AlmaLinux 8 | buildah +1 | 2:1.33.8-4.module_el8.10.0+3876+e55593a8 | ALSA-2024:8038 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+3876+e55593a8 | ALSA-2024:8038 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | ALSA-2024:8038 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2024:8038 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-5.module_el8.10.0+3876+e55593a8 | ALSA-2024:8038 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2024:8038 |
| AlmaLinux 8 | crit +2 | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2024:8038 |
| AlmaLinux 8 | criu-devel +1 | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2024:8038 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+3845+87b84552 | ALSA-2024:8038 |
| AlmaLinux 8 | delve | 1.21.2-4.module_el8.10.0+3895+92d465e0 | ALSA-2024:6908 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:8038 |
| AlmaLinux 8 | go-toolset | 1.21.13-1.module_el8.10.0+3895+92d465e0 | ALSA-2024:6908 |
| AlmaLinux 8 | golang +5 | 1.21.13-2.module_el8.10.0+3895+92d465e0 | ALSA-2024:6908 |
| AlmaLinux 8 | libslirp +1 | 4.4.0-2.module_el8.10.0+3845+87b84552 | ALSA-2024:8038 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:8038 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3792+03eaed9c | ALSA-2024:8038 |
| AlmaLinux 8 | podman +4 | 4:4.9.4-13.module_el8.10.0+3898+7a25cb1a | ALSA-2024:8038 |
| AlmaLinux 8 | podman-docker +1 | 4:4.9.4-13.module_el8.10.0+3901+4b80ecd7 | ALSA-2024:8038 |
| AlmaLinux 8 | python3-podman | 4.9.0-2.module_el8.10.0+3876+e55593a8 | ALSA-2024:8038 |
| AlmaLinux 8 | runc | 1:1.1.12-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2024:8038 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-3.module_el8.10.0+3876+e55593a8 | ALSA-2024:8038 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3845+87b84552 | ALSA-2024:8038 |
| AlmaLinux 8 | toolbox | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2024:8038 |
| AlmaLinux 8 | toolbox-tests | 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f | ALSA-2024:8038 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+3876+e55593a8 | ALSA-2024:8038 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | golang | 1.21.13-3.el9_4 | RLSA-2024:6913 |
| Rocky Linux 9 | podman | 4:4.9.4-13.el9_4 | RLSA-2024:8039 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2024:8038 |
| Rocky Linux 8 | buildah | 2:1.33.8-4.module+el8.10.0+1843+6892ab28 | RLSA-2024:8038 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+1843+6892ab28 | RLSA-2024:8038 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2024:8038 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | delve | 1.21.2-4.module+el8.10.0+1868+7f5969f2 | RLSA-2024:6908 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | go-toolset | 1.21.13-1.module+el8.10.0+1868+7f5969f2 | RLSA-2024:6908 |
| Rocky Linux 8 | golang | 1.21.13-2.module+el8.10.0+1868+7f5969f2 | RLSA-2024:6908 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | podman | 4:4.9.4-13.module+el8.10.0+1871+e6fa1069 | RLSA-2024:8038 |
| Rocky Linux 8 | python-podman | 4.9.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2024:8038 |
| Rocky Linux 8 | runc | 1:1.1.12-5.module+el8.10.0+1874+ce489889 | RLSA-2024:8038 |
| Rocky Linux 8 | skopeo | 2:1.14.5-3.module+el8.10.0+1843+6892ab28 | RLSA-2024:8038 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2024:8038 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2024:8038 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | go1.22 | 1.22.7-150000.1.27.1 | SUSE-SU-2024:3213-1 |
| SLES 15 SP6 | go1.22-openssl | 1.22.7.1-150600.13.3.1 | SUSE-SU-2024:3938-1 |
| SLES 15 SP6 | go1.23 | 1.23.1-150000.1.6.1 | SUSE-SU-2024:3214-1 |
| SLES 15 SP6 | go1.23-openssl | 1.23.2.2-150600.13.3.1 | SUSE-SU-2024:3937-1 |
| SLES 15 SP6 | kubernetes1.25 | 1.25.16-150400.9.18.1 | SUSE-SU-2024:3457-1 |
| SLES 15 SP6 | kubernetes1.26 | 1.26.15-150400.9.16.1 | SUSE-SU-2024:3456-1 |
| SLES 15 SP6 | kubernetes1.27 | 1.27.16-150400.9.12.1 | SUSE-SU-2024:3455-1 |
| SLES 15 SP6 | kubernetes1.28 | 1.28.13-150400.9.10.1 | SUSE-SU-2024:3454-1 |
| SLES 15 SP5 | go1.21-openssl | 1.21.13.4-150000.1.14.1 | SUSE-SU-2024:3809-1 |
| SLES 15 SP5 | go1.22 | 1.22.7-150000.1.27.1 | SUSE-SU-2024:3213-1 |
| SLES 15 SP5 | go1.22-openssl | 1.22.7.1-150000.1.3.1 | SUSE-SU-2024:3772-1 |
| SLES 15 SP5 | go1.23 | 1.23.1-150000.1.6.1 | SUSE-SU-2024:3214-1 |
| SLES 15 SP5 | go1.23-openssl | 1.23.2.2-150000.1.3.1 | SUSE-SU-2024:3773-1 |
| SLES 15 SP5 | kubernetes1.24 | 1.24.17-150500.3.24.1 | SUSE-SU-2024:3453-1 |
| SLES 15 SP5 | kubernetes1.25 | 1.25.16-150400.9.18.1 | SUSE-SU-2024:3457-1 |
| SLES 15 SP5 | kubernetes1.26 | 1.26.15-150400.9.16.1 | SUSE-SU-2024:3456-1 |
| SLES 15 SP5 | kubernetes1.27 | 1.27.16-150400.9.12.1 | SUSE-SU-2024:3455-1 |
| SLES 15 SP5 | kubernetes1.28 | 1.28.13-150400.9.10.1 | SUSE-SU-2024:3454-1 |
| SLES 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.18.1 | SUSE-SU-2024:3458-1 |
| SLES 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.18.1 | SUSE-SU-2024:3457-1 |
| SLES 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.16.1 | SUSE-SU-2024:3456-1 |
| SLES 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.12.1 | SUSE-SU-2024:3455-1 |
| SLES 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.10.1 | SUSE-SU-2024:3454-1 |
| SLES 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.9.1 | SUSE-SU-2024:3459-1 |
| SLES 12 SP5 | go1.22 | 1.22.7-1.21.1 | SUSE-SU-2024:3196-1 |
| SLES 12 SP5 | go1.23 | 1.23.1-1.6.1 | SUSE-SU-2024:3197-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.18.1 | SUSE-SU-2024:3458-1 |
| SLES for SAP 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.18.1 | SUSE-SU-2024:3457-1 |
| SLES for SAP 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.16.1 | SUSE-SU-2024:3456-1 |
| SLES for SAP 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.12.1 | SUSE-SU-2024:3455-1 |
| SLES for SAP 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.10.1 | SUSE-SU-2024:3454-1 |
| SLES for SAP 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.9.1 | SUSE-SU-2024:3459-1 |
| SLE HPC 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.18.1 | SUSE-SU-2024:3458-1 |
| SLE HPC 15 SP4 | kubernetes1.25 | 1.25.16-150400.9.18.1 | SUSE-SU-2024:3457-1 |
| SLE HPC 15 SP4 | kubernetes1.26 | 1.26.15-150400.9.16.1 | SUSE-SU-2024:3456-1 |
| SLE HPC 15 SP4 | kubernetes1.27 | 1.27.16-150400.9.12.1 | SUSE-SU-2024:3455-1 |
| SLE HPC 15 SP4 | kubernetes1.28 | 1.28.13-150400.9.10.1 | SUSE-SU-2024:3454-1 |
| SLE HPC 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.9.1 | SUSE-SU-2024:3459-1 |
| SUSE Package Hub 15 SP6 | trivy | 0.58.2-bp156.2.6.1 | openSUSE-SU-2025:0056-1 |
| SUSE Enterprise Storage 7.1 | kubernetes1.24 | 1.24.17-150300.7.9.1 | SUSE-SU-2024:3459-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.22 | 1.22.7-1.1 | openSUSE-SU-2024:14323-1 |
| openSUSE Tumbleweed | go1.23 | 1.23.1-1.1 | openSUSE-SU-2024:14324-1 |
| openSUSE Leap 15.6 | go1.22 | 1.22.7-150000.1.27.1 | SUSE-SU-2024:3213-1 |
| openSUSE Leap 15.6 | go1.22-openssl | 1.22.7.1-150600.13.3.1 | SUSE-SU-2024:3938-1 |
| openSUSE Leap 15.6 | go1.23 | 1.23.1-150000.1.6.1 | SUSE-SU-2024:3214-1 |
| openSUSE Leap 15.6 | go1.23-openssl | 1.23.2.2-150600.13.3.1 | SUSE-SU-2024:3937-1 |
| openSUSE Leap 15.6 | kubernetes1.24 | 1.24.17-150500.3.24.1 | SUSE-SU-2024:3453-1 |
| openSUSE Leap 15.6 | kubernetes1.25 | 1.25.16-150400.9.18.1 | SUSE-SU-2024:3457-1 |
| openSUSE Leap 15.6 | kubernetes1.26 | 1.26.15-150400.9.16.1 | SUSE-SU-2024:3456-1 |
| openSUSE Leap 15.6 | kubernetes1.27 | 1.27.16-150400.9.12.1 | SUSE-SU-2024:3455-1 |
| openSUSE Leap 15.6 | kubernetes1.28 | 1.28.13-150400.9.10.1 | SUSE-SU-2024:3454-1 |
| openSUSE Leap 15.6 | trivy | 0.58.2-bp156.2.6.1 | openSUSE-SU-2025:0056-1 |
| openSUSE Leap 15.5 | go1.21-openssl | 1.21.13.4-150000.1.14.1 | SUSE-SU-2024:3809-1 |
| openSUSE Leap 15.5 | go1.22 | 1.22.7-150000.1.27.1 | SUSE-SU-2024:3213-1 |
| openSUSE Leap 15.5 | go1.22-openssl | 1.22.7.1-150000.1.3.1 | SUSE-SU-2024:3772-1 |
| openSUSE Leap 15.5 | go1.23 | 1.23.1-150000.1.6.1 | SUSE-SU-2024:3214-1 |
| openSUSE Leap 15.5 | go1.23-openssl | 1.23.2.2-150000.1.3.1 | SUSE-SU-2024:3773-1 |
| openSUSE Leap 15.5 | kubernetes1.24 | 1.24.17-150500.3.24.1 | SUSE-SU-2024:3453-1 |
| openSUSE Leap 15.5 | kubernetes1.25 | 1.25.16-150400.9.18.1 | SUSE-SU-2024:3457-1 |
| openSUSE Leap 15.5 | kubernetes1.26 | 1.26.15-150400.9.16.1 | SUSE-SU-2024:3456-1 |
| openSUSE Leap 15.5 | kubernetes1.27 | 1.27.16-150400.9.12.1 | SUSE-SU-2024:3455-1 |
| openSUSE Leap 15.5 | kubernetes1.28 | 1.28.13-150400.9.10.1 | SUSE-SU-2024:3454-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.23.1-r0 | — |
| Alpine v3.23 | go | 1.23.1-r0 | — |
| Alpine v3.22 | go | 1.23.1-r0 | — |
| Alpine v3.21 | go | 1.23.1-r0 | — |
| Alpine v3.20 | go | 1.22.7-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-cloudwatch-agent | 1.300052.1-1.amzn2023 | ALAS2023-2025-880 |
| Amazon Linux 2023 | golang +6 | 1.22.7-1.amzn2023.0.1 | ALAS2023-2024-733 |
| Amazon Linux 2 | amazon-cloudwatch-agent | 1.300052.1-1.amzn2 | ALAS2-2025-2779 |
| Amazon Linux 2 | golang +6 | 1.22.7-1.amzn2.0.1 | ALAS2-2024-2643 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | golang | 1.18.8-6 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | buildah +1 | 2:1.33.9-1.0.1.el9_4 | ELSA-2024-9459, ELSA-2024-8112 |
| Oracle Linux 9 | golang +6 | 1.21.13-3.el9_4 | ELSA-2024-6913 |
| Oracle Linux 9 | osbuild +6 | 141-1.0.1.el9 | ELSA-2025-7118 |
| Oracle Linux 9 | osbuild-composer +2 | 132-1.0.2.el9 | ELSA-2025-7118 |
| Oracle Linux 9 | podman +4 | 4:4.9.4-13.0.1.el9_4 | ELSA-2024-9454, ELSA-2024-8039 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | buildah +1 | 2:1.33.8-4.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-5.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | delve | 1.21.2-4.0.1.module+el8.10.0+90407+20770c94 | ELSA-2024-6908 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | go-toolset | 1.21.13-1.module+el8.10.0+90407+20770c94 | ELSA-2024-6908 |
| Oracle Linux 8 | golang +5 | 1.21.13-2.module+el8.10.0+90407+20770c94 | ELSA-2024-6908 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-13.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | python3-podman | 4.9.0-2.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | runc | 1:1.1.12-5.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-3.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90416+5b0f6a17 | ELSA-2024-8038 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r18 | — |
| Wolfi rolling | actions-runner-controller +1 | 0.9.3-r2 | — |
| Wolfi rolling | addon-resizer +1 | 1.8.22-r2 | — |
| Wolfi rolling | age | 1.2.0-r2 | — |
| Wolfi rolling | amass | 4.2.0-r13 | — |
| Wolfi rolling | apko +1 | 0.18.0-r0 | — |
| Wolfi rolling | argo-workflows | 3.6.5-r2 | — |
| Wolfi rolling | atlantis | 0.29.0-r1 | — |
| Wolfi rolling | authservice | 1.0.2-r0 | — |
| Wolfi rolling | aws-efs-csi-driver | 2.0.7-r1 | — |
| Wolfi rolling | aws-flb-cloudwatch +1 | 1.9.4-r13 | — |
| Wolfi rolling | aws-flb-firehose +1 | 1.7.2-r13 | — |
| Wolfi rolling | aws-flb-kinesis +1 | 1.10.2-r14 | — |
| Wolfi rolling | aws-load-balancer-controller +1 | 2.8.2-r1 | — |
| Wolfi rolling | aws-network-policy-agent +1 | 1.1.2-r2 | — |
| Wolfi rolling | azcopy | 10.26.0-r1 | — |
| Wolfi rolling | bank-vaults +1 | 1.20.4-r18 | — |
| Wolfi rolling | bazelisk | 1.21.0-r0 | — |
| Wolfi rolling | bom | 0.6.0-r10 | — |
| Wolfi rolling | boring-registry | 0.15.2-r1 | — |
| Wolfi rolling | buf | 1.40.1-r0 | — |
| Wolfi rolling | buildah | 1.37.2-r1 | — |
| Wolfi rolling | buildctl +1 | 0.20.1-r3 | — |
| Wolfi rolling | caddy +2 | 2.8.4-r3 | — |
| Wolfi rolling | cadvisor +1 | 0.50.0-r3 | — |
| Wolfi rolling | capslock | 0.2.5-r0 | — |
| Wolfi rolling | cass-operator +2 | 1.22.2-r0 | — |
| Wolfi rolling | cert-exporter +2 | 2.13.0-r1 | — |
| Wolfi rolling | cert-manager-cmctl | 2.1.1-r0 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.1-r6 | — |
| Wolfi rolling | certificate-transparency +1 | 1.2.1-r4 | — |
| Wolfi rolling | cfssl +7 | 1.6.5-r9 | — |
| Wolfi rolling | chartmuseum | 0.16.2-r6 | — |
| Wolfi rolling | chezmoi | 2.52.2-r0 | — |
| Wolfi rolling | cilium-cli | 0.16.17-r0 | — |
| Wolfi rolling | cloudflared | 2024.1.0-r13 | — |
| Wolfi rolling | cluster-proportional-autoscaler +1 | 1.8.11-r9 | — |
| Wolfi rolling | cni-plugins +42 | 1.5.1-r2 | — |
| Wolfi rolling | configmap-reload | 0.13.1-r2 | — |
| Wolfi rolling | confluent-common-docker +1 | 7.6.0-r8 | — |
| Wolfi rolling | controller-gen | 0.16.2-r0 | — |
| Wolfi rolling | cortex | 1.18.0-r1 | — |
| Wolfi rolling | cosign | 2.4.0-r3 | — |
| Wolfi rolling | crane +1 | 0.20.2-r1 | — |
| Wolfi rolling | crictl +2 | 1.31.1-r1 | — |
| Wolfi rolling | croc | 10.0.12-r1 | — |
| Wolfi rolling | crossplane-crank | 1.16.0-r5 | — |
| Wolfi rolling | ctop | 0.7.7-r20 | — |
| Wolfi rolling | cue +3 | 0.10.0-r1 | — |
| Wolfi rolling | dagdotdev | 0.0.6-r1 | — |
| Wolfi rolling | dagger | 0.12.7-r0 | — |
| Wolfi rolling | dask-gateway +1 | 2024.1.0-r10 | — |
| Wolfi rolling | dataplaneapi | 3.0.0-r0 | — |
| Wolfi rolling | dbmate | 2.21.0-r0 | — |
| Wolfi rolling | delve | 1.23.0-r1 | — |
| Wolfi rolling | descheduler | 0.31.0-r0 | — |
| Wolfi rolling | dex +1 | 2.41.1-r1 | — |
| Wolfi rolling | dgraph | 24.0.2-r1 | — |
| Wolfi rolling | direnv | 2.34.0-r6 | — |
| Wolfi rolling | distribution | 3.0.0-r2 | — |
| Wolfi rolling | dive | 0.12.0-r12 | — |
| Wolfi rolling | docker-cli | 27.2.1-r0 | — |
| Wolfi rolling | docker-compose | 2.29.3-r0 | — |
| Wolfi rolling | docker-credential-acr-env | 0.7.0-r15 | — |
| Wolfi rolling | docker-credential-ecr-login | 0.8.0-r3 | — |
| Wolfi rolling | docker-credential-gcr | 2.1.25-r0 | — |
| Wolfi rolling | doppler-kubernetes-operator | 1.5.1-r4 | — |
| Wolfi rolling | eksctl | 0.190.0-r1 | — |
| Wolfi rolling | envoy-ratelimit | 0.0_git20240815-r1 | — |
| Wolfi rolling | esbuild | 0.23.1-r1 | — |
| Wolfi rolling | extism | 1.5.2-r2 | — |
| Wolfi rolling | falcoctl | 0.9.1-r0 | — |
| Wolfi rolling | falcosidekick | 2.29.0-r3 | — |
| Wolfi rolling | ferretdb +2 | 1.24.0-r1 | — |
| Wolfi rolling | flannel +1 | 0.25.6-r1 | — |
| Wolfi rolling | fluent-bit-plugin-loki | 3.1.1-r1 | — |
| Wolfi rolling | fluent-watcher +3 | 3.1.0-r1 | — |
| Wolfi rolling | flux | 2.3.0-r7 | — |
| Wolfi rolling | flux-helm-controller +1 | 1.0.1-r7 | — |
| Wolfi rolling | flux-image-automation-controller +2 | 0.38.0-r6 | — |
| Wolfi rolling | flux-image-reflector-controller +1 | 0.32.0-r8 | — |
| Wolfi rolling | flux-kustomize-controller +1 | 1.3.0-r7 | — |
| Wolfi rolling | flux-notification-controller +1 | 1.3.0-r6 | — |
| Wolfi rolling | flux-source-controller +1 | 1.3.0-r8 | — |
| Wolfi rolling | flyte | 1.13.1-r1 | — |
| Wolfi rolling | fq +3 | 0.12.0-r1 | — |
| Wolfi rolling | frp | 0.60.0-r1 | — |
| Wolfi rolling | fscrypt | 0.3.5-r1 | — |
| Wolfi rolling | fulcio +2 | 1.6.4-r1 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 1.0.8-r12 | — |
| Wolfi rolling | fzf +1 | 0.55.0-r1 | — |
| Wolfi rolling | gcsfuse | 1.4.2-r11 | — |
| Wolfi rolling | gh | 2.56.0-r0 | — |
| Wolfi rolling | ghaudit | 0.4.0-r6 | — |
| Wolfi rolling | git-lfs +1 | 3.5.1-r8 | — |
| Wolfi rolling | gitea +1 | 1.22.2-r1 | — |
| Wolfi rolling | gitleaks | 8.19.0-r0 | — |
| Wolfi rolling | gitness | 3.0.0_beta6-r6 | — |
| Wolfi rolling | gitsign +2 | 0.10.2-r7 | — |
| Wolfi rolling | gke-gcloud-auth-plugin | 0.0.2-r13 | — |
| Wolfi rolling | glab | 1.46.1-r0 | — |
| Wolfi rolling | glow | 2.0.0-r1 | — |
| Wolfi rolling | go-1.20 +4 | No fix yet | — |
| Wolfi rolling | go-1.22 | 1.22.7-r0 | — |
| Wolfi rolling | go-1.23 | 1.23.1-r0 | — |
| Wolfi rolling | go-bindata | 3.1.3-r23 | — |
| Wolfi rolling | go-licenses | 1.6.0-r16 | — |
| Wolfi rolling | go-md2man +1 | 2.0.5-r0 | — |
| Wolfi rolling | gobump +3 | 0.8.0-r1 | — |
| Wolfi rolling | gobuster | 3.6.0-r14 | — |
| Wolfi rolling | golangci-lint | 1.61.0-r0 | — |
| Wolfi rolling | gomplate | 4.1.0-r2 | — |
| Wolfi rolling | gops | 0.3.28-r13 | — |
| Wolfi rolling | goreleaser | 2.3.0-r0 | — |
| Wolfi rolling | gostatsd | 28.3.0-r6 | — |
| Wolfi rolling | gosu | 1.17-r8 | — |
| Wolfi rolling | govulncheck | 1.0.2-r7 | — |
| Wolfi rolling | gptscript | 0.9.4-r1 | — |
| Wolfi rolling | grafana-agent-operator | 0.43.0-r0 | — |
| Wolfi rolling | grafana-alloy | 1.3.1-r2 | — |
| Wolfi rolling | grafana-mimir | 2.13.0-r3 | — |
| Wolfi rolling | grafana-operator +1 | 5.13.0-r0 | — |
| Wolfi rolling | grpc-health-probe +1 | 0.4.32-r1 | — |
| Wolfi rolling | grpcurl | 1.9.1-r6 | — |
| Wolfi rolling | grype | 0.80.1-r0 | — |
| Wolfi rolling | guac | 0.8.2-r0 | — |
| Wolfi rolling | harbor-cli | 0.0.1-r5 | — |
| Wolfi rolling | harbor-registry | 3.0.0_alpha1-r7 | — |
| Wolfi rolling | harbor-scanner-trivy | 0.31.4-r1 | — |
| Wolfi rolling | hcloud | 1.47.0-r1 | — |
| Wolfi rolling | hello-world-golang | 1.3-r6 | — |
| Wolfi rolling | helm | 3.16.0-r0 | — |
| Wolfi rolling | helm-3 | 3.19.2-r1 | — |
| Wolfi rolling | helm-4 | 4.0.1-r1 | — |
| Wolfi rolling | helm-docs | 1.14.2-r1 | — |
| Wolfi rolling | helm-operator +1 | 1.36.1-r2 | — |
| Wolfi rolling | helm-push | 0.10.4-r15 | — |
| Wolfi rolling | hey | 0.1.4-r16 | — |
| Wolfi rolling | hivemind | 1.1.0-r3 | — |
| Wolfi rolling | http-echo | 1.0.0-r9 | — |
| Wolfi rolling | hubble +1 | 1.16.1-r0 | — |
| Wolfi rolling | hubble-ui +1 | 0.13.1-r6 | — |
| Wolfi rolling | hugo | 0.134.2-r0 | — |
| Wolfi rolling | hugo-extended | 0.134.1-r0 | — |
| Wolfi rolling | influx | 2.7.5-r4 | — |
| Wolfi rolling | ip-masq-agent | 2.9.3-r15 | — |
| Wolfi rolling | jitsucom-bulker | 2.8.1-r0 | — |
| Wolfi rolling | k3d +2 | 5.7.4-r0 | — |
| Wolfi rolling | k3s +2 | 1.30.4.1-r1 | — |
| Wolfi rolling | k6 +2 | 0.53.0-r1 | — |
| Wolfi rolling | k8sgpt | 0.3.40-r1 | — |
| Wolfi rolling | k8sgpt-operator +1 | 0.1.7-r1 | — |
| Wolfi rolling | k8ssandra-operator +1 | 1.19.0-r2 | — |
| Wolfi rolling | k9s | 0.32.5-r5 | — |
| Wolfi rolling | kaf | 0.2.8-r6 | — |
| Wolfi rolling | kafka-proxy +1 | 0.3.11-r1 | — |
| Wolfi rolling | kaniko +3 | 1.23.2-r2 | — |
| Wolfi rolling | kargo +1 | 0.8.7-r1 | — |
| Wolfi rolling | kind | 0.24.0-r1 | — |
| Wolfi rolling | kine | 0.12.2-r1 | — |
| Wolfi rolling | ko | 0.16.0-r3 | — |
| Wolfi rolling | kor | 0.5.5-r1 | — |
| Wolfi rolling | kots | 1.116.0-r0 | — |
| Wolfi rolling | kpt | 1.0.0_beta49-r11 | — |
| Wolfi rolling | kserve +9 | 0.13.1-r5 | — |
| Wolfi rolling | kserve-modelmesh-serving +1 | 0.12.0-r2 | — |
| Wolfi rolling | ksops +1 | 4.3.2-r3 | — |
| Wolfi rolling | kube-bench +1 | 0.8.0-r2 | — |
| Wolfi rolling | kube-fluentd-operator +3 | 1.18.2-r16 | — |
| Wolfi rolling | kube-logging-operator +4 | 4.9.1-r1 | — |
| Wolfi rolling | kube-metrics-adapter | 0.2.3-r1 | — |
| Wolfi rolling | kube-rbac-proxy | 0.18.1-r1 | — |
| Wolfi rolling | kube-vip | 0.8.3-r0 | — |
| Wolfi rolling | kubebuilder | 4.2.0-r1 | — |
| Wolfi rolling | kubectl-1.28 +2 | 1.28.15-r11 | — |
| Wolfi rolling | kubectl-1.29 +2 | 1.29.15-r2 | — |
| Wolfi rolling | kubectl-1.30 +2 | 1.30.11-r2 | — |
| Wolfi rolling | kubeflow-katib +17 | 0.17.0-r13 | — |
| Wolfi rolling | kubeflow-pipelines +11 | 2.2.0-r12 | — |
| Wolfi rolling | kuberay-operator | 1.2.1-r0 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.15.0-r1 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 5.1.0-r1 | — |
| Wolfi rolling | kubernetes-csi-livenessprobe | 2.14.0-r1 | — |
| Wolfi rolling | kubernetes-dashboard | 7.5.0-r1 | — |
| Wolfi rolling | kubernetes-dashboard-metrics-scraper +1 | 1.0.9-r19 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.23.1-r4 | — |
| Wolfi rolling | kubernetes-event-exporter +1 | 1.7-r11 | — |
| Wolfi rolling | kubernetes-ingress-defaultbackend | 1.31.1-r0 | — |
| Wolfi rolling | kubescape | 3.0.17-r0 | — |
| Wolfi rolling | kubevela +3 | 1.9.11-r7 | — |
| Wolfi rolling | kubewatch | 2.8.0-r1 | — |
| Wolfi rolling | kustomize | 5.4.3-r1 | — |
| Wolfi rolling | kwok +1 | 0.6.0-r2 | — |
| Wolfi rolling | kyverno-policy-reporter +1 | 2.24.1-r1 | — |
| Wolfi rolling | kyverno-policy-reporter-ui +1 | 1.9.2-r9 | — |
| Wolfi rolling | lazygit | 0.44.0-r0 | — |
| Wolfi rolling | litefs | 0.5.11-r7 | — |
| Wolfi rolling | litestream | 0.3.13-r5 | — |
| Wolfi rolling | local-path-provisioner | 0.0.29-r1 | — |
| Wolfi rolling | local-static-provisioner +3 | 2.7.0-r7 | — |
| Wolfi rolling | logstash-exporter | 1.7.0-r1 | — |
| Wolfi rolling | mage | 1.15.0-r10 | — |
| Wolfi rolling | mailpit +1 | 1.20.4-r1 | — |
| Wolfi rolling | mc +1 | 0.20231220.071422-r12 | — |
| Wolfi rolling | melange | 0.11.6-r0 | — |
| Wolfi rolling | memcached-exporter +1 | 0.14.4-r2 | — |
| Wolfi rolling | metacontroller | 4.11.25-r0 | — |
| Wolfi rolling | metallb +8 | 0.14.8-r1 | — |
| Wolfi rolling | metrics-server +2 | 0.7.2-r1 | — |
| Wolfi rolling | minify +1 | 2.20.37-r1 | — |
| Wolfi rolling | minio-operator +3 | 6.0.3-r1 | — |
| Wolfi rolling | mkcert | 1.4.4-r5 | — |
| Wolfi rolling | mockery | 2.45.1-r0 | — |
| Wolfi rolling | mockgen +1 | 0.4.0-r1 | — |
| Wolfi rolling | mods | 1.6.0-r0 | — |
| Wolfi rolling | mongo-tools | 100.10.0-r2 | — |
| Wolfi rolling | multus-cni +2 | 4.1.0-r1 | — |
| Wolfi rolling | nats | 0.1.5-r1 | — |
| Wolfi rolling | nats-server +1 | 2.10.20-r1 | — |
| Wolfi rolling | nerdctl | 1.7.7-r0 | — |
| Wolfi rolling | neuvector-dbgen +1 | 0_git20240423-r3 | — |
| Wolfi rolling | neuvector-scanner +2 | 0_git20240528-r9 | — |
| Wolfi rolling | neuvector-sigstore-interface | 0_git20240801-r2 | — |
| Wolfi rolling | newrelic-fluent-bit-output-compat | 2.4.0-r5 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.57.0-r1 | — |
| Wolfi rolling | newrelic-nri-kube-events | 2.10.6-r0 | — |
| Wolfi rolling | newrelic-nri-statsd | 2.9.2-r2 | — |
| Wolfi rolling | newrelic-prometheus-configurator | 1.17.3-r1 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r10 | — |
| Wolfi rolling | nodetaint | 0.0.4-r22 | — |
| Wolfi rolling | nri-apache +1 | 1.12.6-r1 | — |
| Wolfi rolling | nri-cassandra +2 | 2.13.9-r1 | — |
| Wolfi rolling | nri-consul +1 | 2.7.13-r1 | — |
| Wolfi rolling | nri-couchbase +1 | 2.6.7-r1 | — |
| Wolfi rolling | nri-discovery-kubernetes +1 | 1.9.2-r1 | — |
| Wolfi rolling | nri-elasticsearch +1 | 5.2.6-r1 | — |
| Wolfi rolling | nri-f5 +1 | 2.7.6-r1 | — |
| Wolfi rolling | nri-haproxy +1 | 3.0.2-r1 | — |
| Wolfi rolling | nri-jmx +2 | 3.7.0-r3 | — |
| Wolfi rolling | nri-kafka +2 | 3.7.4-r1 | — |
| Wolfi rolling | nri-kubernetes | 3.29.4-r1 | — |
| Wolfi rolling | nri-memcached +1 | 2.5.7-r1 | — |
| Wolfi rolling | nri-mongodb +1 | 2.8.6-r1 | — |
| Wolfi rolling | nri-mssql +1 | 2.12.6-r1 | — |
| Wolfi rolling | nri-mysql +1 | 1.10.10-r1 | — |
| Wolfi rolling | nri-nagios +1 | 2.9.6-r1 | — |
| Wolfi rolling | nri-nginx +1 | 3.4.8-r1 | — |
| Wolfi rolling | nri-postgresql +1 | 2.13.7-r1 | — |
| Wolfi rolling | nri-prometheus | 2.21.5-r0 | — |
| Wolfi rolling | nri-rabbitmq +1 | 2.13.8-r1 | — |
| Wolfi rolling | nri-redis +1 | 1.11.8-r1 | — |
| Wolfi rolling | nsc | 2.8.9-r0 | — |
| Wolfi rolling | nuclei | 3.3.2-r1 | — |
| Wolfi rolling | oauth2-proxy +1 | 7.6.0-r10 | — |
| Wolfi rolling | octo-sts +1 | 0.4.2-r1 | — |
| Wolfi rolling | ollama | 0.3.10-r0 | — |
| Wolfi rolling | opa | 0.68.0-r0 | — |
| Wolfi rolling | opentelemetry-collector +4 | 0.109.0-r0 | — |
| Wolfi rolling | oras | 1.2.0-r3 | — |
| Wolfi rolling | osv-scanner | 1.8.5-r0 | — |
| Wolfi rolling | overmind | 2.5.1-r4 | — |
| Wolfi rolling | paranoia | 0.2.1-r19 | — |
| Wolfi rolling | petname | 2.11-r10 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r9 | — |
| Wolfi rolling | pluto +1 | 5.20.2-r1 | — |
| Wolfi rolling | policy-controller +1 | 0.9.0-r9 | — |
| Wolfi rolling | pombump | 0.0.13-r2 | — |
| Wolfi rolling | postgres-operator +39 | 1.13.0-r1 | — |
| Wolfi rolling | postgres-operator-compat | 1.14.0-r5 | — |
| Wolfi rolling | prometheus-adapter | 0.12.0-r3 | — |
| Wolfi rolling | prometheus-alertmanager +1 | 0.27.0-r10 | — |
| Wolfi rolling | prometheus-operator +3 | 0.81.0-r1 | — |
| Wolfi rolling | prometheus-pushgateway +1 | 1.9.0-r2 | — |
| Wolfi rolling | protoc-gen-go | 1.34.2-r2 | — |
| Wolfi rolling | protoc-gen-go-grpc | 1.5.1-r1 | — |
| Wolfi rolling | pulumi +3 | 3.132.0-r0 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 1.16.0-r1 | — |
| Wolfi rolling | pulumi-language-dotnet | 3.67.0-r0 | — |
| Wolfi rolling | pulumi-language-java | 0.16.0-r0 | — |
| Wolfi rolling | pulumi-language-yaml | 1.10.0-r1 | — |
| Wolfi rolling | q | 0.19.2-r8 | — |
| Wolfi rolling | rabbitmq-cluster-operator +2 | 2.10.0-r1 | — |
| Wolfi rolling | rabbitmq-default-user-credential-updater +1 | 1.0.4-r4 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator +2 | 1.14.2-r3 | — |
| Wolfi rolling | rancher-fleet +4 | 0.10.1-r1 | — |
| Wolfi rolling | rclone | 1.68.0-r0 | — |
| Wolfi rolling | redka | 0.5.2-r2 | — |
| Wolfi rolling | regclient +6 | 0.7.1-r1 | — |
| Wolfi rolling | rekor +3 | 1.3.6-r9 | — |
| Wolfi rolling | render-template | 1.0.7-r2 | — |
| Wolfi rolling | restic +1 | 0.17.1-r1 | — |
| Wolfi rolling | rook +1 | 1.15.1-r1 | — |
| Wolfi rolling | rootlesskit +1 | 2.3.1-r1 | — |
| Wolfi rolling | runc +1 | 1.1.14-r1 | — |
| Wolfi rolling | s5cmd | 2.2.2-r6 | — |
| Wolfi rolling | sbom-convert | 0.0.4-r2 | — |
| Wolfi rolling | sbom-scorecard | 0.0.7-r16 | — |
| Wolfi rolling | sbomqs | 0.1.9-r1 | — |
| Wolfi rolling | scorecard | 5.0.0-r1 | — |
| Wolfi rolling | seaweedfs +2 | 3.73-r0 | — |
| Wolfi rolling | secrets-store-csi-driver +1 | 1.4.5-r1 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-aws | 0.3.9-r3 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.5.3-r2 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.5.0-r8 | — |
| Wolfi rolling | shfmt | 3.9.0-r1 | — |
| Wolfi rolling | sigstore-scaffolding +13 | 0.7.9-r0 | — |
| Wolfi rolling | skaffold | 2.13.2-r1 | — |
| Wolfi rolling | skopeo +10 | 1.16.1-r1 | — |
| Wolfi rolling | slsa-verifier | 2.6.0-r4 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r10 | — |
| Wolfi rolling | snyk-cli | 1.1293.1-r0 | — |
| Wolfi rolling | sonobuoy +1 | 0.57.2-r1 | — |
| Wolfi rolling | sops | 3.9.0-r3 | — |
| Wolfi rolling | spark-operator +1 | 1.4.6-r1 | — |
| Wolfi rolling | speedtest-go | 1.7.9-r1 | — |
| Wolfi rolling | spegel +1 | 0.0.24-r2 | — |
| Wolfi rolling | spicedb +1 | 1.35.3-r1 | — |
| Wolfi rolling | spire-agent +2 | 1.11.2-r5 | — |
| Wolfi rolling | spqr +10 | 1.5.0-r1 | — |
| Wolfi rolling | src | 5.5.0-r1 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r18 | — |
| Wolfi rolling | stakater-reloader +1 | 1.1.0-r1 | — |
| Wolfi rolling | step +1 | 0.27.2-r1 | — |
| Wolfi rolling | step-issuer +1 | 0.9.3-r1 | — |
| Wolfi rolling | stern | 1.30.0-r3 | — |
| Wolfi rolling | supercronic | 0.2.32-r0 | — |
| Wolfi rolling | swagger | 0.31.0-r3 | — |
| Wolfi rolling | syft | 1.12.2-r0 | — |
| Wolfi rolling | tailscale +1 | 1.74.0-r0 | — |
| Wolfi rolling | task | 3.39.0-r0 | — |
| Wolfi rolling | tekton-chains | 0.22.0-r1 | — |
| Wolfi rolling | temporal +1 | 1.0.0-r1 | — |
| Wolfi rolling | temporal-ui-server +1 | 2.30.3-r0 | — |
| Wolfi rolling | terraform +1 | 1.5.7-r16 | — |
| Wolfi rolling | terraform-docs | 0.19.0-r0 | — |
| Wolfi rolling | terraform-provider-aws | 5.66.0-r0 | — |
| Wolfi rolling | terraform-provider-azurerm | 4.1.0-r0 | — |
| Wolfi rolling | terraform-provider-google | 6.2.0-r0 | — |
| Wolfi rolling | tfsec | 1.28.13-r5 | — |
| Wolfi rolling | thanos +1 | 0.36.1-r1 | — |
| Wolfi rolling | thanos-operator | 0.3.7-r20 | — |
| Wolfi rolling | thanos-operator-compat | 0.3.7-r26 | — |
| Wolfi rolling | timestamp-authority +2 | 1.2.2-r13 | — |
| Wolfi rolling | timoni | 0.22.0-r4 | — |
| Wolfi rolling | tkn | 0.38.1-r0 | — |
| Wolfi rolling | trillian +2 | 1.6.1-r1 | — |
| Wolfi rolling | trino +58 | 469-r2 | — |
| Wolfi rolling | trivy | 0.60.0-r4 | — |
| Wolfi rolling | up | 0.33.0-r1 | — |
| Wolfi rolling | vault-k8s | 1.4.2-r1 | — |
| Wolfi rolling | vcluster +2 | 0.20.0-r2 | — |
| Wolfi rolling | velero +2 | 1.14.1-r1 | — |
| Wolfi rolling | velero-plugin-for-aws +1 | 1.10.1-r1 | — |
| Wolfi rolling | velero-plugin-for-csi +1 | 0.7.1-r7 | — |
| Wolfi rolling | vertical-pod-autoscaler +2 | 1.2.1-r1 | — |
| Wolfi rolling | vexctl | 0.3.0-r0 | — |
| Wolfi rolling | victoriametrics +18 | 1.103.0-r1 | — |
| Wolfi rolling | victoriametrics-operator +1 | 0.47.3-r1 | — |
| Wolfi rolling | volume-modifier-for-k8s | 0.2.1-r8 | — |
| Wolfi rolling | vt-cli | 1.0.1-r2 | — |
| Wolfi rolling | wait-for-port | 1.0.8-r2 | — |
| Wolfi rolling | wave | 0.9.0-r2 | — |
| Wolfi rolling | wazero +1 | 1.8.0-r1 | — |
| Wolfi rolling | weaviate | 1.26.4-r0 | — |
| Wolfi rolling | wgcf | 2.2.22-r4 | — |
| Wolfi rolling | wire-go | 0.6.0-r6 | — |
| Wolfi rolling | wireguard-go | 0.0.20230223-r15 | — |
| Wolfi rolling | wuzz +2 | 0.5.0-r2 | — |
| Wolfi rolling | xcaddy | 0.4.2-r3 | — |
| Wolfi rolling | yace | 0.61.2-r1 | — |
| Wolfi rolling | yam | 0.1.1-r1 | — |
| Wolfi rolling | yq | 4.44.3-r1 | — |
| Wolfi rolling | ytt | 0.50.0-r1 | — |
| Wolfi rolling | zarf | 0.39.0-r1 | — |
| Wolfi rolling | zot | 2.1.1-r1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.22.7 · >= 1.23.0-0, < 1.23.1 | 1.22.7, 1.23.1 | GO-2024-3107 |
Advisories 50
- ALSA-2024:8112 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8039 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:7118 Important: osbuild and osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6913 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9454 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:9459 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:6908 Important: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8038 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:7118 Red Hat Security Advisory: osbuild and osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:9459 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:9454 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8700 Red Hat Security Advisory: OpenShift Container Platform 4.14.40 packages and security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8694 Red Hat Security Advisory: OpenShift Container Platform 4.12.68 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8690 Red Hat Security Advisory: OpenShift Container Platform 4.13.53 packages and security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8428 Red Hat Security Advisory: OpenShift Container Platform 4.15.37 packages and security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8263 Red Hat Security Advisory: OpenShift Container Platform 4.16.18 packages and security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8232 Red Hat Security Advisory: OpenShift Container Platform 4.17.2 packages and security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8112 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8039 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:8038 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:6913 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:6908 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- USN-7109-1 golang-1.18 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- WID-SEC-2024-2067 Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · May 5, 2026
- USN-7111-1 golang-1.17 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7081-1 golang-1.22 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- WID-SEC-2024-3250 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 8, 2026
- RLSA-2024:8039 Important: podman security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:6913 Important: golang security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:8038 Important: container-tools:rhel8 security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:6908 Important: go-toolset:rhel8 security update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2024:3937-1 Security update for go1.23-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3456-1 Security update for kubernetes1.26 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14324-1 go1.23-1.23.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3455-1 Security update for kubernetes1.27 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3459-1 Security update for kubernetes1.24 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3454-1 Security update for kubernetes1.28 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3214-1 Security update for go1.23 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3809-1 Security update for go1.21-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:0056-1 Security update for trivy SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3458-1 Security update for kubernetes1.24 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3938-1 Security update for go1.22-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3773-1 Security update for go1.23-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3197-1 Security update for go1.23 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14323-1 go1.22-1.22.7-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3213-1 Security update for go1.22 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3457-1 Security update for kubernetes1.25 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3453-1 Security update for kubernetes1.24 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3772-1 Security update for go1.22-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2025-7118 Important: osbuild and osbuild-composer security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 16, 2025