Skip to content
OpenAdvisories
High · 7.5 CVE-2025-22869 EUVD-2025-5340GHSA-hcg3-q754-cr77GO-2025-3487

Potential denial of service in golang.org/x/crypto

Published Feb 26, 2025 · Updated Apr 11, 2025 · Assigned by Go

Vendor: golang.org/x/crypto Product: golang.org/x/crypto/ssh Package: aactl Package: actions-runner-controller Package: actions-runner-controller-compat Package: age Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-all Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-compat Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-operator-compat Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: apko Package: argo-events Package: argo-rollouts Package: argo-workflows Package: argocd-image-updater Package: argocd-image-updater-compat Package: atlantis Package: authservice Package: authservice-compat Package: azcopy Package: bank-vaults Package: bank-vaults-template Package: bom Package: buf Package: buildah Package: buildctl Package: buildkitd Package: caddy Package: caddy-man Package: caddy-src Package: cadvisor Package: cadvisor-compat Package: cert-exporter Package: cert-manager Package: cert-manager-cmctl Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: cert-manager-webhook-pdns Package: certificate-transparency Package: certificate-transparency-trillian-ctserver Package: cf-cli Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: chartmuseum Package: chezmoi Package: cilium-cli Package: cloud-provider-aws-1.31 Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.31-ecr-credential-provider Package: cloudflared Package: cloudprober Package: cloudprober-compat Package: cluster-api-aws-controller Package: cluster-api-aws-controller-compat Package: conftest Package: containerd-1 Package: containerd-2 Package: containerd-service-1 Package: containerd-service-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: cortex Package: cosign Package: cri-o Package: croc Package: crossplane-crank Package: crossplane-provider-aws Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudformation-compat Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudfront-compat Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-cloudwatchlogs-compat Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-dynamodb-compat Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-eks-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-elasticache-compat Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-firehose-compat Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-iam-compat Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kinesis-compat Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-kms-compat Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-lambda-compat Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-memorydb-compat Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-rds-compat Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-s3-compat Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sns-compat Package: crossplane-provider-aws-sqs Package: crossplane-provider-aws-sqs-compat Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-aws Package: crossplane-provider-family-aws-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: dagdotdev Package: dagger Package: dbmate Package: descheduler Package: dex Package: dex-iamguarded-compat Package: distribution Package: docker-buildx Package: docker-cli-buildx Package: docker-compose Package: docker-compose Package: docker-credential-acr-env Package: docker-dind Package: dockerize Package: dynamic-localpv-provisioner Package: eksctl Package: extism Package: falcoctl Package: falcosidekick Package: ferretdb Package: filebrowser Package: filebrowser-compat Package: flannel Package: flannel-compat Package: fluent-bit-plugin-loki Package: flux Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-image-automation-controller Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-notification-controller-iamguarded-compat Package: flux-source-controller Package: flux-source-controller-iamguarded-compat Package: flyte Package: fq Package: frp Package: fscrypt Package: fulcio Package: gatus Package: gatus-compat Package: gcsfuse Package: gem-check Package: gh Package: gh Package: gh-doc Package: git-lfs Package: git-lfs-config Package: gitleaks Package: gitness Package: gitsign Package: gitsign-config Package: gitsign-credential-cache Package: glab Package: go-discover Package: go-licenses Package: gobuster Package: golang-go.crypto Package: golang-go.crypto Package: golang.org/x/crypto Package: gomplate Package: goreleaser Package: gosh Package: gostatsd Package: gptscript Package: grafana-agent-operator Package: grafana-alloy Package: grafana-mimir Package: grpc-health-probe Package: grpc-health-probe-compat Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-registry Package: hcloud Package: header-check Package: helm Package: helm-3 Package: helm-4 Package: helm-docs Package: helm-operator Package: helm-operator-compat Package: helm-push Package: help-check Package: hugo Package: hugo-extended Package: hydra Package: istio-pilot-agent-1.25 Package: istio-pilot-agent-1.25-compat Package: jitsucom-bulker Package: jitsucom-bulker-bulker Package: jitsucom-bulker-bulker-compat Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingest-compat Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-ingmgr-compat Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-sidecar-compat Package: jitsucom-bulker-syncctl Package: jitsucom-bulker-syncctl-compat Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k3s-1.32 Package: k3s-multicall Package: k3s-static Package: k3s-static-1.32 Package: k6 Package: k8sgpt Package: k8ssandra-client Package: k8ssandra-client-compat Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kafka-proxy-compat Package: kaniko Package: kaniko-compat Package: kaniko-warmer Package: kaniko-warmer-compat Package: kapp-controller Package: kapp-controller-compat Package: kargo Package: kargo-oci-compat Package: katib-controller Package: katib-controller-compat Package: katib-db-manager Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kiali Package: kine Package: ko Package: kots Package: kots-compat Package: kots-symlink-compat Package: kserve Package: kserve-agent Package: kserve-agent-compat Package: kserve-manager Package: kserve-manager-compat Package: kserve-modelmesh-serving Package: kserve-modelmesh-serving-compat Package: kserve-qpext Package: kserve-qpext-compat Package: kserve-router Package: kserve-router-compat Package: kserve-storage-controller Package: ksops Package: ksops-compat Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-metrics-adapter Package: kube-rbac-proxy Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kube-vip Package: kube-vip-compat Package: kubectl-1.27 Package: kubectl-1.27-default Package: kubectl-1.28 Package: kubectl-1.28-default Package: kubectl-1.29 Package: kubectl-1.29-default Package: kubectl-1.30 Package: kubectl-1.30-default Package: kubectl-1.31 Package: kubectl-1.31-default Package: kubectl-1.32 Package: kubectl-1.32-default Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.27 Package: kubectl-bash-completion-1.28 Package: kubectl-bash-completion-1.29 Package: kubectl-bash-completion-1.30 Package: kubeflow-katib Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubernetes Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-event-exporter-iamguarded-compat Package: kubescape Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubevirt Package: kubewatch Package: kwok Package: kwokctl Package: kyverno-notation-aws Package: kyverno-notation-aws-compat Package: lazygit Package: ldd-check Package: litestream Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: malcontent Package: mc Package: mc-iamguarded-2025-compat Package: memcached-exporter Package: memcached-exporter-iamguarded-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: mkcert Package: moby-compose Package: moby-engine Package: mongo-tools Package: nats Package: nats-server Package: nats-server-compat Package: nats-top Package: nats-top-compat Package: nerdctl Package: neuvector-sigstore-interface Package: newrelic-nri-statsd Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: no-docs-check Package: node-problem-detector Package: nri-kafka Package: nri-kafka-compat Package: nri-kafka-jdk11 Package: nri-mssql Package: nri-mssql-compat Package: nuclei Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: octo-sts Package: octo-sts-webhook Package: ollama Package: ollama-cpu Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-compat Package: op-geth-devp2p Package: op-geth-evm Package: op-geth-rlpdump Package: openbao Package: openbao-compat Package: openbao-k8s Package: openbao-k8s-compat Package: opencost Package: opencost-compat Package: openfga Package: openfga-compat Package: openfga-healthcheck-compat Package: opentelemetry-collector Package: opentelemetry-collector-compat Package: opentelemetry-collector-ocb Package: opentelemetry-operator Package: opentelemetry-operator-compat Package: opentelemetry-operator-otel-allocator Package: opentelemetry-operator-otel-allocator-compat Package: opentofu-1.9 Package: oras Package: osv-scanner Package: package-type-check Package: packer Package: podman Package: podman Package: podman-doc Package: policy-controller Package: policy-controller-tester Package: portieris Package: portieris-compat Package: postgres-operator Package: postgres-operator-compat Package: prometheus-3.2 Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-alertmanager Package: prometheus-alertmanager-iamguarded-compat Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: prometheus-pushgateway Package: prometheus-pushgateway-iamguarded-compat Package: promxy Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: q Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-fleet-termination-log Package: rclone Package: rclone Package: rclone-compat Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: restic Package: restic-compat Package: rook Package: rook-oci-compat Package: sbomqs Package: scorecard Package: seaweedfs Package: seaweedfs-iamguarded-compat Package: seaweedfs-oci-entrypoint Package: secrets-store-csi-driver Package: secrets-store-csi-driver-crds Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: skaffold Package: skopeo Package: slsa-verifier Package: snyk-cli Package: sops Package: spark-operator Package: spark-operator-oci-entrypoint Package: spegel Package: spegel-compat Package: spiffe-helper Package: spiffe-helper-compat Package: spire-agent Package: spire-controller-manager Package: spire-controller-manager-compat Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: splunk-otel-collector-doc Package: spqr Package: sql_exporter Package: src Package: src-fingerprint Package: step-ca Package: step-issuer Package: step-issuer-compat Package: step-kms-plugin Package: swagger Package: syft Package: symlink-check Package: syspeek Package: tailscale Package: tailscale-compat Package: task Package: tdbg Package: tdbg-compat Package: tekton-chains Package: telegraf Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: temporal-ui-server-oci-entrypoint Package: terraform Package: terraform Package: terraform-compat Package: terraform-docs Package: terraform-local-provider-config Package: terraform-provider-azuread Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-pagerduty Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-tls Package: terragrunt Package: terragrunt-docs Package: tflint Package: tflint-compat Package: tfsec Package: thanos Package: thanos-iamguarded-compat Package: timestamp-authority Package: timestamp-authority-cli Package: timestamp-authority-server Package: tkn Package: traefik-3.3 Package: trillian Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trufflehog Package: trust-manager Package: tw Package: tw-pip-check Package: twt Package: undock Package: up Package: usrmerge-tool Package: vault-benchmark Package: vault-benchmark-compat Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-compat Package: velero-plugin-for-microsoft-azure Package: velero-plugin-for-microsoft-azure-compat Package: velero-restore-helper Package: vendir Package: ver-check Package: verify-service Package: vexctl Package: wal-g Package: wal-g-pg Package: weaviate Package: wgcf Package: wireguard-go Package: x509-certificate-exporter Package: x509-certificate-exporter-compat Package: xeol Package: xeol-compat Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

Affected products

VendorProductAffectedFixed
golang.org/x/crypto golang.org/x/crypto/ssh < 0.35.0 0.35.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-go.crypto 1:0.42.0-1 —
Debian 13 golang-go.crypto No fix yet —
Debian 12 golang-go.crypto No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 25.10 golang-go.crypto 1:0.25.0-1ubuntu0.1 —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS golang-go.crypto 1:0.19.0-1ubuntu0.1~esm3 —
Ubuntu Pro 22.04 LTS golang-go.crypto 1:0.0~git20211202.5770296-1ubuntu0.1~esm3 —
Ubuntu Pro 20.04 LTS golang-go.crypto 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm3 —
Ubuntu Pro 18.04 LTS golang-go.crypto 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 gvisor-tap-vsock +1 6:0.8.5-1.el10_0 RHSA-2025:7484
RHEL 10 podman +3 6:5.4.0-9.el10_0 RHSA-2025:7462
RHEL 9 gvisor-tap-vsock 6:0.8.5-1.el9_5 RHSA-2025:7416, RHSA-2025:3833
RHEL 9 gvisor-tap-vsock-gvforwarder 6:0.8.5-1.el9_6 RHSA-2025:7416
RHEL 9 podman +4 4:5.2.2-15.el9_5 RHSA-2025:7391, RHSA-2025:3336
RHEL 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 buildah +1 2:1.33.12-1.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 container-selinux 2:2.229.0-2.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 containers-common 2:1-82.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 crit +4 3.18-5.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 crun 1.14.3-2.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 podman +6 4:4.9.4-20.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 python-podman +1 4.9.0-3.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 runc 1:1.1.12-6.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 skopeo +1 2:1.14.5-3.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 toolbox +1 0.0.99.5-2.module+el8.10.0+22931+799fd806 RHSA-2025:3210
RHEL 8 udica 0.2.6-21.module+el8.10.0+22931+799fd806 RHSA-2025:3210
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS gvisor-tap-vsock 6:0.7.3-5.el9_4.1 RHSA-2025:3185
RHEL 9.4 EUS podman +4 4:4.9.4-18.el9_4 RHSA-2025:3186
RHEL 9.2 EUS podman +5 2:4.4.1-22.el9_2.1 RHSA-2025:3184
RHEL 9.0 E4S podman +6 2:4.2.0-6.el9_0.3 RHSA-2025:3165
RHEL 8.8 EUS aardvark-dns 2:1.5.0-2.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS buildah +1 1:1.29.5-1.module+el8.8.0+22779+ce927503 RHSA-2025:3268
RHEL 8.8 EUS cockpit-podman 63.1-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS conmon 3:2.1.6-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS container-selinux 2:2.229.0-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS containernetworking-plugins 1:1.2.0-2.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS containers-common 2:1-67.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS crit +4 3.15-4.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS crun 1.8.4-2.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS fuse-overlayfs 1.11-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS libslirp +1 4.4.0-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS netavark 2:1.5.1-3.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS oci-seccomp-bpf-hook 1.2.8-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS podman +6 3:4.4.1-27.module+el8.8.0+22952+a0e8ba69.1 RHSA-2025:3268
RHEL 8.8 EUS python-podman +1 4.4.1-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS runc 1:1.1.12-1.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS skopeo +1 2:1.11.2-0.3.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS slirp4netns 1.2.0-3.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS toolbox +1 0.0.99.3-7.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.8 EUS udica 0.2.6-20.module+el8.8.0+22334+bb93e398 RHSA-2025:3268
RHEL 8.6 TUS buildah +1 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS cockpit-podman 49.1-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS conmon 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS container-selinux 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS containernetworking-plugins 1:1.1.1-5.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS containers-common 2:1-40.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS crit +4 3.15-3.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS crun 1.5-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS fuse-overlayfs 1.9-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS libslirp +1 4.4.0-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS netavark +1 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS oci-seccomp-bpf-hook 1.2.6-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS podman +6 2:4.2.0-8.module+el8.6.0+22955+5cb62980.2 RHSA-2025:3175
RHEL 8.6 TUS python-podman +1 4.0.1-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS runc 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS skopeo +1 2:1.9.1-2.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS slirp4netns 1.2.0-3.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS toolbox +1 0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 TUS udica 0.2.6-5.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S buildah +1 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S cockpit-podman 49.1-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S conmon 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S container-selinux 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S containernetworking-plugins 1:1.1.1-5.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S containers-common 2:1-40.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S crit +4 3.15-3.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S crun 1.5-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S fuse-overlayfs 1.9-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S libslirp +1 4.4.0-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S netavark +1 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S oci-seccomp-bpf-hook 1.2.6-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S podman +6 2:4.2.0-8.module+el8.6.0+22955+5cb62980.2 RHSA-2025:3175
RHEL 8.6 E4S python-podman +1 4.0.1-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S runc 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S skopeo +1 2:1.9.1-2.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S slirp4netns 1.2.0-3.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S toolbox +1 0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 E4S udica 0.2.6-5.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS buildah +1 1:1.26.9-2.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS cockpit-podman 49.1-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS conmon 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS container-selinux 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS containernetworking-plugins 1:1.1.1-5.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS containers-common 2:1-40.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS crit +4 3.15-3.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS crun 1.5-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS fuse-overlayfs 1.9-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS libslirp +1 4.4.0-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS netavark +1 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS oci-seccomp-bpf-hook 1.2.6-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS podman +6 2:4.2.0-8.module+el8.6.0+22955+5cb62980.2 RHSA-2025:3175
RHEL 8.6 AUS python-podman +1 4.0.1-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS runc 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS skopeo +1 2:1.9.1-2.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS slirp4netns 1.2.0-3.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS toolbox +1 0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.6 AUS udica 0.2.6-5.module+el8.6.0+22769+fa0fe772 RHSA-2025:3175
RHEL 8.4 TUS buildah +1 1.21.4-4.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS cockpit-podman 32-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS conmon 2:2.0.29-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS container-selinux 2:2.167.0-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS containernetworking-plugins 0.9.1-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS crit +2 3.15-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS crun 0.20.1-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS fuse-overlayfs 1.6-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS libslirp +1 4.3.1-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS oci-seccomp-bpf-hook 1.2.3-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS podman +5 3.2.3-0.15.module+el8.4.0+22949+6d636034 RHSA-2025:3266
RHEL 8.4 TUS runc 1.0.0-74.rc95.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS skopeo +2 1:1.3.1-8.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS slirp4netns 1.1.8-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS toolbox 0.0.8-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 TUS udica 0.2.4-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S buildah +1 1.21.4-4.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S cockpit-podman 32-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S conmon 2:2.0.29-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S container-selinux 2:2.167.0-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S containernetworking-plugins 0.9.1-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S crit +2 3.15-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S crun 0.20.1-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S fuse-overlayfs 1.6-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S libslirp +1 4.3.1-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S oci-seccomp-bpf-hook 1.2.3-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S podman +5 3.2.3-0.15.module+el8.4.0+22949+6d636034 RHSA-2025:3266
RHEL 8.4 E4S runc 1.0.0-74.rc95.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S skopeo +2 1:1.3.1-8.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S slirp4netns 1.1.8-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S toolbox 0.0.8-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 E4S udica 0.2.4-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS buildah +1 1.21.4-4.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS cockpit-podman 32-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS conmon 2:2.0.29-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS container-selinux 2:2.167.0-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS containernetworking-plugins 0.9.1-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS crit +2 3.15-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS crun 0.20.1-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS fuse-overlayfs 1.6-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS libslirp +1 4.3.1-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS oci-seccomp-bpf-hook 1.2.3-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS podman +5 3.2.3-0.15.module+el8.4.0+22949+6d636034 RHSA-2025:3266
RHEL 8.4 AUS runc 1.0.0-74.rc95.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS skopeo +2 1:1.3.1-8.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS slirp4netns 1.1.8-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS toolbox 0.0.8-1.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
RHEL 8.4 AUS udica 0.2.4-2.module+el8.4.0+22947+c10a58d6 RHSA-2025:3266
Red Hat Acm 2 flightctl +1 0.5.1-2.el8fc RHSA-2025:3685
Red Hat Acm 2 flightctl-agent 0.5.1-2.el9fc RHSA-2025:3685

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 gvisor-tap-vsock +1 6:0.8.5-1.el10_0 ALSA-2025:7484
AlmaLinux 10 podman +3 6:5.4.0-9.el10_0 ALSA-2025:7462
AlmaLinux 9 gvisor-tap-vsock 6:0.8.5-1.el9_5 ALSA-2025:3833
AlmaLinux 8 aardvark-dns 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 ALSA-2025:3210
AlmaLinux 8 buildah +1 2:1.33.12-1.module_el8.10.0+3959+b8dc5e6a ALSA-2025:3210
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+4016+efd18bf8 ALSA-2025:3210
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3970+8445edf6 ALSA-2025:3210
AlmaLinux 8 container-selinux 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:3210
AlmaLinux 8 containernetworking-plugins 1:1.4.0-5.module_el8.10.0+3876+e55593a8 ALSA-2025:3210
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2025:3210
AlmaLinux 8 crit 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2025:3210
AlmaLinux 8 criu +1 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2025:3210
AlmaLinux 8 criu-devel 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2025:3210
AlmaLinux 8 criu-libs 3.18-5.module_el8.10.0+3909+6e1c1eb7 ALSA-2025:3210
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2025:3210
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2025:3210
AlmaLinux 8 libslirp 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2025:3210
AlmaLinux 8 libslirp-devel 4.4.0-2.module_el8.10.0+3901+4b80ecd7 ALSA-2025:3210
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3926+f12484f5 ALSA-2025:3210
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2025:3210
AlmaLinux 8 podman +6 4:4.9.4-20.module_el8.10.0+3970+8445edf6 ALSA-2025:3210
AlmaLinux 8 python3-podman 4.9.0-3.module_el8.10.0+4016+efd18bf8 ALSA-2025:3210
AlmaLinux 8 runc 1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a ALSA-2025:3210
AlmaLinux 8 skopeo +1 2:1.14.5-3.module_el8.10.0+3876+e55593a8 ALSA-2025:3210
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2025:3210
AlmaLinux 8 toolbox 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2025:3210
AlmaLinux 8 toolbox-tests 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f ALSA-2025:3210
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+3926+f12484f5 ALSA-2025:3210

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 gvisor-tap-vsock 6:0.8.5-1.el10_0 RLSA-2025:7484
Rocky Linux 10 podman 6:5.4.0-9.el10_0 RLSA-2025:7462
Rocky Linux 9 gvisor-tap-vsock 6:0.8.5-1.el9_6 RLSA-2025:7416, RLSA-2025:3833
Rocky Linux 9 podman 5:5.4.0-9.el9_6 RLSA-2025:7391
Rocky Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2025:3210
Rocky Linux 8 buildah 2:1.33.12-1.module+el8.10.0+1933+1fc610b1 RLSA-2025:3210
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+1843+6892ab28 RLSA-2025:3210
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2025:3210
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 podman 4:4.9.4-20.module+el8.10.0+1948+4b5cd4a9 RLSA-2025:3210
Rocky Linux 8 python-podman 4.9.0-3.module+el8.10.0+1896+b18fa106 RLSA-2025:3210
Rocky Linux 8 runc 1:1.1.12-6.module+el8.10.0+1933+1fc610b1 RLSA-2025:3210
Rocky Linux 8 skopeo 2:1.14.5-3.module+el8.10.0+1843+6892ab28 RLSA-2025:3210
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2025:3210
Rocky Linux 8 toolbox 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2025:3210
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2025:3210

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP7 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
SLES 15 SP7 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.11.1 SUSE-SU-2026:2493-1
SLES 15 SP7 docker-stable 24.0.9_ce-150000.1.25.1 SUSE-SU-2026:0972-1, SUSE-SU-2025:03545-1
SLES 15 SP7 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP7 podman 4.9.5-150500.3.43.2 SUSE-RU-2025:02093-1
SLES 15 SP7 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP6 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP6 apptainer 1.3.6-150600.4.9.1 SUSE-SU-2026:0439-1, SUSE-SU-2025:0980-1
SLES 15 SP6 buildah 1.35.5-150500.3.34.1 SUSE-SU-2026:2733-1, SUSE-SU-2025:1018-1
SLES 15 SP6 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP6 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP6 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP6 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP6 govulncheck-vulndb 0.0.20250226T025151-150000.1.35.1 SUSE-SU-2025:0770-1
SLES 15 SP6 podman 4.9.5-150500.3.40.1 SUSE-SU-2025:1038-1, SUSE-RU-2025:02093-1
SLES 15 SP6 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES 15 SP6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP6 warewulf4 4.6.0-150500.6.34.1 SUSE-SU-2025:1094-1
SLES 15 SP5 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP5 buildah 1.35.5-150500.3.34.1 SUSE-SU-2026:2733-1, SUSE-SU-2025:1018-1
SLES 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP5 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP5 podman 4.9.5-150500.3.40.1 SUSE-SU-2025:1038-1, SUSE-RU-2025:02093-1
SLES 15 SP5 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES 15 SP5 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP4 buildah 1.35.5-150400.3.45.1 SUSE-SU-2026:2706-1, SUSE-SU-2025:1014-1
SLES 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES 15 SP4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP4 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP4 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP4 podman 4.9.5-150400.4.44.1 SUSE-SU-2025:1037-1, SUSE-RU-2025:02091-1
SLES 15 SP4 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES 15 SP4 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 15 SP3 buildah 1.35.5-150300.8.39.1 SUSE-SU-2025:1017-1
SLES 15 SP3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES 15 SP3 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES 15 SP3 podman 4.9.5-150300.9.46.1 SUSE-SU-2025:1036-1, SUSE-RU-2025:02092-1
Show 23 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 docker 27.5.1_ce-98.126.1 SUSE-SU-2025:1102-1
SLES 12 SP5 docker-stable 24.0.9_ce-1.11.1 SUSE-SU-2026:1118-1, SUSE-SU-2025:1102-1, SUSE-SU-2025:03540-1
SLES 12 amazon-ssm-agent 3.3.4624.0-4.49.1 SUSE-SU-2026:2468-1
SLES 12 google-guest-agent 20260529.00-1.61.1 SUSE-SU-2026:2581-1
SLES for SAP 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 SUSE-SU-2026:22157-1
SLES for SAP 16.0 docker-compose 2.33.1-160000.5.1 SUSE-SU-2026:22567-1
SLES for SAP 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22128-1
SLES for SAP 16.0 podman 5.4.2-160000.4.1 SUSE-SU-2026:20626-1
SLES for SAP 15 SP6 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES for SAP 15 SP5 buildah 1.35.5-150500.3.34.1 SUSE-SU-2026:2733-1, SUSE-SU-2025:1018-1
SLES for SAP 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES for SAP 15 SP5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES for SAP 15 SP5 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES for SAP 15 SP5 podman 4.9.5-150500.3.40.1 SUSE-SU-2025:1038-1, SUSE-RU-2025:02093-1
SLES for SAP 15 SP5 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES for SAP 15 SP4 buildah 1.35.5-150400.3.45.1 SUSE-SU-2026:2706-1, SUSE-SU-2025:1014-1
SLES for SAP 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLES for SAP 15 SP4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES for SAP 15 SP4 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES for SAP 15 SP4 podman 4.9.5-150400.4.44.1 SUSE-SU-2025:1037-1, SUSE-RU-2025:02091-1
SLES for SAP 15 SP4 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLES for SAP 15 SP3 buildah 1.35.5-150300.8.39.1 SUSE-SU-2025:1017-1
SLES for SAP 15 SP3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLES for SAP 15 SP3 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLES for SAP 15 SP3 podman 4.9.5-150300.9.46.1 SUSE-SU-2025:1036-1, SUSE-RU-2025:02092-1
SLES 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 SUSE-SU-2026:22157-1
SLES 16.0 docker-compose 2.33.1-160000.5.1 SUSE-SU-2026:22567-1
SLES 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22128-1
SLES 16.0 podman 5.4.2-160000.4.1 SUSE-SU-2026:20626-1
SLE Micro 6.2 docker-compose 2.33.1-160000.5.1 SUSE-SU-2026:22546-1
SLE Micro 6.2 podman 5.4.2-160000.4.1 SUSE-SU-2026:20641-1
SLE Micro 6.1 docker 27.5.1_ce-slfo.1.1_2.1 SUSE-SU-2025:20393-1, SUSE-SU-2025:20360-1
SLE Micro 6.1 docker-compose 2.33.1-slfo.1.1_3.1 SUSE-SU-2026:22887-1
SLE Micro 6.1 elemental-operator 1.7.2-slfo.1.1_1.1 SUSE-SU-2025:20328-1
SLE Micro 6.1 elemental-toolkit 2.2.3-slfo.1.1_1.1 SUSE-SU-2025:20373-1
SLE Micro 6.1 google-guest-agent 20260430.00-slfo.1.1_1.1 SUSE-SU-2026:22133-1
SLE Micro 6.1 podman 5.2.5-slfo.1.1_1.1 SUSE-SU-2026:24378-1, SUSE-SU-2026:22451-1, SUSE-SU-2025:20279-1
SLE Micro 6.0 docker 27.5.1_ce-2.1 SUSE-SU-2025:20377-1, SUSE-SU-2025:20205-1
SLE Micro 6.0 docker-compose 2.33.1-5.1 SUSE-SU-2026:22703-1
SLE Micro 6.0 elemental-operator 1.6.8-1.1 SUSE-SU-2025:20184-1
SLE Micro 6.0 elemental-toolkit 2.1.3-1.1 SUSE-SU-2025:20210-1
SLE Micro 6.0 podman 4.9.5-4.1 SUSE-SU-2026:22516-1, SUSE-SU-2025:20869-1, SUSE-SU-2025:20198-1
SLE Micro 5.5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLE Micro 5.5 podman 4.9.5-150500.3.40.1 SUSE-SU-2025:1038-1, SUSE-RU-2025:02093-1
SLE Micro 5.4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.4 podman 4.9.5-150400.4.44.1 SUSE-SU-2025:1037-1, SUSE-RU-2025:02091-1
SLE Micro 5.3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.3 podman 4.9.5-150400.4.44.1 SUSE-SU-2025:1037-1, SUSE-RU-2025:02091-1
SLE Micro 5.2 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.2 podman 4.9.5-150300.9.46.1 SUSE-SU-2025:1036-1, SUSE-RU-2025:02092-1
SLE Micro 5.1 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE Micro 5.1 podman 4.9.5-150300.9.46.1 SUSE-SU-2025:1036-1, SUSE-RU-2025:02092-1
SLE HPC 15 SP5 buildah 1.35.5-150500.3.34.1 SUSE-SU-2026:2733-1, SUSE-SU-2025:1018-1
SLE HPC 15 SP5 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLE HPC 15 SP5 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE HPC 15 SP5 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLE HPC 15 SP5 podman 4.9.5-150500.3.40.1 SUSE-SU-2025:1038-1, SUSE-RU-2025:02093-1
SLE HPC 15 SP5 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLE HPC 15 SP5 warewulf4 4.6.0-150500.6.34.1 SUSE-SU-2025:1094-1
SLE HPC 15 SP4 buildah 1.35.5-150400.3.45.1 SUSE-SU-2026:2706-1, SUSE-SU-2025:1014-1
SLE HPC 15 SP4 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SLE HPC 15 SP4 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE HPC 15 SP4 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLE HPC 15 SP4 podman 4.9.5-150400.4.44.1 SUSE-SU-2025:1037-1, SUSE-RU-2025:02091-1
SLE HPC 15 SP4 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SLE HPC 15 SP3 buildah 1.35.5-150300.8.39.1 SUSE-SU-2025:1017-1
SLE HPC 15 SP3 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SLE HPC 15 SP3 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SLE HPC 15 SP3 podman 4.9.5-150300.9.46.1 SUSE-SU-2025:1036-1, SUSE-RU-2025:02092-1
SUSE Package Hub 15 SP6 gitea-tea 0.9.2-bp156.5.1 openSUSE-SU-2025:0094-1
SUSE Manager Server 4.3 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SUSE Manager Server 4.3 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SUSE Manager Proxy 4.3 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
SUSE Manager Proxy 4.3 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
SUSE Enterprise Storage 7.1 buildah 1.35.5-150300.8.39.1 SUSE-SU-2025:1017-1
SUSE Enterprise Storage 7.1 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
SUSE Enterprise Storage 7.1 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
SUSE Enterprise Storage 7.1 podman 4.9.5-150300.9.46.1 SUSE-SU-2025:1036-1, SUSE-RU-2025:02092-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed amazon-ssm-agent 3.3.5226.0-1.1 openSUSE-SU-2026:11694-1
openSUSE Tumbleweed apptainer 1.3.6-5.1 openSUSE-SU-2025:14909-1
openSUSE Tumbleweed cheat 4.4.2-2.1 openSUSE-SU-2025:15487-1
openSUSE Tumbleweed cloudflared 2025.11.1-1.1 openSUSE-SU-2025:15763-1
openSUSE Tumbleweed copacetic 0.10.0-1.1 openSUSE-SU-2025:14900-1
openSUSE Tumbleweed cosign 2.5.0-1.1 openSUSE-SU-2025:14988-1
openSUSE Tumbleweed distrobuilder 3.1-2.1 openSUSE-SU-2025:14877-1
openSUSE Tumbleweed docker 27.5.1_ce-15.1 openSUSE-SU-2025:14985-1
openSUSE Tumbleweed docker-stable 24.0.9_ce-8.1 openSUSE-SU-2025:14923-1
openSUSE Tumbleweed forgejo 10.0.3-1.1 openSUSE-SU-2025:14919-1
openSUSE Tumbleweed forgejo-longterm 11.0.3-1.1 openSUSE-SU-2025:15389-1
openSUSE Tumbleweed forgejo-runner 6.2.2-3.1 openSUSE-SU-2025:14881-1
openSUSE Tumbleweed git-bug 0.8.0+git.1742269202.0ab94c9-1.1 openSUSE-SU-2025:14930-1
openSUSE Tumbleweed git-lfs 3.7.0-1.1 openSUSE-SU-2025:15220-1
openSUSE Tumbleweed google-guest-agent 20260529.00-1.1 openSUSE-SU-2026:10921-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250226T025151-1.1 openSUSE-SU-2025:14843-1
openSUSE Tumbleweed k3sup 0.13.14-1.1 openSUSE-SU-2026:12295-1
openSUSE Tumbleweed kumactl 3.0.0-1.1 openSUSE-SU-2026:12300-1
openSUSE Tumbleweed nebula 1.9.5-2.1 openSUSE-SU-2025:14883-1
openSUSE Tumbleweed podman 5.4.1-3.1 openSUSE-SU-2025:14940-1
openSUSE Tumbleweed qubesome 0.0.10-1.1 openSUSE-SU-2025:14932-1
openSUSE Tumbleweed rclone 1.69.2-1.1 openSUSE-SU-2025:15054-1
openSUSE Tumbleweed rekor 1.3.10-1.1 openSUSE-SU-2025:14990-1
openSUSE Tumbleweed tailscale 1.80.3-2.1 openSUSE-SU-2025:14887-1
openSUSE Tumbleweed teleport 17.2.9-1.1 openSUSE-SU-2025:14839-1
openSUSE Tumbleweed traefik 3.4.3-1.1 openSUSE-SU-2025:15304-1
openSUSE Tumbleweed traefik2 2.11.26-1.1 openSUSE-SU-2025:15305-1
openSUSE Tumbleweed trivy 0.65.0-1.1 openSUSE-SU-2025:15454-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git185.a5708584-2.1 openSUSE-SU-2026:11126-1
openSUSE Tumbleweed vexctl 0.4.1+git78.f951e3a-1.1 openSUSE-SU-2026:10230-1
openSUSE Tumbleweed warewulf4 4.6.0-2.1 openSUSE-SU-2025:14918-1
openSUSE Leap 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 openSUSE-SU-2026:21079-1
openSUSE Leap 16.0 cheat 4.4.2-bp160.2.1 openSUSE-SU-2025:20177-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 docker-compose 2.33.1-160000.5.1 openSUSE-SU-2026:21247-1
openSUSE Leap 16.0 git-bug 0.10.1-bp160.1.1 openSUSE-SU-2025:20143-1
openSUSE Leap 16.0 git-lfs 3.7.1-bp160.1.1 openSUSE-SU-2026:21621-1
openSUSE Leap 16.0 gitea-tea 0.15.1-bp160.1.1 openSUSE-SU-2026:21603-1
openSUSE Leap 16.0 google-guest-agent 20260430.00-160000.1.1 openSUSE-SU-2026:20969-1
openSUSE Leap 16.0 nebula 1.10.3-bp160.1.1 openSUSE-SU-2026:20581-1
openSUSE Leap 16.0 podman 5.4.2-160000.4.1 openSUSE-SU-2026:21244-1, openSUSE-SU-2026:20305-1
openSUSE Leap 16.0 tailscale 1.94.1-bp160.1.1 openSUSE-SU-2026:20192-1
openSUSE Leap 16.0 vexctl 0.4.4+git20.5d61136-160000.1.1 openSUSE-SU-2026:21481-1
openSUSE Leap 15.6 apptainer 1.3.6-150600.4.9.1 SUSE-SU-2026:0439-1, SUSE-SU-2025:0980-1
openSUSE Leap 15.6 buildah 1.35.5-150500.3.34.1 SUSE-SU-2025:1018-1
openSUSE Leap 15.6 cosign 2.5.0-150400.3.27.1 SUSE-SU-2025:1333-1
openSUSE Leap 15.6 docker 27.5.1_ce-150000.218.1 SUSE-SU-2025:1062-1
openSUSE Leap 15.6 docker-stable 24.0.9_ce-150000.1.15.1 SUSE-SU-2026:0972-1, SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1
openSUSE Leap 15.6 gitea-tea 0.9.2-bp156.5.1 openSUSE-SU-2025:0094-1
openSUSE Leap 15.6 govulncheck-vulndb 0.0.20250226T025151-150000.1.35.1 SUSE-SU-2025:0770-1
openSUSE Leap 15.6 podman 4.9.5-150500.3.40.1 SUSE-SU-2025:1038-1, SUSE-RU-2025:02093-1
openSUSE Leap 15.6 rekor 1.3.10-150400.4.25.1 SUSE-SU-2025:1332-1
openSUSE Leap 15.6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
openSUSE Leap 15.6 vexctl 0.4.1+git78.f951e3a-150000.1.11.1 SUSE-SU-2026:0592-1
openSUSE Leap 15.6 warewulf4 4.6.0-150500.6.34.1 SUSE-SU-2025:1094-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 rclone 1.69.2-r0 —
Alpine v3.23 rclone 1.69.2-r0 —
Alpine v3.22 rclone 1.69.2-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-ssm-agent 3.3.2299.0-1.amzn2023 ALAS2023-2025-1013
Amazon Linux 2023 docker 25.0.8-1.amzn2023.0.2 ALAS2023-2025-934
Amazon Linux 2023 runfinch-finch 1.7.1-1.amzn2023.0.1 ALAS2023-2025-914
Amazon Linux 2 amazon-ssm-agent 3.3.2299.0-1.amzn2 ALAS2-2025-2883

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 cert-manager 1.12.15-2 —
Azure Linux 3 cf-cli 8.7.11-2 —
Azure Linux 3 cri-o No fix yet —
Azure Linux 3 docker-buildx 0.14.0-4 —
Azure Linux 3 docker-compose 2.27.0-4 —
Azure Linux 3 gh 2.62.0-7 —
Azure Linux 3 kubernetes 1.30.10-3 —
Azure Linux 3 kubevirt 1.2.0-15 —
Azure Linux 3 moby-engine 25.0.3-11 —
Azure Linux 3 node-problem-detector 0.8.20-2 —
Azure Linux 3 packer 1.9.5-6 —
Azure Linux 3 podman 5.6.1-2 —
Azure Linux 3 telegraf 1.31.0-7 —
Azure Linux 2 (CBL-Mariner) cert-manager 1.11.2-20 —
Azure Linux 2 (CBL-Mariner) kubernetes 1.28.4-15 —
Azure Linux 2 (CBL-Mariner) kubevirt 0.59.0-25 —
Azure Linux 2 (CBL-Mariner) moby-compose 2.17.3-10 —
Azure Linux 2 (CBL-Mariner) moby-engine 24.0.9-15 —
Azure Linux 2 (CBL-Mariner) packer 1.9.5-10 —
Azure Linux 2 (CBL-Mariner) podman No fix yet —
Azure Linux 2 (CBL-Mariner) telegraf 1.29.4-13 —
Azure Linux 2 (CBL-Mariner) terraform 1.3.2-24 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 gvisor-tap-vsock +1 6:0.8.5-2.el10_0 ELSA-2025-7484
Oracle Linux 10 podman +3 6:5.4.0-10.0.1.el10_0 ELSA-2025-7462
Oracle Linux 9 gvisor-tap-vsock 6:0.8.5-1.el9_5 ELSA-2025-7416, ELSA-2025-3833
Oracle Linux 9 gvisor-tap-vsock-gvforwarder 6:0.8.5-1.el9_6 ELSA-2025-7416
Oracle Linux 9 podman +4 4:5.2.2-15.0.1.el9_5 ELSA-2025-7391, ELSA-2025-3336
Oracle Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 buildah +1 2:1.33.12-1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 containernetworking-plugins 1:1.4.0-5.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 podman +6 4:4.9.4-20.0.1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 python3-podman 4.9.0-3.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 runc 1:1.1.12-6.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 skopeo +1 2:1.14.5-3.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90541+332b2aa7 ELSA-2025-3210

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r27 —
Wolfi rolling actions-runner-controller +1 0.10.1-r4 —
Wolfi rolling age 1.2.1-r3 —
Wolfi rolling amass 4.2.0-r20 —
Wolfi rolling amazon-cloudwatch-agent +6 1.300054.0-r1 —
Wolfi rolling apko 0.25.5-r0 —
Wolfi rolling argo-events 1.9.5-r3 —
Wolfi rolling argo-rollouts +1 1.8.0-r31 —
Wolfi rolling argo-workflows 3.6.5-r0 —
Wolfi rolling argocd-image-updater +1 0.15.2-r8 —
Wolfi rolling atlantis 0.33.0-r2 —
Wolfi rolling authservice +1 1.0.4-r2 —
Wolfi rolling azcopy 10.28.0-r4 —
Wolfi rolling bank-vaults +1 1.20.4-r26 —
Wolfi rolling bom 0.6.0-r17 —
Wolfi rolling buf 1.50.1-r0 —
Wolfi rolling buildah 1.39.2-r31 —
Wolfi rolling buildctl +1 0.20.1-r1 —
Wolfi rolling caddy +2 2.9.1-r6 —
Wolfi rolling cadvisor +1 0.52.1-r2 —
Wolfi rolling cert-exporter 2.14.0-r7 —
Wolfi rolling cert-manager-cmctl 2.1.1-r7 —
Wolfi rolling cert-manager-istio-csr +1 0.14.0-r5 —
Wolfi rolling cert-manager-webhook-pdns 2.5.2-r2 —
Wolfi rolling certificate-transparency +1 1.3.1-r5 —
Wolfi rolling cfssl +7 1.6.5-r16 —
Wolfi rolling chartmuseum 0.16.2-r13 —
Wolfi rolling chezmoi 2.60.1-r0 —
Wolfi rolling cilium-cli 0.18.2-r1 —
Wolfi rolling cloud-provider-aws-1.31 +2 1.31.5-r31 —
Wolfi rolling cloudflared 2025.2.1-r2 —
Wolfi rolling cloudprober +1 0.13.9-r2 —
Wolfi rolling cluster-api-aws-controller +1 2.8.4-r1 —
Wolfi rolling conftest 0.58.0-r1 —
Wolfi rolling cortex +1 1.19.0-r3 —
Wolfi rolling cosign 2.4.3-r4 —
Wolfi rolling croc 10.2.1-r3 —
Wolfi rolling crossplane-provider-aws +38 1.21.0-r3 —
Wolfi rolling crossplane-provider-keycloak 1.7.0-r7 —
Wolfi rolling ctr-1 +4 1.7.27-r0 —
Wolfi rolling ctr-2 +4 2.0.3-r1 —
Wolfi rolling dagdotdev 0.0.13-r2 —
Wolfi rolling dagger 0.17.0-r0 —
Wolfi rolling dbmate 2.26.0-r1 —
Wolfi rolling descheduler 0.32.2-r31 —
Wolfi rolling dex +1 2.42.0-r2 —
Wolfi rolling distribution 3.0.0-r31 —
Wolfi rolling docker-cli-buildx 0.22.0-r0 —
Wolfi rolling docker-compose 2.33.1-r1 —
Wolfi rolling docker-credential-acr-env 0.7.0-r19 —
Wolfi rolling docker-dind 28.0.1-r3 —
Wolfi rolling dockerize 0.9.2-r3 —
Wolfi rolling dynamic-localpv-provisioner 4.2.0-r2 —
Wolfi rolling eksctl 0.205.0-r1 —
Wolfi rolling extism 1.6.2-r3 —
Wolfi rolling falcoctl +1 0.11.0-r5 —
Wolfi rolling falcosidekick 2.31.1-r3 —
Wolfi rolling ferretdb 1.24.0-r7 —
Wolfi rolling filebrowser +1 2.32.0-r2 —
Wolfi rolling flannel +1 0.26.5-r2 —
Wolfi rolling fluent-bit-plugin-loki 3.4.2-r1 —
Wolfi rolling flux 2.5.1-r2 —
Wolfi rolling flux-helm-controller +1 1.2.0-r2 —
Wolfi rolling flux-image-automation-controller +1 0.40.0-r1 —
Wolfi rolling flux-image-reflector-controller +1 0.34.0-r3 —
Wolfi rolling flux-kustomize-controller +1 1.5.1-r1 —
Wolfi rolling flux-notification-controller +1 1.5.0-r2 —
Wolfi rolling flux-source-controller +1 1.5.0-r5 —
Wolfi rolling flyte 1.15.0-r2 —
Wolfi rolling fq 0.14.0-r1 —
Wolfi rolling frp 0.61.2-r0 —
Wolfi rolling fscrypt 0.3.5-r6 —
Wolfi rolling fulcio 1.6.6-r5 —
Wolfi rolling gatus +1 5.16.0-r4 —
Wolfi rolling gcsfuse 1.4.2-r16 —
Wolfi rolling gh +1 2.68.1-r1 —
Wolfi rolling git-lfs +1 3.6.1-r3 —
Wolfi rolling gitleaks 8.24.0-r1 —
Wolfi rolling gitness 3.1.1-r4 —
Wolfi rolling gitsign +4 0.12.0-r6 —
Wolfi rolling glab 1.53.0-r2 —
Wolfi rolling go-discover 0_git20250320-r0 —
Wolfi rolling go-licenses 1.6.0-r23 —
Wolfi rolling gobuster 3.6.0-r19 —
Wolfi rolling gomplate 4.3.1-r0 —
Wolfi rolling goreleaser 2.8.1-r0 —
Wolfi rolling gostatsd 28.3.0-r11 —
Wolfi rolling gptscript 0.9.5-r7 —
Wolfi rolling grafana-agent-operator 0.44.5-r1 —
Wolfi rolling grafana-alloy 1.7.2-r1 —
Wolfi rolling grafana-mimir 2.15.0-r8 —
Wolfi rolling grpc-health-probe +1 0.4.37-r31 —
Wolfi rolling guac +4 0.13.2-r3 —
Wolfi rolling harbor-registry 3.0.0_alpha1-r20 —
Wolfi rolling hcloud 1.50.0-r3 —
Wolfi rolling helm 3.17.1-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-docs 1.14.2-r6 —
Wolfi rolling helm-operator +1 1.39.1-r4 —
Wolfi rolling helm-push 0.10.4-r21 —
Wolfi rolling hugo +1 0.145.0-r1 —
Wolfi rolling hydra 2.3.0-r3 —
Wolfi rolling istio-pilot-agent-1.25 +1 1.25.0-r5 —
Wolfi rolling jitsucom-bulker +10 2.8.6-r3 —
Wolfi rolling k3d +2 5.8.3-r7 —
Wolfi rolling k3s +2 1.32.4.1-r1 —
Wolfi rolling k3s-1.32 +1 1.32.13.1-r2 —
Wolfi rolling k6 0.57.0-r1 —
Wolfi rolling k8sgpt 0.4.0-r2 —
Wolfi rolling k8ssandra-client +1 0.6.0-r6 —
Wolfi rolling k9s 0.40.8-r1 —
Wolfi rolling kaf 0.2.8-r11 —
Wolfi rolling kafka-proxy +1 0.4.1-r1 —
Wolfi rolling kafka_exporter 1.9.0-r31 —
Wolfi rolling kaniko +3 1.23.2-r12 —
Wolfi rolling kapp-controller +1 0.55.1-r2 —
Wolfi rolling kargo +1 1.3.1-r1 —
Wolfi rolling kiali 2.6.0-r2 —
Wolfi rolling kine 0.13.10-r1 —
Wolfi rolling ko 0.17.1-r7 —
Wolfi rolling kots +2 1.124.5-r2 —
Wolfi rolling kserve +9 0.14.1-r6 —
Wolfi rolling ksops +1 4.3.3-r4 —
Wolfi rolling kube-bench +1 0.10.4-r1 —
Wolfi rolling kube-fluentd-operator +3 1.18.2-r32 —
Wolfi rolling kube-metrics-adapter 0.2.4-r1 —
Wolfi rolling kube-rbac-proxy 0.19.0-r1 —
Wolfi rolling kube-state-metrics +1 2.15.0-r6 —
Wolfi rolling kube-vip +1 0.8.9-r3 —
Wolfi rolling kubectl-1.28 +2 1.28.15-r10 —
Wolfi rolling kubectl-1.29 +2 1.29.15-r1 —
Wolfi rolling kubectl-1.30 +2 1.30.11-r1 —
Wolfi rolling kubectl-1.31 +1 1.31.6-r3 —
Wolfi rolling kubectl-1.32 +1 1.32.3-r1 —
Wolfi rolling kubeflow-katib +17 0.17.0-r11 —
Wolfi rolling kubeflow-pipelines +11 2.4.0-r5 —
Wolfi rolling kubernetes-dashboard 7.11.1-r1 —
Wolfi rolling kubernetes-dashboard-api +11 1.11.1-r2 —
Wolfi rolling kubernetes-dashboard-auth +1 1.2.4-r2 —
Wolfi rolling kubernetes-dashboard-web +1 1.6.2-r1 —
Wolfi rolling kubernetes-dns-node-cache 1.25.0-r4 —
Wolfi rolling kubernetes-event-exporter +1 1.7-r17 —
Wolfi rolling kubescape 3.0.32-r1 —
Wolfi rolling kubevela +3 1.10.2-r2 —
Wolfi rolling kubewatch 2.9.0-r5 —
Wolfi rolling kwok +1 0.6.1-r6 —
Wolfi rolling kyverno-notation-aws +1 1.1-r8 —
Wolfi rolling lazygit 0.48.0-r1 —
Wolfi rolling litestream 0.3.13-r11 —
Wolfi rolling local-static-provisioner +3 2.7.0-r14 —
Wolfi rolling malcontent 1.8.8-r1 —
Wolfi rolling mc +1 0.20250221.160046-r1 —
Wolfi rolling memcached-exporter +1 0.15.1-r3 —
Wolfi rolling metrics-server +2 0.7.2-r8 —
Wolfi rolling minio-operator +3 7.0.0-r2 —
Wolfi rolling mkcert 1.4.4-r10 —
Wolfi rolling mongo-tools 100.11.0-r6 —
Wolfi rolling nats 0.1.6-r3 —
Wolfi rolling nats-server +1 2.10.26-r1 —
Wolfi rolling nats-top +1 0.6.3-r1 —
Wolfi rolling nerdctl 2.0.3-r3 —
Wolfi rolling neuvector-sigstore-interface 0_git20240801-r8 —
Wolfi rolling newrelic-nri-statsd 2.11.0-r0 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r18 —
Wolfi rolling nginx-prometheus-exporter +1 1.4.1-r4 —
Wolfi rolling nri-kafka +2 3.10.2-r1 —
Wolfi rolling nri-mssql +1 2.17.0-r1 —
Wolfi rolling nuclei 3.3.10-r1 —
Wolfi rolling oauth2-proxy +1 7.8.1-r4 —
Wolfi rolling octo-sts +1 0.4.2-r8 —
Wolfi rolling ollama +1 0.6.2-r0 —
Wolfi rolling op-geth +6 1.101500.1-r1 —
Wolfi rolling openbao +3 2.2.0-r1 —
Wolfi rolling openbao-k8s +1 1.4.0-r32 —
Wolfi rolling opencost +1 1.114.0-r1 —
Wolfi rolling openfga +2 1.8.6-r2 —
Wolfi rolling opentelemetry-collector +2 0.121.0-r1 —
Wolfi rolling opentofu-1.9 1.9.0-r5 —
Wolfi rolling oras 1.2.2-r3 —
Wolfi rolling osv-scanner 1.9.2-r4 —
Wolfi rolling podman +1 5.4.1-r1 —
Wolfi rolling portieris +1 0.13.25-r2 —
Wolfi rolling postgres-operator +1 1.14.0-r3 —
Wolfi rolling prometheus-3.2 3.2.1-r1 —
Wolfi rolling prometheus-adapter +2 0.12.0-r9 —
Wolfi rolling prometheus-alertmanager +1 0.28.1-r1 —
Wolfi rolling prometheus-operator +3 0.81.0-r0 —
Wolfi rolling prometheus-pushgateway +1 1.11.0-r3 —
Wolfi rolling promxy 0.0.92-r31 —
Wolfi rolling pulumi +3 3.155.0-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.16.0-r12 —
Wolfi rolling pulumi-language-dotnet 3.76.1-r1 —
Wolfi rolling pulumi-language-java 1.5.0-r1 —
Wolfi rolling pulumi-language-yaml 1.14.1-r1 —
Wolfi rolling q 0.19.2-r14 —
Wolfi rolling rabbitmq-messaging-topology-operator +2 1.16.0-r3 —
Wolfi rolling rancher-fleet +4 0.11.5-r2 —
Wolfi rolling rclone +1 1.69.1-r1 —
Wolfi rolling rekor +3 1.3.9-r5 —
Wolfi rolling restic +1 0.17.3-r6 —
Wolfi rolling rook +1 1.16.5-r2 —
Wolfi rolling sbomqs 1.0.2-r1 —
Wolfi rolling scorecard 5.1.1-r1 —
Wolfi rolling seaweedfs +2 3.85-r1 —
Wolfi rolling secrets-store-csi-driver +1 1.4.8-r2 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.6.2-r31 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.7.0-r5 —
Wolfi rolling skaffold 2.14.1-r4 —
Wolfi rolling skopeo 1.18.0-r4 —
Wolfi rolling slsa-verifier 2.7.0-r2 —
Wolfi rolling snyk-cli 1.1295.4-r1 —
Wolfi rolling sops 3.9.4-r3 —
Wolfi rolling spark-operator +1 2.1.0-r7 —
Wolfi rolling spegel +1 0.0.30-r2 —
Wolfi rolling spiffe-helper +1 0.9.1-r3 —
Wolfi rolling spire-agent +2 1.11.2-r3 —
Wolfi rolling spire-controller-manager +1 0.6.1-r4 —
Wolfi rolling splunk-otel-collector +6 0.120.0-r1 —
Wolfi rolling spqr 2.4.0-r1 —
Wolfi rolling sql_exporter 0.17.1-r2 —
Wolfi rolling src 6.1.0-r1 —
Wolfi rolling src-fingerprint 0.19.0-r25 —
Wolfi rolling step-ca 0.28.2-r4 —
Wolfi rolling step-issuer +1 0.9.7-r5 —
Wolfi rolling step-kms-plugin 0.12.1-r2 —
Wolfi rolling swagger 0.31.0-r7 —
Wolfi rolling syft 1.20.0-r2 —
Wolfi rolling tailscale +1 1.80.3-r1 —
Wolfi rolling task 3.42.1-r1 —
Wolfi rolling tdbg +9 1.27.1-r1 —
Wolfi rolling tekton-chains 0.24.0-r3 —
Wolfi rolling temporal +1 1.3.0-r1 —
Wolfi rolling temporal-ui-server +1 2.36.0-r1 —
Wolfi rolling terraform +2 1.5.7-r24 —
Wolfi rolling terraform-docs 0.19.0-r5 —
Wolfi rolling terraform-provider-azuread 3.2.0-r1 —
Wolfi rolling terraform-provider-azurerm 4.22.0-r1 —
Wolfi rolling terraform-provider-google 6.26.0-r0 —
Wolfi rolling terraform-provider-pagerduty 3.23.1-r1 —
Wolfi rolling terraform-provider-random 3.7.1-r1 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r1 —
Wolfi rolling terraform-provider-tls 4.0.6-r1 —
Wolfi rolling terragrunt +1 0.76.1-r0 —
Wolfi rolling tflint +1 0.55.1-r3 —
Wolfi rolling tfsec 1.28.13-r3 —
Wolfi rolling thanos +1 0.37.2-r5 —
Wolfi rolling timestamp-authority +2 1.2.4-r4 —
Wolfi rolling tkn 0.40.0-r4 —
Wolfi rolling traefik-3.3 3.3.4-r1 —
Wolfi rolling trillian +2 1.7.1-r3 —
Wolfi rolling trivy 0.60.0-r2 —
Wolfi rolling trufflehog 3.88.16-r1 —
Wolfi rolling trust-manager 0.16.0-r1 —
Wolfi rolling tw +14 0.0.7-r0 —
Wolfi rolling undock 0.9.0-r4 —
Wolfi rolling up +3 No fix yet —
Wolfi rolling vault-benchmark +1 0.3.0-r31 —
Wolfi rolling vcluster +2 0.23.0-r2 —
Wolfi rolling velero +2 1.15.2-r3 —
Wolfi rolling velero-plugin-for-microsoft-azure +1 1.11.1-r31 —
Wolfi rolling vendir 0.43.0-r3 —
Wolfi rolling vexctl 0.3.0-r9 —
Wolfi rolling wal-g +1 3.0.7-r2 —
Wolfi rolling weaviate 1.29.0-r31 —
Wolfi rolling wgcf 2.2.25-r1 —
Wolfi rolling wireguard-go 0.0.20230223-r21 —
Wolfi rolling x509-certificate-exporter +1 3.18.1-r5 —
Wolfi rolling xeol +1 0.10.8-r1 —
Wolfi rolling zot 2.1.2-r5 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/crypto < 0.35.0 0.35.0 GHSA-hcg3-q754-cr77

Advisories 50

References