Description
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | net/http/internal | < 1.23.8, 1.24.0-0 – < 1.24.2 | 1.23.8 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | golang-1.24 | 1.24.2-1 | — |
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | golang-1.21 +2 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.17 +5 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.13 +5 | No fix yet | — |
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +2 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.13 +1 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | buildah +1 | 2:1.39.4-2.el10_0 | RHSA-2025:9148 |
| RHEL 10 | delve | 1.24.1-2.el10_0 | RHSA-2025:9317 |
| RHEL 10 | git-lfs | 3.6.1-2.el10_0 | RHSA-2025:9063 |
| RHEL 10 | golang +6 | 1.23.9-1.el10_0 | RHSA-2025:8477 |
| RHEL 10 | grafana +1 | 10.2.6-18.el10_0 | RHSA-2025:8666 |
| RHEL 10 | grafana-pcp | 5.2.2-3.el10_0 | RHSA-2025:8915 |
| RHEL 10 | gvisor-tap-vsock +1 | 6:0.8.5-2.el10_0 | RHSA-2025:9151 |
| RHEL 10 | ipp-usb +1 | 0.9.27-3.el10_0 | RHSA-2025:9156 |
| RHEL 10 | opentelemetry-collector | 0.127.0-1.el10_0 | RHSA-2025:12850 |
| RHEL 10 | osbuild-composer +2 | 134.1-2.el10_0 | RHSA-2025:9623 |
| RHEL 10 | podman +3 | 6:5.4.0-10.el10_0 | RHSA-2025:9146 |
| RHEL 10 | skopeo +1 | 2:1.18.1-2.el10_0 | RHSA-2025:9149 |
| RHEL 9 | buildah +1 | 2:1.39.4-2.el9_6 | RHSA-2025:9147 |
| RHEL 9 | containernetworking-plugins | 1:1.6.2-2.el9_6 | RHSA-2025:9143 |
| RHEL 9 | git-lfs | 3.6.1-2.el9_6 | RHSA-2025:9106 |
| RHEL 9 | golang +7 | 1.23.9-1.el9_6 | RHSA-2025:8476 |
| RHEL 9 | grafana +1 | 10.2.6-14.el9_6 | RHSA-2025:8682 |
| RHEL 9 | grafana-pcp | 5.1.1-11.el9_6 | RHSA-2025:8916 |
| RHEL 9 | gvisor-tap-vsock +1 | 6:0.8.5-2.el9_6 | RHSA-2025:9150 |
| RHEL 9 | opentelemetry-collector | 0.127.0-1.el9_6 | RHSA-2025:12831 |
| RHEL 9 | osbuild-composer +2 | 132.2-2.el9_6 | RHSA-2025:9634 |
| RHEL 9 | podman +4 | 5:5.4.0-10.el9_6 | RHSA-2025:9144 |
| RHEL 9 | skopeo +1 | 2:1.18.1-2.el9_6 | RHSA-2025:9145 |
| RHEL 9 | weldr-client | 35.12-4.el9_6 | RHSA-2025:9635 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | buildah +1 | 2:1.33.12-2.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | delve | 1.24.1-1.module+el8.10.0+22945+b2c96a17 | RHSA-2025:8478 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | git-lfs | 3.4.1-5.el8_10 | RHSA-2025:9060 |
| RHEL 8 | golang +6 | 1.23.9-1.module+el8.10.0+23162+9223a61a | RHSA-2025:8478 |
| RHEL 8 | grafana +1 | 9.2.10-25.el8_10 | RHSA-2025:8667 |
| RHEL 8 | grafana-pcp | 5.1.1-10.el8_10 | RHSA-2025:8918 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | osbuild-composer +2 | 101-4.el8_10 | RHSA-2025:9844 |
| RHEL 8 | podman +6 | 4:4.9.4-20.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | python-podman +1 | 4.9.0-3.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | runc | 1:1.1.12-6.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | skopeo +1 | 2:1.14.5-4.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+23250+94af2c8e | RHSA-2025:9142 |
| RHEL 8 | weldr-client | 35.12-3.el8_10 | RHSA-2025:9845 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | buildah +1 | 2:1.33.12-2.el9_4.1 | RHSA-2025:8632 |
| RHEL 9.4 EUS | containernetworking-plugins | 1:1.4.0-6.el9_4.1 | RHSA-2025:8539 |
| RHEL 9.4 EUS | git-lfs | 3.4.1-4.el9_4.2 | RHSA-2025:9078 |
| RHEL 9.4 EUS | golang +6 | 1.21.13-9.el9_4 | RHSA-2025:8689 |
| RHEL 9.4 EUS | grafana +1 | 9.2.10-23.el9_4 | RHSA-2025:8665 |
| RHEL 9.4 EUS | grafana-pcp | 5.1.1-5.el9_4 | RHSA-2025:8975 |
| RHEL 9.4 EUS | gvisor-tap-vsock | 6:0.7.3-5.el9_4.2 | RHSA-2025:8601 |
| RHEL 9.4 EUS | opentelemetry-collector | 0.127.0-1.el9_4 | RHSA-2025:9756 |
| RHEL 9.4 EUS | osbuild-composer +2 | 101.3-2.el9_4 | RHSA-2025:9641 |
| RHEL 9.4 EUS | podman +4 | 4:4.9.4-18.el9_4.1 | RHSA-2025:8634 |
| RHEL 9.4 EUS | skopeo +1 | 2:1.14.5-2.el9_4.1 | RHSA-2025:8633 |
| RHEL 9.4 EUS | weldr-client | 35.12-3.el9_4 | RHSA-2025:9638 |
| RHEL 9.2 E4S | buildah +1 | 1:1.29.5-1.el9_2.1 | RHSA-2025:9017 |
| RHEL 9.2 E4S | containernetworking-plugins | 1:1.2.0-3.el9_2.2 | RHSA-2025:9019 |
| RHEL 9.2 E4S | git-lfs | 3.2.0-2.el9_2.3 | RHSA-2025:9205 |
| RHEL 9.2 E4S | golang +6 | 1.19.13-16.el9_2 | RHSA-2025:8737 |
| RHEL 9.2 E4S | grafana | 9.0.9-8.el9_2 | RHSA-2025:8680 |
| RHEL 9.2 E4S | grafana-pcp | 5.1.1-3.el9_2 | RHSA-2025:8982 |
| RHEL 9.2 E4S | osbuild-composer +3 | 76.1-2.el9_2 | RHSA-2025:9640 |
| RHEL 9.2 E4S | podman +5 | 2:4.4.1-22.el9_2.2 | RHSA-2025:9020 |
| RHEL 9.2 E4S | skopeo +1 | 2:1.11.2-0.1.el9_2.3 | RHSA-2025:9018 |
| RHEL 9.2 E4S | weldr-client | 35.9-2.el9_2 | RHSA-2025:9637 |
| RHEL 9.0 E4S | buildah +1 | 1:1.26.9-1.el9_0.1 | RHSA-2025:9062 |
| RHEL 9.0 E4S | containernetworking-plugins | 1:1.0.1-6.el9_0.2 | RHSA-2025:9061 |
| RHEL 9.0 E4S | git-lfs | 2.13.3-5.el9_0.4 | RHSA-2025:9177 |
| RHEL 9.0 E4S | golang +6 | 1.17.13-6.el9_0 | RHSA-2025:9043 |
| RHEL 9.0 E4S | grafana | 7.5.11-11.el9_0 | RHSA-2025:9059 |
| RHEL 9.0 E4S | grafana-pcp | 3.2.0-4.el9_0 | RHSA-2025:8984 |
| RHEL 9.0 E4S | osbuild-composer +3 | 46.3-4.el9_0 | RHSA-2025:9642 |
| RHEL 9.0 E4S | podman +6 | 2:4.2.0-6.el9_0.4 | RHSA-2025:9064 |
| RHEL 9.0 E4S | skopeo +1 | 2:1.8.0-4.1.el9_0.1 | RHSA-2025:9065 |
| RHEL 9.0 E4S | weldr-client | 35.5-3.el9_0 | RHSA-2025:9639 |
| RHEL 8.8 TUS | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2025:8974 |
| RHEL 8.8 TUS | git-lfs | 3.2.0-2.el8_8.4 | RHSA-2025:9200 |
| RHEL 8.8 TUS | go-toolset | 1.19.13-3.module+el8.8.0+22903+37387f31 | RHSA-2025:8974 |
| RHEL 8.8 TUS | golang +6 | 1.19.13-15.module+el8.8.0+23168+f74784bb | RHSA-2025:8974 |
| RHEL 8.8 TUS | grafana | 7.5.15-7.el8_8 | RHSA-2025:8685 |
| RHEL 8.8 TUS | grafana-pcp | 3.2.0-4.el8_8 | RHSA-2025:8983 |
| RHEL 8.8 TUS | osbuild-composer +3 | 75-4.el8_8 | RHSA-2025:9711 |
| RHEL 8.8 TUS | weldr-client | 35.9-3.el8_8 | RHSA-2025:9712 |
| RHEL 8.8 E4S | aardvark-dns | 2:1.5.0-2.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | buildah +1 | 1:1.29.5-1.module+el8.8.0+23219+eb2ac228.1 | RHSA-2025:9025 |
| RHEL 8.8 E4S | cockpit-podman | 63.1-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | conmon | 3:2.1.6-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | container-selinux | 2:2.229.0-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+23219+eb2ac228 | RHSA-2025:9025 |
| RHEL 8.8 E4S | containers-common | 2:1-67.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | crit +4 | 3.15-4.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | crun | 1.8.4-2.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2025:8974 |
| RHEL 8.8 E4S | fuse-overlayfs | 1.11-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | git-lfs | 3.2.0-2.el8_8.4 | RHSA-2025:9200 |
| RHEL 8.8 E4S | go-toolset | 1.19.13-3.module+el8.8.0+22903+37387f31 | RHSA-2025:8974 |
| RHEL 8.8 E4S | golang +6 | 1.19.13-15.module+el8.8.0+23168+f74784bb | RHSA-2025:8974 |
| RHEL 8.8 E4S | grafana | 7.5.15-7.el8_8 | RHSA-2025:8685 |
| RHEL 8.8 E4S | grafana-pcp | 3.2.0-4.el8_8 | RHSA-2025:8983 |
| RHEL 8.8 E4S | libslirp +1 | 4.4.0-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | netavark | 2:1.5.1-3.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | oci-seccomp-bpf-hook | 1.2.8-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | osbuild-composer +3 | 75-4.el8_8 | RHSA-2025:9711 |
| RHEL 8.8 E4S | podman +6 | 3:4.4.1-27.module+el8.8.0+23214+75386bb7.2 | RHSA-2025:9025 |
| RHEL 8.8 E4S | python-podman +1 | 4.4.1-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | runc | 1:1.1.12-1.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | skopeo +1 | 2:1.11.3-0.1.module+el8.8.0+23219+eb2ac228 | RHSA-2025:9025 |
| RHEL 8.8 E4S | slirp4netns | 1.2.0-3.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | toolbox +1 | 0.0.99.3-7.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | udica | 0.2.6-20.module+el8.8.0+22334+bb93e398 | RHSA-2025:9025 |
| RHEL 8.8 E4S | weldr-client | 35.9-3.el8_8 | RHSA-2025:9712 |
| RHEL 8.6 TUS | buildah +1 | 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 TUS | cockpit-podman | 49.1-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | conmon | 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | container-selinux | 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 TUS | containers-common | 2:1-40.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | crit +4 | 3.15-3.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | crun | 1.5-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2025:9069 |
| RHEL 8.6 TUS | fuse-overlayfs | 1.9-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | git-lfs | 2.13.3-3.el8_6.4 | RHSA-2025:9199 |
| RHEL 8.6 TUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2025:9069 |
| RHEL 8.6 TUS | golang +6 | 1.17.13-9.module+el8.6.0+23245+b36ba85c | RHSA-2025:9069 |
| RHEL 8.6 TUS | grafana | 7.5.11-7.el8_6 | RHSA-2025:9070 |
| RHEL 8.6 TUS | grafana-pcp | 3.2.0-2.el8_6 | RHSA-2025:9067 |
| RHEL 8.6 TUS | libslirp +1 | 4.4.0-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | osbuild-composer +3 | 46.3-3.el8_6 | RHSA-2025:9713 |
| RHEL 8.6 TUS | podman +6 | 2:4.2.0-8.module+el8.6.0+23285+f8f75f94.3 | RHSA-2025:9312 |
| RHEL 8.6 TUS | python-podman +1 | 4.0.1-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | runc | 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | skopeo +1 | 2:1.9.1-2.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 TUS | slirp4netns | 1.2.0-3.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | udica | 0.2.6-5.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 TUS | weldr-client | 35.5-2.el8_6 | RHSA-2025:9714 |
| RHEL 8.6 E4S | buildah +1 | 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 E4S | cockpit-podman | 49.1-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | conmon | 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | container-selinux | 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 E4S | containers-common | 2:1-40.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | crit +4 | 3.15-3.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | crun | 1.5-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2025:9069 |
| RHEL 8.6 E4S | fuse-overlayfs | 1.9-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | git-lfs | 2.13.3-3.el8_6.4 | RHSA-2025:9199 |
| RHEL 8.6 E4S | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2025:9069 |
| RHEL 8.6 E4S | golang +6 | 1.17.13-9.module+el8.6.0+23245+b36ba85c | RHSA-2025:9069 |
| RHEL 8.6 E4S | grafana | 7.5.11-7.el8_6 | RHSA-2025:9070 |
| RHEL 8.6 E4S | grafana-pcp | 3.2.0-2.el8_6 | RHSA-2025:9067 |
| RHEL 8.6 E4S | libslirp +1 | 4.4.0-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | netavark +1 | 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | osbuild-composer +3 | 46.3-3.el8_6 | RHSA-2025:9713 |
| RHEL 8.6 E4S | podman +6 | 2:4.2.0-8.module+el8.6.0+23285+f8f75f94.3 | RHSA-2025:9312 |
| RHEL 8.6 E4S | python-podman +1 | 4.0.1-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | runc | 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | skopeo +1 | 2:1.9.1-2.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 E4S | slirp4netns | 1.2.0-3.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | udica | 0.2.6-5.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 E4S | weldr-client | 35.5-2.el8_6 | RHSA-2025:9714 |
| RHEL 8.6 AUS | buildah +1 | 1:1.26.9-2.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 AUS | cockpit-podman | 49.1-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | conmon | 2:2.1.4-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | container-selinux | 2:2.189.0-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 AUS | containers-common | 2:1-40.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | crit +4 | 3.15-3.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | crun | 1.5-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2025:9069 |
| RHEL 8.6 AUS | fuse-overlayfs | 1.9-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | git-lfs | 2.13.3-3.el8_6.4 | RHSA-2025:9199 |
| RHEL 8.6 AUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2025:9069 |
| RHEL 8.6 AUS | golang +6 | 1.17.13-9.module+el8.6.0+23245+b36ba85c | RHSA-2025:9069 |
| RHEL 8.6 AUS | grafana | 7.5.11-7.el8_6 | RHSA-2025:9070 |
| RHEL 8.6 AUS | grafana-pcp | 3.2.0-2.el8_6 | RHSA-2025:9067 |
| RHEL 8.6 AUS | libslirp +1 | 4.4.0-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | osbuild-composer +3 | 46.3-3.el8_6 | RHSA-2025:9713 |
| RHEL 8.6 AUS | podman +6 | 2:4.2.0-8.module+el8.6.0+23285+f8f75f94.3 | RHSA-2025:9312 |
| RHEL 8.6 AUS | python-podman +1 | 4.0.1-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | runc | 1:1.1.12-1.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | skopeo +1 | 2:1.9.1-2.module+el8.6.0+23285+f8f75f94.1 | RHSA-2025:9312 |
| RHEL 8.6 AUS | slirp4netns | 1.2.0-3.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | udica | 0.2.6-5.module+el8.6.0+22769+fa0fe772 | RHSA-2025:9312 |
| RHEL 8.6 AUS | weldr-client | 35.5-2.el8_6 | RHSA-2025:9714 |
| RHEL 8.4 AUS | delve | 1.5.0-2.module+el8.4.0+8864+58b0fcdb | RHSA-2025:9172 |
| RHEL 8.4 AUS | git-lfs | 2.13.3-3.el8_4.2 | RHSA-2025:9313 |
| RHEL 8.4 AUS | go-toolset | 1.15.14-3.module+el8.4.0+22765+91da4d3f | RHSA-2025:9172 |
| RHEL 8.4 AUS | golang +6 | 1.15.14-15.module+el8.4.0+23171+c7105e94 | RHSA-2025:9172 |
| RHEL 8.4 AUS | grafana | 7.3.6-10.el8_4 | RHSA-2025:9207 |
| RHEL 8.4 AUS | grafana-pcp | 3.0.2-2.el8_4 | RHSA-2025:9206 |
| RHEL 8.4 AUS | osbuild-composer +2 | 28.7-3.el8_4 | RHSA-2025:9715 |
| RHEL 8.2 AUS | delve | 1.3.2-3.module+el8.2.0+5581+896cb53e | RHSA-2025:9319 |
| RHEL 8.2 AUS | go-toolset | 1.13.15-1.module+el8.2.0+7662+fa98b974 | RHSA-2025:9319 |
| RHEL 8.2 AUS | golang +6 | 1.13.15-10.module+el8.2.0+23279+c91dba29 | RHSA-2025:9319 |
| RHEL 8.2 AUS | grafana +12 | 6.3.6-8.el8_2 | RHSA-2025:9311 |
| Red Hat OpenShift 4 | afterburn +2 | 5.3.0-2.rhaos4.12.el8 | RHSA-2025:11678 |
| Red Hat OpenShift 4 | container-selinux | 4:2.235.0-2.rhaos4.18.el8 | RHSA-2025:11678 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-5.rhaos4.14.el8 | RHSA-2025:21328, RHSA-2025:11678, RHSA-2025:10295 |
| Red Hat OpenShift 4 | cri-o | 1.25.5-31.rhaos4.12.git53dc492.el8 | RHSA-2025:21328, RHSA-2025:11678, RHSA-2025:10782 |
| Red Hat OpenShift 4 | cri-tools | 1.25.0-6.el8 | RHSA-2025:21328, RHSA-2025:10782, RHSA-2025:10768 |
| Red Hat OpenShift 4 | crun | 1.20-4.rhaos4.18.el8 | RHSA-2025:11678 |
| Red Hat OpenShift 4 | kata-containers | 3.13.0-2.rhaos4.20.el9 | RHSA-2025:11682, RHSA-2025:11678, RHSA-2025:10291 |
| Red Hat OpenShift 4 | openshift +5 | 4.16.0-202507092005.p0.ga6b193c.assembly.stream.el8 | RHSA-2025:15291, RHSA-2025:10782, RHSA-2025:10768 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.16.0-202507050035.p0.gee354f6.assembly.stream.el8 | RHSA-2025:10782, RHSA-2025:10768, RHSA-2025:9279 |
| Red Hat OpenShift 4 | ose-aws-ecr-image-credential-provider | 4.16.0-202507050035.p0.ga53e9de.assembly.stream.el8 | RHSA-2025:10782, RHSA-2025:10768, RHBA-2025:14817 |
| Red Hat OpenShift 4 | ose-azure-acr-image-credential-provider | 4.15.0-202507041136.p0.g0d799a2.assembly.stream.el8 | RHSA-2025:11352, RHSA-2025:10782, RHSA-2025:10768 |
| Red Hat OpenShift 4 | ose-gcp-gcr-image-credential-provider | 4.16.0-202507050035.p0.g26b43df.assembly.stream.el8 | RHSA-2025:10782, RHSA-2025:10768, RHBA-2025:14817 |
| Red Hat OpenShift 4 | podman +6 | 5:5.2.2-8.rhaos4.17.el8 | RHSA-2025:10295, RHSA-2025:9279 |
| Red Hat OpenShift 4 | runc | 4:1.2.5-2.rhaos4.17.el8 | RHSA-2025:21328 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.3-5.rhaos4.14.el8 | RHSA-2025:21328, RHSA-2025:10782, RHSA-2025:10295 |
| Red Hat OpenShift 4 | slirp4netns | 1.1.8-3.rhaos4.18.el8 | RHSA-2025:11678 |
| Red Hat Ansible Automation Platform Inside 2 | receptor | 1.5.7-1.el8ap | RHSA-2025:9986, RHSA-2025:9975 |
| Red Hat Ansible Automation Platform Inside 2 | receptorctl | 1.5.7-2.el8ap | RHSA-2025:9986 |
| Red Hat Ansible Automation Platform Developer 2 | receptor | 1.5.7-1.el8ap | RHSA-2025:9986, RHSA-2025:9975 |
| Red Hat Ansible Automation Platform Developer 2 | receptorctl | 1.5.7-2.el8ap | RHSA-2025:9986 |
| Red Hat Ansible Automation Platform 2 | automation-eda-controller +4 | 1.1.11-1.el8ap | RHSA-2025:9986 |
| Red Hat Ansible Automation Platform 2 | automation-gateway-proxy +1 | 2.5.10-2.el8ap | RHSA-2025:9986 |
| Red Hat Ansible Automation Platform 2 | automation-gateway-proxy-openssl30 +3 | 2.6.6-2.el9ap | RHSA-2025:9986 |
| Red Hat Ansible Automation Platform 2 | receptor | 1.5.7-1.el8ap | RHSA-2025:9986, RHSA-2025:9975 |
| Red Hat Ansible Automation Platform 2 | receptorctl | 1.5.7-2.el8ap | RHSA-2025:9986 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | buildah +1 | 2:1.39.4-2.el10_0 | ALSA-2025:9148 |
| AlmaLinux 10 | delve | 1.24.1-2.el10_0 | ALSA-2025:9317 |
| AlmaLinux 10 | git-lfs | 3.6.1-2.el10_0 | ALSA-2025:9063 |
| AlmaLinux 10 | golang-src +3 | 1.23.9-1.el10_0.alma.1 | ALSA-2025:8477 |
| AlmaLinux 10 | grafana +1 | 10.2.6-18.el10_0 | ALSA-2025:8666 |
| AlmaLinux 10 | grafana-pcp | 5.2.2-3.el10_0 | ALSA-2025:8915 |
| AlmaLinux 10 | gvisor-tap-vsock +1 | 6:0.8.5-2.el10_0 | ALSA-2025:9151 |
| AlmaLinux 10 | ipp-usb | 0.9.27-3.el10_0 | ALSA-2025:9156 |
| AlmaLinux 10 | opentelemetry-collector | 0.127.0-1.el10_0 | ALSA-2025:12850 |
| AlmaLinux 10 | osbuild-composer +2 | 134.1-2.el10_0.alma.1 | ALSA-2025:9623 |
| AlmaLinux 10 | podman-docker | 6:5.4.0-10.el10_0 | ALSA-2025:9146 |
| AlmaLinux 10 | skopeo +1 | 2:1.18.1-2.el10_0 | ALSA-2025:9149 |
| AlmaLinux 9 | buildah +1 | 2:1.39.4-2.el9_6 | ALSA-2025:9147 |
| AlmaLinux 9 | containernetworking-plugins | 1:1.6.2-2.el9_6 | ALSA-2025:9143 |
| AlmaLinux 9 | git-lfs | 3.6.1-2.el9_6 | ALSA-2025:9106 |
| AlmaLinux 9 | golang +7 | 1.23.9-1.el9_6 | ALSA-2025:8476 |
| AlmaLinux 9 | grafana +1 | 10.2.6-14.el9_6 | ALSA-2025:8682 |
| AlmaLinux 9 | grafana-pcp | 5.1.1-11.el9_6 | ALSA-2025:8916 |
| AlmaLinux 9 | gvisor-tap-vsock +1 | 6:0.8.5-2.el9_6 | ALSA-2025:9150 |
| AlmaLinux 9 | opentelemetry-collector | 0.127.0-1.el9_6 | ALSA-2025:12831 |
| AlmaLinux 9 | osbuild-composer +2 | 132.2-2.el9_6.alma.1 | ALSA-2025:9634 |
| AlmaLinux 9 | podman +4 | 5:5.4.0-10.el9_6 | ALSA-2025:9144 |
| AlmaLinux 9 | skopeo +1 | 2:1.18.1-2.el9_6 | ALSA-2025:9145 |
| AlmaLinux 9 | weldr-client | 35.12-4.el9_6 | ALSA-2025:9635 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2025:9142 |
| AlmaLinux 8 | buildah +1 | 2:1.33.12-2.module_el8.10.0+4016+efd18bf8 | ALSA-2025:9142 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+4016+efd18bf8 | ALSA-2025:9142 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2025:9142 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2025:9142 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-6.module_el8.10.0+4016+efd18bf8 | ALSA-2025:9142 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2025:9142 |
| AlmaLinux 8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2025:9142 |
| AlmaLinux 8 | criu +1 | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2025:9142 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2025:9142 |
| AlmaLinux 8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2025:9142 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+3845+87b84552 | ALSA-2025:9142 |
| AlmaLinux 8 | delve | 1.24.1-1.module_el8.10.0+3977+66935a26 | ALSA-2025:8478 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2025:9142 |
| AlmaLinux 8 | git-lfs | 3.4.1-5.el8_10 | ALSA-2025:9060 |
| AlmaLinux 8 | golang +6 | 1.23.9-1.module_el8.10.0+4000+1ad1b2cc | ALSA-2025:8478 |
| AlmaLinux 8 | grafana +1 | 9.2.10-25.el8_10 | ALSA-2025:8667 |
| AlmaLinux 8 | grafana-pcp | 5.1.1-10.el8_10 | ALSA-2025:8918 |
| AlmaLinux 8 | libslirp | 4.4.0-2.module_el8.10.0+3845+87b84552 | ALSA-2025:9142 |
| AlmaLinux 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2025:9142 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2025:9142 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3792+03eaed9c | ALSA-2025:9142 |
| AlmaLinux 8 | osbuild-composer +2 | 101-4.el8_10.alma.1 | ALSA-2025:9844 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-20.module_el8.10.0+3970+8445edf6 | ALSA-2025:9142 |
| AlmaLinux 8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2025:9142 |
| AlmaLinux 8 | runc | 1:1.1.12-6.module_el8.10.0+3959+b8dc5e6a | ALSA-2025:9142 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-4.module_el8.10.0+4016+efd18bf8 | ALSA-2025:9142 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3845+87b84552 | ALSA-2025:9142 |
| AlmaLinux 8 | toolbox | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | ALSA-2025:9142 |
| AlmaLinux 8 | toolbox-tests | 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f | ALSA-2025:9142 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+3926+f12484f5 | ALSA-2025:9142 |
| AlmaLinux 8 | weldr-client | 35.12-3.el8_10 | ALSA-2025:9845 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | buildah | 2:1.39.4-2.el10_0 | RLSA-2025:9148 |
| Rocky Linux 10 | delve | 1.24.1-2.el10_0 | RLSA-2025:9317 |
| Rocky Linux 10 | git-lfs | 3.6.1-2.el10_0 | RLSA-2025:9063 |
| Rocky Linux 10 | golang | 1.23.9-1.el10_0 | RLSA-2025:8477 |
| Rocky Linux 10 | golang-github-openprinting-ipp-usb | 0.9.27-3.el10_0 | RLSA-2025:9156 |
| Rocky Linux 10 | grafana | 10.2.6-18.el10_0 | RLSA-2025:8666 |
| Rocky Linux 10 | grafana-pcp | 5.2.2-3.el10_0 | RLSA-2025:8915 |
| Rocky Linux 10 | gvisor-tap-vsock | 6:0.8.5-2.el10_0 | RLSA-2025:9151 |
| Rocky Linux 10 | opentelemetry-collector | 0.127.0-1.el10_0 | RLSA-2025:12850 |
| Rocky Linux 10 | podman | 6:5.4.0-10.el10_0 | RLSA-2025:9146 |
| Rocky Linux 10 | skopeo | 2:1.18.1-2.el10_0 | RLSA-2025:9149 |
| Rocky Linux 9 | buildah | 2:1.39.4-2.el9_6 | RLSA-2025:9147 |
| Rocky Linux 9 | containernetworking-plugins | 1:1.6.2-2.el9_6 | RLSA-2025:9143 |
| Rocky Linux 9 | git-lfs | 3.6.1-2.el9_6 | RLSA-2025:9106 |
| Rocky Linux 9 | golang | 1.23.9-1.el9_6 | RLSA-2025:8476 |
| Rocky Linux 9 | grafana | 10.2.6-14.el9_6 | RLSA-2025:8682 |
| Rocky Linux 9 | grafana-pcp | 5.1.1-11.el9_6 | RLSA-2025:8916 |
| Rocky Linux 9 | gvisor-tap-vsock | 6:0.8.5-2.el9_6 | RLSA-2025:9150 |
| Rocky Linux 9 | opentelemetry-collector | 0.127.0-1.el9_6 | RLSA-2025:12831 |
| Rocky Linux 9 | podman | 5:5.4.0-10.el9_6 | RLSA-2025:9144 |
| Rocky Linux 9 | skopeo | 2:1.18.1-2.el9_6 | RLSA-2025:9145 |
| Rocky Linux 9 | weldr-client | 35.12-4.el9_6 | RLSA-2025:9635 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2025:9142 |
| Rocky Linux 8 | buildah | 2:1.33.12-2.module+el8.10.0+2001+6a33db9f | RLSA-2025:9142 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+2001+6a33db9f | RLSA-2025:9142 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2025:9142 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | delve | 1.24.1-1.module+el8.10.0+1951+c74bd827 | RLSA-2025:8478 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | git-lfs | 3.4.1-5.el8_10 | RLSA-2025:9060 |
| Rocky Linux 8 | golang +1 | 1.23.9-1.module+el8.10.0+1987+42f155bb | RLSA-2025:8478 |
| Rocky Linux 8 | grafana | 9.2.10-25.el8_10 | RLSA-2025:8667 |
| Rocky Linux 8 | grafana-pcp | 5.1.1-10.el8_10 | RLSA-2025:8918 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | osbuild-composer | 101-4.el8_10.rocky.0.6 | RLSA-2025:9844 |
| Rocky Linux 8 | podman | 4:4.9.4-20.module+el8.10.0+1948+4b5cd4a9 | RLSA-2025:9142 |
| Rocky Linux 8 | python-podman | 4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2025:9142 |
| Rocky Linux 8 | runc | 1:1.1.12-6.module+el8.10.0+1933+1fc610b1 | RLSA-2025:9142 |
| Rocky Linux 8 | skopeo | 2:1.14.5-4.module+el8.10.0+2001+6a33db9f | RLSA-2025:9142 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2025:9142 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2025:9142 |
| Rocky Linux 8 | weldr-client | 35.12-3.el8_10 | RLSA-2025:9845 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | go1.23-openssl | 1.23.12-150600.13.9.1 | SUSE-SU-2025:03159-1 |
| SLES 15 SP6 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLES 15 SP6 | go1.23-openssl | 1.23.12-150600.13.9.1 | SUSE-SU-2025:03159-1 |
| SLES 15 SP6 | go1.24 | 1.24.2-150000.1.17.1 | SUSE-SU-2025:1153-1 |
| SLES 15 SP5 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLES 15 SP5 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SLES 15 SP4 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLES 15 SP4 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SLES 15 SP3 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLES 15 SP3 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | go1.24 +1 | 1.24.13-160000.3.1 | SUSE-SU-2026:22958-1, SUSE-SU-2026:22950-1 |
| SLES for SAP 16.0 | go1.25 +1 | 1.25.12-160000.2.1 | SUSE-SU-2026:22958-1, SUSE-SU-2026:22950-1 |
| SLES for SAP 16.0 | go1.26 +1 | 1.26.5-160000.2.1 | SUSE-SU-2026:22958-1, SUSE-SU-2026:22950-1 |
| SLES for SAP 15 SP5 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLES for SAP 15 SP5 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SLES for SAP 15 SP4 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLES for SAP 15 SP4 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SLES for SAP 15 SP3 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLES for SAP 15 SP3 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SLES 16.0 | go1.24 +1 | 1.24.13-160000.3.1 | SUSE-SU-2026:22958-1, SUSE-SU-2026:22950-1 |
| SLES 16.0 | go1.25 +1 | 1.25.12-160000.2.1 | SUSE-SU-2026:22958-1, SUSE-SU-2026:22950-1 |
| SLES 16.0 | go1.26 +1 | 1.26.5-160000.2.1 | SUSE-SU-2026:22958-1, SUSE-SU-2026:22950-1 |
| SLE HPC 15 SP5 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLE HPC 15 SP5 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SLE HPC 15 SP4 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLE HPC 15 SP4 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SLE HPC 15 SP3 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SLE HPC 15 SP3 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
| SUSE Enterprise Storage 7.1 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| SUSE Enterprise Storage 7.1 | go1.23-openssl | 1.23.9-150000.1.9.1 | SUSE-SU-2025:01731-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.23 | 1.23.8-1.1 | openSUSE-SU-2025:14962-1 |
| openSUSE Tumbleweed | go1.24 | 1.24.2-1.1 | openSUSE-SU-2025:14963-1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250408T210408-1.1 | openSUSE-SU-2025:14978-1 |
| openSUSE Tumbleweed | kubelogin | 0.2.10-1.1 | openSUSE-SU-2025:15352-1 |
| openSUSE Tumbleweed | kyverno | 1.14.0-1.1 | openSUSE-SU-2025:15029-1 |
| openSUSE Tumbleweed | traefik2 | 2.11.26-1.1 | openSUSE-SU-2025:15305-1 |
| openSUSE Leap 16.0 | go1.21 | 1.21.13-160000.3.1 | openSUSE-SU-2026:21447-1 |
| openSUSE Leap 16.0 | go1.22 +1 | 1.22.12-160000.4.1 | openSUSE-SU-2026:21447-1 |
| openSUSE Leap 16.0 | go1.23 +1 | 1.23.12-160000.3.1 | openSUSE-SU-2026:21447-1 |
| openSUSE Leap 16.0 | go1.24 +1 | 1.24.13-160000.3.1 | openSUSE-SU-2026:21447-1 |
| openSUSE Leap 16.0 | go1.25 +1 | 1.25.12-160000.2.1 | openSUSE-SU-2026:21447-1 |
| openSUSE Leap 16.0 | go1.26 +1 | 1.26.5-160000.2.1 | openSUSE-SU-2026:21447-1 |
| openSUSE Leap 15.6 | go1.23 | 1.23.8-150000.1.27.1 | SUSE-SU-2025:1141-1 |
| openSUSE Leap 15.6 | go1.23-openssl | 1.23.12-150600.13.9.1 | SUSE-SU-2025:03159-1 |
| openSUSE Leap 15.6 | go1.24 | 1.24.2-150000.1.17.1 | SUSE-SU-2025:1153-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.24.2-r0 | — |
| Alpine v3.23 | go | 1.24.2-r0 | — |
| Alpine v3.22 | go | 1.24.2-r0 | — |
| Alpine v3.21 | go | 1.23.8-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-cloudwatch-agent | 1.300054.1-2.amzn2023 | ALAS2023-2025-968 |
| Amazon Linux 2023 | amazon-ecr-credential-helper | 0.10.0-1.amzn2023 | ALAS2023-2025-1039 |
| Amazon Linux 2023 | amazon-ssm-agent | 3.3.3050.0-1.amzn2023 | ALAS2023-2025-1202 |
| Amazon Linux 2023 | cni-plugins | 1.7.1-1.amzn2023.0.1 | ALAS2023-2025-1012 |
| Amazon Linux 2023 | containerd +1 | 1.7.27-1.amzn2023.0.3 | ALAS2023-2025-1040 |
| Amazon Linux 2023 | docker | 25.0.8-1.amzn2023.0.3 | ALAS2023-2025-945 |
| Amazon Linux 2023 | golang +6 | 1.24.2-1.amzn2023.0.1 | ALAS2023-2025-933 |
| Amazon Linux 2023 | nerdctl | 2.0.5-1.amzn2023.0.1 | ALAS2023-2025-980 |
| Amazon Linux 2023 | oci-add-hooks | 0-0.1.20200504git268e3bb.amzn2023.0.4 | ALAS2023-2025-978 |
| Amazon Linux 2023 | runc | 1.2.4-2.amzn2023.0.1 | ALAS2023-2025-1041 |
| Amazon Linux 2023 | runfinch-finch | 1.8.1-1.amzn2023.0.1 | ALAS2023-2025-979 |
| Amazon Linux 2023 | soci-snapshotter | 0.9.0-1.amzn2023.0.3 | ALAS2023-2025-981 |
| Amazon Linux 2 | amazon-cloudwatch-agent | 1.300054.1-2.amzn2 | ALAS2-2025-2851 |
| Amazon Linux 2 | amazon-ssm-agent | 3.3.3050.0-1.amzn2 | ALAS2-2025-3010 |
| Amazon Linux 2 | cni-plugins | 1.7.1-1.amzn2.0.1 | ALAS2-2025-2882 |
| Amazon Linux 2 | cri-tools | 1.32.0-1.amzn2.0.1 | ALAS2-2025-2870 |
| Amazon Linux 2 | golang +6 | 1.23.8-1.amzn2.0.1 | ALAS2-2025-2825 |
| Amazon Linux 2 | nerdctl | 2.0.5-1.amzn2.0.1 | ALAS2-2025-2863 |
| Amazon Linux 2 | rclone | 1.55.1-1.amzn2.0.2 | ALAS2-2025-2905 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | golang | 1.18.8-7 | — |
| Azure Linux 2 (CBL-Mariner) | msft-golang | 1.24.1-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | buildah +1 | 2:1.39.4-2.0.1.el10_0 | ELSA-2025-9148 |
| Oracle Linux 10 | delve | 1.24.1-2.0.1.el10_0 | ELSA-2025-9317 |
| Oracle Linux 10 | git-lfs | 3.6.1-2.el10_0 | ELSA-2025-9063 |
| Oracle Linux 10 | golang +6 | 1.23.9-1.el10_0 | ELSA-2025-8477 |
| Oracle Linux 10 | grafana +1 | 10.2.6-18.el10_0 | ELSA-2025-8666 |
| Oracle Linux 10 | grafana-pcp | 5.2.2-3.el10_0 | ELSA-2025-8915 |
| Oracle Linux 10 | gvisor-tap-vsock +1 | 6:0.8.5-2.el10_0 | ELSA-2025-9151 |
| Oracle Linux 10 | ipp-usb | 0.9.27-3.el10_0 | ELSA-2025-9156 |
| Oracle Linux 10 | osbuild-composer +2 | 134.1-2.0.1.el10_0 | ELSA-2025-9623 |
| Oracle Linux 10 | podman +3 | 6:5.4.0-10.0.1.el10_0 | ELSA-2025-9146 |
| Oracle Linux 10 | skopeo +1 | 2:1.18.1-2.el10_0 | ELSA-2025-9149 |
| Oracle Linux 9 | buildah +1 | 2:1.39.4-2.0.1.el9_6 | ELSA-2025-9147 |
| Oracle Linux 9 | containernetworking-plugins | 1:1.6.2-2.el9_6 | ELSA-2025-9143 |
| Oracle Linux 9 | git-lfs | 3.6.1-2.el9_6 | ELSA-2025-9106 |
| Oracle Linux 9 | golang +7 | 1.23.9-1.el9_6 | ELSA-2025-8476 |
| Oracle Linux 9 | grafana +1 | 10.2.6-14.el9_6 | ELSA-2025-8682 |
| Oracle Linux 9 | grafana-pcp | 5.1.1-11.el9_6 | ELSA-2025-8916 |
| Oracle Linux 9 | gvisor-tap-vsock +1 | 6:0.8.5-2.el9_6 | ELSA-2025-9150 |
| Oracle Linux 9 | osbuild-composer +2 | 132.2-2.0.1.el9_6 | ELSA-2025-9634 |
| Oracle Linux 9 | podman +4 | 5:5.4.0-10.0.1.el9_6 | ELSA-2025-9144 |
| Oracle Linux 9 | skopeo +1 | 2:1.18.1-2.el9_6 | ELSA-2025-9145 |
| Oracle Linux 9 | weldr-client | 35.12-4.el9_6 | ELSA-2025-9635 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | buildah +1 | 2:1.33.12-2.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | delve | 1.24.1-1.0.1.module+el8.10.0+90602+3daf471e | ELSA-2025-8478 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | git-lfs | 3.4.1-5.el8_10 | ELSA-2025-9060 |
| Oracle Linux 8 | golang +6 | 1.23.9-1.module+el8.10.0+90602+3daf471e | ELSA-2025-8478 |
| Oracle Linux 8 | grafana +1 | 9.2.10-25.el8_10 | ELSA-2025-8667 |
| Oracle Linux 8 | grafana-pcp | 5.1.1-10.el8_10 | ELSA-2025-8918 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | osbuild-composer +2 | 101-4.0.1.el8_10 | ELSA-2025-9844 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-20.0.1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | python3-podman | 4.9.0-3.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | runc | 1:1.1.12-6.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-4.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90618+4905d84b | ELSA-2025-9142 |
| Oracle Linux 8 | weldr-client | 35.12-3.el8_10 | ELSA-2025-9845 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r30 | — |
| Wolfi rolling | actions-runner-controller +1 | 0.11.0-r1 | — |
| Wolfi rolling | addon-resizer +1 | 1.8.23-r4 | — |
| Wolfi rolling | age | 1.2.1-r4 | — |
| Wolfi rolling | amass | 4.2.0-r22 | — |
| Wolfi rolling | amazon-cloudwatch-agent-operator +1 | 2.2.0-r3 | — |
| Wolfi rolling | amazon-k8s-cni +3 | 1.19.3-r3 | — |
| Wolfi rolling | argo-workflows | 3.6.5-r4 | — |
| Wolfi rolling | authservice +1 | 1.0.4-r6 | — |
| Wolfi rolling | aws-application-networking-k8s +1 | 1.1.0-r6 | — |
| Wolfi rolling | aws-flb-cloudwatch +1 | 1.9.4-r16 | — |
| Wolfi rolling | aws-flb-firehose +1 | 1.7.2-r16 | — |
| Wolfi rolling | aws-flb-kinesis +1 | 1.10.2-r17 | — |
| Wolfi rolling | aws-network-policy-agent +1 | 1.2.0-r2 | — |
| Wolfi rolling | aws-privateca-issuer +1 | 1.4.1-r3 | — |
| Wolfi rolling | aws-signer-notation-plugin | 1.0.350-r3 | — |
| Wolfi rolling | azcopy | 10.28.1-r1 | — |
| Wolfi rolling | azure-service-operator +1 | 2.12.0-r2 | — |
| Wolfi rolling | bank-vaults +1 | 1.20.4-r29 | — |
| Wolfi rolling | bazelisk +1 | 1.26.0-r0 | — |
| Wolfi rolling | bom | 0.6.0-r19 | — |
| Wolfi rolling | buildah | 1.39.4-r1 | — |
| Wolfi rolling | buildctl +1 | 0.20.2-r1 | — |
| Wolfi rolling | caddy +1 | 2.9.1-r8 | — |
| Wolfi rolling | caddy-man | 2.9.1-r9 | — |
| Wolfi rolling | cadvisor +1 | 0.52.1-r4 | — |
| Wolfi rolling | capslock | 0.2.7-r3 | — |
| Wolfi rolling | cargobump | 0.1.0-r3 | — |
| Wolfi rolling | cass-operator +2 | 1.23.2-r1 | — |
| Wolfi rolling | cert-exporter | 2.14.0-r10 | — |
| Wolfi rolling | cert-manager-cmctl | 2.1.1-r10 | — |
| Wolfi rolling | cert-manager-istio-csr +1 | 0.14.0-r7 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.2-r5 | — |
| Wolfi rolling | cfssl +7 | 1.6.5-r18 | — |
| Wolfi rolling | chartmuseum | 0.16.2-r17 | — |
| Wolfi rolling | checksec | 3.0.2-r1 | — |
| Wolfi rolling | cloudnative-pg +1 | 1.25.1-r32 | — |
| Wolfi rolling | cluster-proportional-autoscaler +1 | 1.10.2-r1 | — |
| Wolfi rolling | conftest | 0.58.0-r3 | — |
| Wolfi rolling | controller-gen | 0.17.3-r1 | — |
| Wolfi rolling | cortex | 1.19.0-r5 | — |
| Wolfi rolling | crane +1 | 0.20.3-r3 | — |
| Wolfi rolling | crictl +2 | 1.32.0-r7 | — |
| Wolfi rolling | croc | 10.2.2-r1 | — |
| Wolfi rolling | crossplane-crank | 1.19.1-r1 | — |
| Wolfi rolling | crossplane-provider-azure-sql +9 | 1.11.2-r2 | — |
| Wolfi rolling | crossplane-provider-keycloak | 1.7.0-r10 | — |
| Wolfi rolling | crossplane-provider-sql | 0.11.0-r6 | — |
| Wolfi rolling | ctop | 0.7.7-r24 | — |
| Wolfi rolling | ctr-1 +4 | 1.7.27-r1 | — |
| Wolfi rolling | ctr-2 +5 | 2.0.4-r1 | — |
| Wolfi rolling | dagdotdev | 0.0.15-r1 | — |
| Wolfi rolling | dataplaneapi | 3.1.5-r1 | — |
| Wolfi rolling | dbmate | 2.26.0-r4 | — |
| Wolfi rolling | dex +1 | 2.42.0-r5 | — |
| Wolfi rolling | dgraph | 24.1.2-r1 | — |
| Wolfi rolling | direnv | 2.36.0-r0 | — |
| Wolfi rolling | distribution | 3.0.0-r35 | — |
| Wolfi rolling | docker-cli +1 | 28.0.4-r1 | — |
| Wolfi rolling | docker-cli-buildx +1 | 0.22.0-r1 | — |
| Wolfi rolling | docker-credential-acr-env | 0.7.0-r20 | — |
| Wolfi rolling | docker-credential-ecr-login | 0.9.1-r1 | — |
| Wolfi rolling | dockerize | 0.9.3-r1 | — |
| Wolfi rolling | doppler-kubernetes-operator | 1.5.7-r3 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 4.2.0-r4 | — |
| Wolfi rolling | elvish | 0.21.0-r3 | — |
| Wolfi rolling | emissary +6 | 3.10.0-r0 | — |
| Wolfi rolling | envoy-gateway +2 | 1.3.2-r1 | — |
| Wolfi rolling | esbuild | 0.25.2-r1 | — |
| Wolfi rolling | extism +43 | 1.6.2-r4 | — |
| Wolfi rolling | falco-exporter | 0.8.7-r5 | — |
| Wolfi rolling | falcoctl | 0.11.1-r1 | — |
| Wolfi rolling | falcosidekick | 2.31.1-r8 | — |
| Wolfi rolling | filebrowser +1 | 2.32.0-r5 | — |
| Wolfi rolling | fluent-watcher +3 | 3.2.0-r9 | — |
| Wolfi rolling | flux | 2.5.1-r5 | — |
| Wolfi rolling | flux-helm-controller +1 | 1.2.0-r6 | — |
| Wolfi rolling | flux-image-automation-controller +2 | 0.40.0-r5 | — |
| Wolfi rolling | flux-image-reflector-controller +1 | 0.34.0-r5 | — |
| Wolfi rolling | flux-kustomize-controller +1 | 1.5.1-r5 | — |
| Wolfi rolling | flux-notification-controller +1 | 1.5.0-r6 | — |
| Wolfi rolling | flux-source-controller +1 | 1.5.0-r41 | — |
| Wolfi rolling | flyte | 1.15.1-r1 | — |
| Wolfi rolling | fq | 0.14.0-r3 | — |
| Wolfi rolling | frp | 0.61.2-r2 | — |
| Wolfi rolling | fscrypt | 0.3.5-r7 | — |
| Wolfi rolling | fulcio | 1.7.0-r0 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 2.1.2-r1 | — |
| Wolfi rolling | gatus +1 | 5.17.0-r1 | — |
| Wolfi rolling | gh +1 | 2.69.0-r1 | — |
| Wolfi rolling | ghaudit | 0.4.0-r11 | — |
| Wolfi rolling | git-credential-oauth | 0.15.0-r2 | — |
| Wolfi rolling | git-lfs +1 | 3.6.1-r5 | — |
| Wolfi rolling | git-sync +1 | 4.4.0-r4 | — |
| Wolfi rolling | gitleaks | 8.24.3-r0 | — |
| Wolfi rolling | gitness | 3.1.1-r6 | — |
| Wolfi rolling | gke-gcloud-auth-plugin | 0.1.0-r5 | — |
| Wolfi rolling | glab | 1.55.0-r1 | — |
| Wolfi rolling | go-1.20 +1 | No fix yet | — |
| Wolfi rolling | go-bindata | 3.1.3-r26 | — |
| Wolfi rolling | go-licenses | 1.6.0-r25 | — |
| Wolfi rolling | go-md2man +1 | 2.0.6-r4 | — |
| Wolfi rolling | gobump | 0.9.0-r3 | — |
| Wolfi rolling | gobuster | 3.6.0-r21 | — |
| Wolfi rolling | golangci-lint | 2.0.2-r1 | — |
| Wolfi rolling | gomplate | 4.3.1-r2 | — |
| Wolfi rolling | goreleaser | 2.8.2-r1 | — |
| Wolfi rolling | gostatsd | 28.3.0-r14 | — |
| Wolfi rolling | gosu | 1.17-r12 | — |
| Wolfi rolling | gotestsum | 1.12.1-r1 | — |
| Wolfi rolling | govulncheck | 1.0.2-r10 | — |
| Wolfi rolling | gptscript | 0.9.5-r9 | — |
| Wolfi rolling | grafana-agent-operator | 0.44.5-r1 | — |
| Wolfi rolling | grafana-mimir | 2.16.0-r1 | — |
| Wolfi rolling | grpcurl | 1.9.3-r2 | — |
| Wolfi rolling | grype | 0.91.0-r1 | — |
| Wolfi rolling | guac +4 | 0.14.0-r2 | — |
| Wolfi rolling | harbor-registry | 3.0.0_alpha1-r28 | — |
| Wolfi rolling | harbor-scanner-trivy | 0.32.3-r6 | — |
| Wolfi rolling | hcloud | 1.50.0-r5 | — |
| Wolfi rolling | hello-world-golang | 1.3-r10 | — |
| Wolfi rolling | helm-docs | 1.14.2-r7 | — |
| Wolfi rolling | helm-operator +1 | 1.39.2-r1 | — |
| Wolfi rolling | helm-push | 0.10.4-r25 | — |
| Wolfi rolling | hey | 0.1.4-r22 | — |
| Wolfi rolling | hivemind | 1.1.0-r7 | — |
| Wolfi rolling | http-echo | 1.0.0-r13 | — |
| Wolfi rolling | incert | 0.5.0-r2 | — |
| Wolfi rolling | influx | 2.7.5-r7 | — |
| Wolfi rolling | ingress-nginx-controller-1.12 | 1.12.1-r41 | — |
| Wolfi rolling | ini-file | 1.4.7-r3 | — |
| Wolfi rolling | ip-masq-agent | 2.12.0-r7 | — |
| Wolfi rolling | jaeger-operator +1 | 1.65.0-r4 | — |
| Wolfi rolling | jitsucom-jitsu | 2.11.0-r6 | — |
| Wolfi rolling | k3d +2 | 5.8.3-r11 | — |
| Wolfi rolling | k3s +2 | 1.32.3.1-r1 | — |
| Wolfi rolling | k6 | 0.58.0-r1 | — |
| Wolfi rolling | kaf | 0.2.11-r1 | — |
| Wolfi rolling | kafka_exporter | 1.9.0-r33 | — |
| Wolfi rolling | kaniko +3 | 1.23.2-r16 | — |
| Wolfi rolling | kapp | 0.64.1-r1 | — |
| Wolfi rolling | kapp-controller +1 | 0.55.1-r4 | — |
| Wolfi rolling | karma | 0.121-r1 | — |
| Wolfi rolling | katib-earlystopping +8 | 0.19.0-r31 | — |
| Wolfi rolling | katib-suggestion-goptuna-compat | 0.19.0-r40 | — |
| Wolfi rolling | kbld | 0.45.1-r1 | — |
| Wolfi rolling | kind | 0.27.0-r1 | — |
| Wolfi rolling | ko | 0.17.1-r11 | — |
| Wolfi rolling | kpt | 1.0.0_beta55-r6 | — |
| Wolfi rolling | kserve-modelmesh-serving +1 | 0.12.0-r10 | — |
| Wolfi rolling | kserve-rest-proxy +1 | 0.12.0-r6 | — |
| Wolfi rolling | ksops +1 | 4.3.3-r8 | — |
| Wolfi rolling | kube-bench +1 | 0.10.4-r4 | — |
| Wolfi rolling | kube-fluentd-operator +3 | 1.18.2-r34 | — |
| Wolfi rolling | kube-logging-operator +4 | 5.2.0-r1 | — |
| Wolfi rolling | kube-metrics-adapter | 0.2.4-r3 | — |
| Wolfi rolling | kube-rbac-proxy | 0.19.0-r4 | — |
| Wolfi rolling | kubecolor | 0.5.0-r3 | — |
| Wolfi rolling | kubectl-1.28 +2 | 1.28.15-r14 | — |
| Wolfi rolling | kubectl-1.30 +2 | 1.30.11-r4 | — |
| Wolfi rolling | kubectl-1.31 +1 | 1.31.7-r4 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.16.1-r2 | — |
| Wolfi rolling | kubernetes-csi-driver-nfs +1 | 4.11.0-r1 | — |
| Wolfi rolling | kubernetes-csi-external-attacher +1 | 4.8.1-r3 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 5.2.0-r5 | — |
| Wolfi rolling | kubernetes-csi-external-resizer | 1.13.2-r3 | — |
| Wolfi rolling | kubernetes-csi-livenessprobe | 2.15.0-r5 | — |
| Wolfi rolling | kubernetes-dashboard | 7.11.1-r2 | — |
| Wolfi rolling | kubernetes-dashboard-api +1 | 1.11.1-r4 | — |
| Wolfi rolling | kubernetes-dashboard-auth +1 | 1.2.4-r5 | — |
| Wolfi rolling | kubernetes-dashboard-metrics-scraper +1 | 1.2.2-r6 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.25.0-r6 | — |
| Wolfi rolling | kubernetes-event-exporter +1 | 1.7-r41 | — |
| Wolfi rolling | kubernetes-replicator | 2.11.1-r1 | — |
| Wolfi rolling | kubescape | 3.0.34-r1 | — |
| Wolfi rolling | kubevela +3 | 1.10.2-r5 | — |
| Wolfi rolling | kubewatch | 2.9.0-r8 | — |
| Wolfi rolling | kwok +1 | 0.6.1-r9 | — |
| Wolfi rolling | kyverno-notation-aws +1 | 1.1-r12 | — |
| Wolfi rolling | kyverno-policy-reporter +1 | 3.1.0-r1 | — |
| Wolfi rolling | kyverno-policy-reporter-kyverno-plugin +1 | 1.6.4-r8 | — |
| Wolfi rolling | kyverno-policy-reporter-ui +1 | 2.3.4-r0 | — |
| Wolfi rolling | libnvidia-container | 1.17.5-r2 | — |
| Wolfi rolling | licenseclassifier | 2.0.0-r1 | — |
| Wolfi rolling | linkerd2-proxy-init +1 | 2.4.2-r3 | — |
| Wolfi rolling | litefs | 0.5.11-r13 | — |
| Wolfi rolling | litestream | 0.3.13-r14 | — |
| Wolfi rolling | local-path-provisioner | 0.0.31-r4 | — |
| Wolfi rolling | local-static-provisioner +3 | 2.7.0-r16 | — |
| Wolfi rolling | lvm-driver +1 | 1.6.2-r7 | — |
| Wolfi rolling | mage | 1.15.0-r13 | — |
| Wolfi rolling | mailpit +1 | 1.24.1-r0 | — |
| Wolfi rolling | maru | 0.6.0-r1 | — |
| Wolfi rolling | memcached-exporter +1 | 0.15.2-r41 | — |
| Wolfi rolling | metallb +8 | 0.14.9-r7 | — |
| Wolfi rolling | metrics-server +2 | 0.7.2-r11 | — |
| Wolfi rolling | minio-operator +3 | 7.0.1-r2 | — |
| Wolfi rolling | mkcert | 1.4.4-r12 | — |
| Wolfi rolling | mongo-tools | 100.12.0-r3 | — |
| Wolfi rolling | multus-cni +1 | 4.2.0-r1 | — |
| Wolfi rolling | neuvector-dbgen +1 | 0_git20240423-r4 | — |
| Wolfi rolling | neuvector-scanner +2 | 3.788-r0 | — |
| Wolfi rolling | newrelic-fluent-bit-output-compat | 2.4.0-r5 | — |
| Wolfi rolling | newrelic-nri-kube-events | 2.12.0-r1 | — |
| Wolfi rolling | newrelic-nri-statsd | 2.11.0-r2 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r20 | — |
| Wolfi rolling | nginx-prometheus-exporter +1 | 1.4.1-r41 | — |
| Wolfi rolling | nodetaint | 0.0.4-r32 | — |
| Wolfi rolling | nri-apache +1 | 1.14.0-r1 | — |
| Wolfi rolling | nri-cassandra +2 | 2.14.3-r1 | — |
| Wolfi rolling | nri-consul +1 | 2.9.0-r1 | — |
| Wolfi rolling | nri-couchbase +1 | 2.8.0-r2 | — |
| Wolfi rolling | nri-elasticsearch +1 | 5.4.0-r2 | — |
| Wolfi rolling | nri-f5 +1 | 2.8.3-r2 | — |
| Wolfi rolling | nri-haproxy +1 | 3.2.0-r1 | — |
| Wolfi rolling | nri-jmx +2 | 3.8.1-r1 | — |
| Wolfi rolling | nri-kafka +2 | 3.10.2-r3 | — |
| Wolfi rolling | nri-memcached +1 | 2.7.0-r1 | — |
| Wolfi rolling | nri-mongodb +1 | 2.9.2-r2 | — |
| Wolfi rolling | nri-mssql +1 | 2.17.2-r2 | — |
| Wolfi rolling | nri-nagios +1 | 2.11.0-r1 | — |
| Wolfi rolling | nri-nginx +1 | 3.6.0-r1 | — |
| Wolfi rolling | nri-postgresql +1 | 2.17.1-r1 | — |
| Wolfi rolling | nri-rabbitmq +1 | 2.15.0-r1 | — |
| Wolfi rolling | nri-redis +1 | 1.12.1-r2 | — |
| Wolfi rolling | oauth2-proxy +1 | 7.8.2-r1 | — |
| Wolfi rolling | octo-sts +1 | 0.4.2-r11 | — |
| Wolfi rolling | opa | 1.3.0-r1 | — |
| Wolfi rolling | openbao-k8s +1 | 1.4.0-r35 | — |
| Wolfi rolling | opencost +1 | 1.114.0-r5 | — |
| Wolfi rolling | opensearch-k8s-operator +1 | 2.7.0-r6 | — |
| Wolfi rolling | opentelemetry-collector +2 | 0.123.0-r1 | — |
| Wolfi rolling | opentelemetry-operator +3 | 0.121.0-r1 | — |
| Wolfi rolling | opentofu-1.9 | 1.9.0-r9 | — |
| Wolfi rolling | oras | 1.2.2-r4 | — |
| Wolfi rolling | overmind | 2.5.1-r8 | — |
| Wolfi rolling | paranoia | 0.3.0-r1 | — |
| Wolfi rolling | pdfcpu | 0.9.1-r3 | — |
| Wolfi rolling | petname | 2.11-r13 | — |
| Wolfi rolling | pg_timetable +1 | 5.11.0-r1 | — |
| Wolfi rolling | pluto +1 | 5.21.3-r3 | — |
| Wolfi rolling | policy-controller +1 | 0.12.0-r9 | — |
| Wolfi rolling | pombump | 0.0.13-r5 | — |
| Wolfi rolling | postgres-operator +1 | 1.14.0-r6 | — |
| Wolfi rolling | prometheus-3.2 | 3.2.1-r41 | — |
| Wolfi rolling | prometheus-adapter | 0.12.0-r11 | — |
| Wolfi rolling | prometheus-alertmanager +1 | 0.28.1-r3 | — |
| Wolfi rolling | promxy | 0.0.92-r35 | — |
| Wolfi rolling | protoc-gen-go | 1.36.6-r1 | — |
| Wolfi rolling | protoc-gen-go-grpc | 1.5.1-r4 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 1.16.0-r15 | — |
| Wolfi rolling | q | 0.19.2-r16 | — |
| Wolfi rolling | rabbitmq-cluster-operator +2 | 2.12.1-r5 | — |
| Wolfi rolling | rabbitmq-default-user-credential-updater +1 | 1.0.5-r3 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator +2 | 1.16.0-r8 | — |
| Wolfi rolling | rancher-loglevel | 0.1.6-r4 | — |
| Wolfi rolling | rclone +1 | 1.69.1-r6 | — |
| Wolfi rolling | redka | 0.5.3-r3 | — |
| Wolfi rolling | regclient +6 | 0.8.2-r1 | — |
| Wolfi rolling | render-template | 1.0.7-r5 | — |
| Wolfi rolling | restic +1 | 0.18.0-r1 | — |
| Wolfi rolling | rootlesskit +1 | 2.3.4-r2 | — |
| Wolfi rolling | runc +1 | 1.2.6-r1 | — |
| Wolfi rolling | s5cmd | 2.3.0-r3 | — |
| Wolfi rolling | sbom-convert | 0.0.6-r3 | — |
| Wolfi rolling | sbom-scorecard | 0.0.7-r19 | — |
| Wolfi rolling | sbomqs | 1.0.3-r1 | — |
| Wolfi rolling | scorecard | 5.1.1-r5 | — |
| Wolfi rolling | sealed-secrets +3 | 0.29.0-r1 | — |
| Wolfi rolling | seaweedfs +2 | 3.85-r6 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-aws | 0.3.11-r33 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.8.0-r0 | — |
| Wolfi rolling | shfmt | 3.11.0-r1 | — |
| Wolfi rolling | skopeo | 1.18.0-r6 | — |
| Wolfi rolling | slsa-verifier | 2.7.0-r4 | — |
| Wolfi rolling | snyk-cli | 1.1296.1-r1 | — |
| Wolfi rolling | sonobuoy +1 | 0.57.3-r3 | — |
| Wolfi rolling | speedtest-go | 1.7.10-r3 | — |
| Wolfi rolling | spegel +1 | 0.1.1-r1 | — |
| Wolfi rolling | spire-agent +2 | 1.12.0-r1 | — |
| Wolfi rolling | spire-controller-manager +1 | 0.6.1-r5 | — |
| Wolfi rolling | splunk-otel-collector +2 | 0.122.0-r1 | — |
| Wolfi rolling | spqr | 2.5.0-r1 | — |
| Wolfi rolling | sql_exporter | 0.17.1-r6 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r28 | — |
| Wolfi rolling | sriov-network-device-plugin +1 | 3.9.0-r5 | — |
| Wolfi rolling | step | 0.28.6-r2 | — |
| Wolfi rolling | step-issuer +1 | 0.9.8-r1 | — |
| Wolfi rolling | step-kms-plugin | 0.12.2-r2 | — |
| Wolfi rolling | supercronic | 0.2.33-r3 | — |
| Wolfi rolling | swagger | 0.31.0-r8 | — |
| Wolfi rolling | syft | 1.22.0-r1 | — |
| Wolfi rolling | tailscale +1 | 1.82.0-r41 | — |
| Wolfi rolling | task | 3.42.1-r2 | — |
| Wolfi rolling | tdbg +9 | 1.27.2-r1 | — |
| Wolfi rolling | tekton-chains | 0.24.0-r7 | — |
| Wolfi rolling | temporal +1 | 1.3.0-r5 | — |
| Wolfi rolling | terraform +2 | 1.5.7-r27 | — |
| Wolfi rolling | terraform-provider-acme | 2.31.0-r2 | — |
| Wolfi rolling | terraform-provider-azapi | 2.3.0-r2 | — |
| Wolfi rolling | terraform-provider-grafana | 3.22.2-r1 | — |
| Wolfi rolling | terraform-provider-kubernetes | 2.36.0-r2 | — |
| Wolfi rolling | terraform-provider-pagerduty | 3.23.1-r2 | — |
| Wolfi rolling | terraform-provider-random | 3.7.1-r3 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r2 | — |
| Wolfi rolling | terraform-provider-time | 0.13.0-r2 | — |
| Wolfi rolling | terraform-provider-tls | 4.0.6-r3 | — |
| Wolfi rolling | tflint +1 | 0.56.0-r1 | — |
| Wolfi rolling | tfsec | 1.28.13-r6 | — |
| Wolfi rolling | thanos-operator +1 | 0.3.7-r28 | — |
| Wolfi rolling | timoni | 0.24.0-r3 | — |
| Wolfi rolling | tkn | 0.40.0-r6 | — |
| Wolfi rolling | trino +58 | 474-r2 | — |
| Wolfi rolling | trivy | 0.61.0-r1 | — |
| Wolfi rolling | trust-manager | 0.16.0-r3 | — |
| Wolfi rolling | tw +14 | 0.0.10-r1 | — |
| Wolfi rolling | undock | 0.9.0-r6 | — |
| Wolfi rolling | vault-k8s | 1.6.2-r2 | — |
| Wolfi rolling | velero +2 | 1.15.2-r7 | — |
| Wolfi rolling | velero-plugin-for-aws +3 | 1.12.0-r0 | — |
| Wolfi rolling | velero-plugin-for-csi +1 | 0.7.1-r33 | — |
| Wolfi rolling | vertical-pod-autoscaler +2 | 1.3.0-r4 | — |
| Wolfi rolling | vexctl | 0.3.0-r12 | — |
| Wolfi rolling | volume-modifier-for-k8s | 0.5.1-r5 | — |
| Wolfi rolling | vt-cli | 1.0.1-r5 | — |
| Wolfi rolling | wait-for-port | 1.0.8-r5 | — |
| Wolfi rolling | wave | 0.10.0-r6 | — |
| Wolfi rolling | wazero +1 | 1.9.0-r1 | — |
| Wolfi rolling | wgcf | 2.2.25-r3 | — |
| Wolfi rolling | wire-go | 0.6.0-r10 | — |
| Wolfi rolling | wireguard-go | 0.0.20230223-r24 | — |
| Wolfi rolling | wuzz | 0.5.0-r7 | — |
| Wolfi rolling | xcaddy | 0.4.4-r3 | — |
| Wolfi rolling | yace | 0.62.1-r4 | — |
| Wolfi rolling | yam | 0.2.12-r1 | — |
| Wolfi rolling | yq | 4.45.1-r5 | — |
| Wolfi rolling | ytt | 0.51.2-r1 | — |
| Wolfi rolling | yunikorn-web +3 | 1.6.2-r1 | — |
| Wolfi rolling | zot | 2.1.2-r9 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.23.8 · >= 1.24.0-0, < 1.24.2 | 1.23.8, 1.24.2 | GO-2025-3563 |
| Packagist | spiral/roadrunner | < 2025.1.0 | 2025.1.0 | GHSA-g9pc-8g42-g6vq |
Advisories 50
- ALSA-2025:8915 Moderate: grafana-pcp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9317 Moderate: delve security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9623 Moderate: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8666 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9156 Moderate: golang-github-openprinting-ipp-usb security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12850 Moderate: opentelemetry-collector security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9063 Moderate: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9149 Moderate: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9151 Moderate: gvisor-tap-vsock security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9148 Moderate: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8916 Moderate: grafana-pcp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9145 Moderate: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9106 Moderate: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9150 Moderate: gvisor-tap-vsock security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8682 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9143 Moderate: containernetworking-plugins security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9144 Moderate: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8476 Moderate: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12831 Moderate: opentelemetry-collector security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9147 Moderate: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9634 Moderate: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9635 Moderate: weldr-client security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9146 Moderate: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8477 Moderate: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8918 Moderate: grafana-pcp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9060 Moderate: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9844 Moderate: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9845 Moderate: weldr-client security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:9142 Moderate: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8478 Moderate: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:8667 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:9986 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9975 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9845 Red Hat Security Advisory: weldr-client security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9844 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9756 Red Hat Security Advisory: opentelemetry-collector security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9714 Red Hat Security Advisory: weldr-client security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9715 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9712 Red Hat Security Advisory: weldr-client security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9713 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9642 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9711 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9640 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9641 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9638 Red Hat Security Advisory: weldr-client security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9639 Red Hat Security Advisory: weldr-client security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9635 Red Hat Security Advisory: weldr-client security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9637 Red Hat Security Advisory: weldr-client security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9623 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:9634 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 17, 2026