Description
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | archive/tar | < 1.24.8, 1.25.0 – < 1.25.2 | 1.24.8 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | golang-1.24 | No fix yet | — |
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | golang-1.23 +2 | No fix yet | — |
| Ubuntu 25.10 | golang-1.23 +2 | No fix yet | — |
| Ubuntu 24.04 LTS | golang-1.21 +4 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.17 +7 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.13 +5 | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +2 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.13 +1 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | buildah +1 | 2:1.41.6-1.el10_1 | RHSA-2025:22012 |
| RHEL 10 | delve | 1.25.2-1.el10_1 | RHSA-2025:21816 |
| RHEL 10 | golang +7 | 1.25.3-1.el10_1 | RHSA-2025:21816 |
| RHEL 10 | grafana +1 | 10.2.6-21.el10_1 | RHSA-2025:23088 |
| RHEL 10 | image-builder | 31-3.el10_1 | RHSA-2026:1838 |
| RHEL 10 | osbuild-composer +2 | 149-4.el10_1 | RHSA-2026:1837 |
| RHEL 10 | podman +3 | 7:5.6.0-8.el10_1 | RHSA-2025:23295 |
| RHEL 10 | skopeo +1 | 2:1.20.0-2.el10_1 | RHSA-2025:23294 |
| RHEL 9 | buildah +1 | 2:1.41.6-1.el9_7 | RHSA-2025:22011 |
| RHEL 9 | cups +7 | 1:2.3.3op2-34.el9_7.2 | RHSA-2026:0312 |
| RHEL 9 | delve | 1.25.2-1.el9_7 | RHSA-2025:21815 |
| RHEL 9 | golang +7 | 1.25.3-1.el9_7 | RHSA-2025:21815 |
| RHEL 9 | grafana +1 | 10.2.6-17.el9_7 | RHSA-2025:23087 |
| RHEL 9 | image-builder | 31-2.el9_7 | RHSA-2026:1377 |
| RHEL 9 | osbuild-composer +2 | 149-3.el9_7 | RHSA-2026:1381 |
| RHEL 9 | podman +4 | 6:5.6.0-9.el9_7 | RHSA-2025:23325 |
| RHEL 9 | skopeo +1 | 2:1.20.0-2.el9_7 | RHSA-2025:23326 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | buildah +1 | 2:1.33.12-3.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | delve | 1.25.2-1.module+el8.10.0+23746+9db33b5e | RHSA-2025:22668 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | golang +7 | 1.25.3-2.module+el8.10.0+23746+9db33b5e | RHSA-2025:22668 |
| RHEL 8 | grafana +1 | 9.2.10-26.el8_10 | RHSA-2025:23948 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | osbuild-composer +2 | 101.4-2.el8_10 | RHSA-2026:1380 |
| RHEL 8 | podman +6 | 4:4.9.4-24.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | python-podman +1 | 4.9.0-3.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | runc | 4:1.2.9-2.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | skopeo +1 | 2:1.14.5-5.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+23772+e5018371 | RHSA-2025:23374 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | delve | 1.25.2-1.el10_0 | RHSA-2025:21779 |
| RHEL 10.0 EUS | golang +7 | 1.25.3-1.el10_0 | RHSA-2025:21779 |
| RHEL 10.0 EUS | grafana +1 | 10.2.6-19.el10_0 | RHSA-2025:23001 |
| RHEL 10.0 EUS | osbuild-composer +2 | 134.1-4.el10_0 | RHSA-2026:1378 |
| RHEL 10.0 EUS | podman +3 | 6:5.4.0-14.el10_0 | RHSA-2025:23347 |
| RHEL 10.0 EUS | skopeo +1 | 2:1.18.1-3.el10_0 | RHSA-2025:23348 |
| RHEL 9.6 EUS | buildah +1 | 2:1.39.6-1.el9_6 | RHSA-2025:21964 |
| RHEL 9.6 EUS | delve | 1.25.2-1.el9_6 | RHSA-2025:21778 |
| RHEL 9.6 EUS | golang +7 | 1.25.3-1.el9_6 | RHSA-2025:21778 |
| RHEL 9.6 EUS | grafana +1 | 10.2.6-16.el9_6 | RHSA-2025:23002 |
| RHEL 9.6 EUS | osbuild-composer +2 | 132.2-4.el9_6 | RHSA-2026:1379 |
| RHEL 9.6 EUS | podman +4 | 5:5.4.0-15.el9_6 | RHSA-2025:22030 |
| RHEL 9.6 EUS | skopeo +1 | 2:1.18.1-3.el9_6 | RHSA-2025:23394 |
| RHEL 9.4 EUS | buildah +1 | 2:1.33.13-2.el9_4.1 | RHSA-2026:0426 |
| RHEL 9.4 EUS | golang +6 | 1.21.13-12.el9_4 | RHSA-2025:21856 |
| RHEL 9.4 EUS | grafana +1 | 9.2.10-24.el9_4 | RHSA-2025:23746 |
| RHEL 9.4 EUS | osbuild-composer +2 | 101.3-3.el9_4 | RHSA-2026:0226 |
| RHEL 9.4 EUS | podman +4 | 4:4.9.4-19.el9_4.5 | RHSA-2026:0424 |
| RHEL 9.4 EUS | skopeo +1 | 2:1.14.5-2.el9_4.3 | RHSA-2026:0477 |
| RHEL 9.2 E4S | buildah +1 | 1:1.29.5-1.el9_2.2 | RHSA-2026:4532 |
| RHEL 9.2 E4S | golang +6 | 1.19.13-20.el9_2 | RHSA-2025:22181 |
| RHEL 9.2 E4S | grafana | 9.0.9-9.el9_2 | RHSA-2025:23747 |
| RHEL 9.2 E4S | osbuild-composer +3 | 76.1-3.el9_2 | RHSA-2026:0314 |
| RHEL 9.2 E4S | podman +5 | 2:4.4.1-22.el9_2.5 | RHSA-2026:4533 |
| RHEL 9.2 E4S | skopeo +1 | 2:1.11.2-0.1.el9_2.4 | RHSA-2026:5234 |
| RHEL 9.0 E4S | buildah +1 | 1:1.26.9-1.el9_0.3 | RHSA-2026:8325 |
| RHEL 9.0 E4S | golang +6 | 1.17.13-8.el9_0 | RHSA-2025:22899 |
| RHEL 9.0 E4S | grafana | 7.5.11-12.el9_0 | RHSA-2025:23736 |
| RHEL 9.0 E4S | osbuild-composer +3 | 46.3-5.el9_0 | RHSA-2026:0227 |
| RHEL 9.0 E4S | podman +6 | 2:4.2.0-6.el9_0.6 | RHSA-2026:8325 |
| RHEL 9.0 E4S | runc | 4:1.2.9-1.el9_0 | RHSA-2026:8325 |
| RHEL 9.0 E4S | skopeo +1 | 2:1.8.0-4.1.el9_0.2 | RHSA-2026:8325 |
| RHEL 8.8 TUS | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | buildah +1 | 1:1.29.7-1.module+el8.8.0+24026+ca15dd94 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2025:23737 |
| RHEL 8.8 TUS | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | go-toolset | 1.19.13-3.module+el8.8.0+23822+add30b82 | RHSA-2025:23737 |
| RHEL 8.8 TUS | golang +6 | 1.19.13-18.module+el8.8.0+23822+add30b82 | RHSA-2025:23737 |
| RHEL 8.8 TUS | grafana | 7.5.15-8.el8_8 | RHSA-2026:0245 |
| RHEL 8.8 TUS | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | oci-seccomp-bpf-hook | 1.2.8-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | osbuild-composer +3 | 75-5.el8_8 | RHSA-2026:0973 |
| RHEL 8.8 TUS | podman +6 | 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | runc | 1:1.2.9-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | skopeo +1 | 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 TUS | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | buildah +1 | 1:1.29.7-1.module+el8.8.0+24026+ca15dd94 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2025:23737 |
| RHEL 8.8 E4S | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | go-toolset | 1.19.13-3.module+el8.8.0+23822+add30b82 | RHSA-2025:23737 |
| RHEL 8.8 E4S | golang +6 | 1.19.13-18.module+el8.8.0+23822+add30b82 | RHSA-2025:23737 |
| RHEL 8.8 E4S | grafana | 7.5.15-8.el8_8 | RHSA-2026:0245 |
| RHEL 8.8 E4S | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | oci-seccomp-bpf-hook | 1.2.8-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | osbuild-composer +3 | 75-5.el8_8 | RHSA-2026:0973 |
| RHEL 8.8 E4S | podman +6 | 3:4.4.1-27.module+el8.8.0+24026+ca15dd94.5 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | runc | 1:1.2.9-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | skopeo +1 | 2:1.11.3-0.2.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.8 E4S | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:6191, RHSA-2026:4693 |
| RHEL 8.6 TUS | buildah +1 | 1:1.26.10-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2025:23733 |
| RHEL 8.6 TUS | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2025:23733 |
| RHEL 8.6 TUS | golang +6 | 1.17.13-11.module+el8.6.0+23831+7077efd1 | RHSA-2025:23733 |
| RHEL 8.6 TUS | grafana | 7.5.11-8.el8_6 | RHSA-2026:0246 |
| RHEL 8.6 TUS | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | osbuild-composer +3 | 46.3-4.el8_6 | RHSA-2026:1025 |
| RHEL 8.6 TUS | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:10703 |
| RHEL 8.6 TUS | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:10703 |
| RHEL 8.6 TUS | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 TUS | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | buildah +1 | 1:1.26.10-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2025:23733 |
| RHEL 8.6 E4S | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2025:23733 |
| RHEL 8.6 E4S | golang +6 | 1.17.13-11.module+el8.6.0+23831+7077efd1 | RHSA-2025:23733 |
| RHEL 8.6 E4S | grafana | 7.5.11-8.el8_6 | RHSA-2026:0246 |
| RHEL 8.6 E4S | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | osbuild-composer +3 | 46.3-4.el8_6 | RHSA-2026:1025 |
| RHEL 8.6 E4S | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:10703 |
| RHEL 8.6 E4S | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:10703 |
| RHEL 8.6 E4S | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 E4S | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | buildah +1 | 1:1.26.10-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2025:23733 |
| RHEL 8.6 AUS | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2025:23733 |
| RHEL 8.6 AUS | golang +6 | 1.17.13-11.module+el8.6.0+23831+7077efd1 | RHSA-2025:23733 |
| RHEL 8.6 AUS | grafana | 7.5.11-8.el8_6 | RHSA-2026:0246 |
| RHEL 8.6 AUS | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | osbuild-composer +3 | 46.3-4.el8_6 | RHSA-2026:1025 |
| RHEL 8.6 AUS | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:10703 |
| RHEL 8.6 AUS | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:10703 |
| RHEL 8.6 AUS | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.6 AUS | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:10703 |
| RHEL 8.4 EUS Long Life | delve | 1.5.0-2.module+el8.4.0+8864+58b0fcdb | RHSA-2025:23741 |
| RHEL 8.4 EUS Long Life | go-toolset | 1.15.14-3.module+el8.4.0+22765+91da4d3f | RHSA-2025:23741 |
| RHEL 8.4 EUS Long Life | golang +6 | 1.15.14-17.module+el8.4.0+23814+8f618eb7 | RHSA-2025:23741 |
| RHEL 8.4 EUS Long Life | grafana | 7.3.6-11.el8_4 | RHSA-2026:0243 |
| RHEL 8.4 EUS Long Life | osbuild-composer +2 | 28.7-4.el8_4 | RHSA-2026:0987 |
| RHEL 8.4 AUS | delve | 1.5.0-2.module+el8.4.0+8864+58b0fcdb | RHSA-2025:23741 |
| RHEL 8.4 AUS | go-toolset | 1.15.14-3.module+el8.4.0+22765+91da4d3f | RHSA-2025:23741 |
| RHEL 8.4 AUS | golang +6 | 1.15.14-17.module+el8.4.0+23814+8f618eb7 | RHSA-2025:23741 |
| RHEL 8.4 AUS | grafana | 7.3.6-11.el8_4 | RHSA-2026:0243 |
| RHEL 8.4 AUS | osbuild-composer +2 | 28.7-4.el8_4 | RHSA-2026:0987 |
| RHEL 8.2 AUS | delve | 1.3.2-3.module+el8.2.0+5581+896cb53e | RHSA-2025:23740 |
| RHEL 8.2 AUS | go-toolset | 1.13.15-1.module+el8.2.0+7662+fa98b974 | RHSA-2025:23740 |
| RHEL 8.2 AUS | golang +6 | 1.13.15-12.module+el8.2.0+23813+4482ebdd | RHSA-2025:23740 |
| RHEL 8.2 AUS | grafana +12 | 6.3.6-9.el8_2 | RHSA-2026:0244 |
| Red Hat Openshift Ironic 4 | python-pyasn1 +3 | 0.5.1-4.el9 | RHSA-2026:17595, RHSA-2026:17446 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-6.rhaos4.12.el8 | RHSA-2026:26541, RHSA-2026:26527, RHSA-2026:5866 |
| Red Hat OpenShift 4 | cri-o | 1.28.11-13.rhaos4.15.gitf722b2f.el9 | RHSA-2026:21701, RHSA-2026:4418, RHSA-2026:2082 |
| Red Hat OpenShift 4 | openshift +1 | 4.15.0-202602130120.p2.g5cb2ef4.assembly.stream.el8 | RHSA-2026:21701, RHSA-2026:4418 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.20.0-202605211651.p2.g02b0b2d.assembly.stream.el8 | RHSA-2026:21701 |
| Red Hat OpenShift 4 | openshift-kubelet +3 | 4.20.0-202605141748.p2.g2a0461f.assembly.stream.el8 | RHSA-2026:21701 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-19.rhaos4.13.el8 | RHSA-2026:26541, RHSA-2026:17595, RHSA-2026:17446 |
| Red Hat OpenShift 4 | runc | 4:1.2.5-5.rhaos4.19.el9 | RHSA-2026:5876, RHSA-2026:5866, RHSA-2026:4464 |
| Red Hat OpenShift 4 | rv +105 | 5.14.0-570.117.1.el9_6 | RHSA-2026:21701 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.9.4-8.rhaos4.12.el8 | RHSA-2026:26541, RHSA-2026:26527, RHSA-2026:5876 |
| Red Hat Hardened Images 1 | golang1.25 +6 | 1.25.9-1.hum1 | RHSA-2026:7385 |
| Red Hat Hardened Images 1 | golang1.26 +6 | 1.26.2-1.hum1 | RHSA-2026:7291 |
| Red Hat Ceph Storage 8 | ceph +27 | 2:19.2.1-331.el9cp | RHSA-2026:2711 |
| Red Hat Ceph Storage 8 | thrift +5 | 0.20.0-4.el9cp | RHSA-2026:2711 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | buildah +1 | 2:1.41.6-1.el10_1 | ALSA-2025:22012 |
| AlmaLinux 10 | golang-src +3 | 1.25.3-1.el10_1.alma.1 | ALSA-2025:21816 |
| AlmaLinux 10 | grafana +1 | 10.2.6-21.el10_1 | ALSA-2025:23088 |
| AlmaLinux 10 | image-builder | 31-3.el10_1 | ALSA-2026:1838 |
| AlmaLinux 10 | osbuild-composer +2 | 149-4.el10_1.alma.3 | ALSA-2026:1837 |
| AlmaLinux 10 | podman-docker | 7:5.6.0-8.el10_1 | ALSA-2025:23295 |
| AlmaLinux 10 | skopeo +1 | 2:1.20.0-2.el10_1 | ALSA-2025:23294 |
| AlmaLinux 9 | buildah +1 | 2:1.41.6-1.el9_7 | ALSA-2025:22011 |
| AlmaLinux 9 | delve | 1.25.2-1.el9_7 | ALSA-2025:21815 |
| AlmaLinux 9 | golang +7 | 1.25.3-1.el9_7 | ALSA-2025:21815 |
| AlmaLinux 9 | grafana +1 | 10.2.6-17.el9_7 | ALSA-2025:23087 |
| AlmaLinux 9 | image-builder | 31-2.el9_7 | ALSA-2026:1377 |
| AlmaLinux 9 | osbuild-composer +2 | 149-3.el9_7.alma.3 | ALSA-2026:1381 |
| AlmaLinux 9 | podman +4 | 6:5.6.0-9.el9_7 | ALSA-2025:23325 |
| AlmaLinux 9 | skopeo +1 | 2:1.20.0-2.el9_7 | ALSA-2025:23326 |
| AlmaLinux 8 | delve | 1.25.2-1.module_el8.10.0+4074+24330916 | ALSA-2025:22668 |
| AlmaLinux 8 | golang +7 | 1.25.3-2.module_el8.10.0+4074+24330916 | ALSA-2025:22668 |
| AlmaLinux 8 | grafana +1 | 9.2.10-26.el8_10 | ALSA-2025:23948 |
| AlmaLinux 8 | osbuild-composer +2 | 101.4-2.el8_10.alma.1 | ALSA-2026:1380 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | buildah | 2:1.41.6-1.el10_1 | RLSA-2025:22012 |
| Rocky Linux 10 | delve | 1.25.2-1.el10_1 | RLSA-2025:21816 |
| Rocky Linux 10 | golang | 1.25.3-1.el10_1 | RLSA-2025:21816 |
| Rocky Linux 10 | grafana | 10.2.6-21.el10_1 | RLSA-2025:23088 |
| Rocky Linux 10 | image-builder | 31-3.el10_1.rocky.0.2 | RLSA-2026:1838 |
| Rocky Linux 10 | osbuild-composer | 149-4.el10_1.rocky.0.8 | RLSA-2026:1837 |
| Rocky Linux 10 | podman | 7:5.6.0-8.el10_1 | RLSA-2025:23295 |
| Rocky Linux 10 | skopeo | 2:1.20.0-2.el10_1 | RLSA-2025:23294 |
| Rocky Linux 9 | buildah | 2:1.41.6-1.el9_7 | RLSA-2025:22011 |
| Rocky Linux 9 | delve | 1.25.2-1.el9_7 | RLSA-2025:21815 |
| Rocky Linux 9 | golang | 1.25.3-1.el9_7 | RLSA-2025:21815 |
| Rocky Linux 9 | grafana | 10.2.6-17.el9_7 | RLSA-2025:23087 |
| Rocky Linux 9 | image-builder | 31-2.el9_7.rocky.0.2 | RLSA-2026:1377 |
| Rocky Linux 9 | osbuild-composer | 149-3.el9_7.rocky.0.8 | RLSA-2026:1381 |
| Rocky Linux 9 | podman | 6:5.6.0-9.el9_7 | RLSA-2025:23325 |
| Rocky Linux 9 | skopeo | 2:1.20.0-2.el9_7 | RLSA-2025:23326 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2025:23374 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+2001+6a33db9f | RLSA-2025:23374 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2025:23374 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | delve | 1.25.2-1.module+el8.10.0+40035+ee0a7047 | RLSA-2025:22668 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | golang | 1.25.3-2.module+el8.10.0+40037+cec252d2 | RLSA-2025:22668 |
| Rocky Linux 8 | grafana | 9.2.10-26.el8_10 | RLSA-2025:23948 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | osbuild-composer | 101.4-2.el8_10.rocky.0.6 | RLSA-2026:1380 |
| Rocky Linux 8 | python-podman | 4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2025:23374 |
| Rocky Linux 8 | runc | 4:1.2.9-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2025:23374 |
| Rocky Linux 8 | skopeo | 2:1.14.5-5.module+el8.10.0+40047+0c0a73f4 | RLSA-2025:23374 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2025:23374 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2025:23374 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES 15 SP7 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES 15 SP7 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLES 15 SP7 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES 15 SP6 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES 15 SP6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES 15 SP6 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLES 15 SP6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES 15 SP5 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES 15 SP5 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLES 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES 15 SP4 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES 15 SP4 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLES 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES 15 SP3 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES 15 SP3 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | go1.24 | 1.24.11-160000.1.1 | SUSE-SU-2025:21193-1 |
| SLES for SAP 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | SUSE-SU-2026:20629-1 |
| SLES for SAP 16.0 | go1.25 | 1.25.5-160000.1.1 | SUSE-SU-2025:21192-1 |
| SLES for SAP 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | SUSE-SU-2026:20623-1 |
| SLES for SAP 15 SP6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES for SAP 15 SP6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES for SAP 15 SP5 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES for SAP 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES for SAP 15 SP5 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLES for SAP 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES for SAP 15 SP4 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES for SAP 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES for SAP 15 SP4 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLES for SAP 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES for SAP 15 SP3 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLES for SAP 15 SP3 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLES 16.0 | go1.24 | 1.24.11-160000.1.1 | SUSE-SU-2025:21193-1 |
| SLES 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | SUSE-SU-2026:20629-1 |
| SLES 16.0 | go1.25 | 1.25.5-160000.1.1 | SUSE-SU-2025:21192-1 |
| SLES 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | SUSE-SU-2026:20623-1 |
| SLE HPC 15 SP5 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLE HPC 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLE HPC 15 SP5 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLE HPC 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLE HPC 15 SP4 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLE HPC 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLE HPC 15 SP4 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SLE HPC 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLE HPC 15 SP3 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SLE HPC 15 SP3 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| SUSE Enterprise Storage 7.1 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| SUSE Enterprise Storage 7.1 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.24 | 1.24.8-1.1 | openSUSE-SU-2025:15608-1 |
| openSUSE Tumbleweed | go1.25 | 1.25.2-1.1 | openSUSE-SU-2025:15609-1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20251029T215107-1.1 | openSUSE-SU-2025:15695-1 |
| openSUSE Tumbleweed | opentofu | 1.10.7-1.1 | openSUSE-SU-2025:15711-1 |
| openSUSE Tumbleweed | regclient | 0.10.0-1.1 | openSUSE-SU-2025:15723-1 |
| openSUSE Leap 16.0 | go1.24 | 1.24.11-160000.1.1 | openSUSE-SU-2025:20158-1 |
| openSUSE Leap 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | openSUSE-SU-2026:20308-1 |
| openSUSE Leap 16.0 | go1.25 | 1.25.5-160000.1.1 | openSUSE-SU-2025:20157-1 |
| openSUSE Leap 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | openSUSE-SU-2026:20301-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
| openSUSE Leap 15.6 | go1.24 | 1.24.9-150000.1.42.1 | SUSE-SU-2025:3682-1 |
| openSUSE Leap 15.6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| openSUSE Leap 15.6 | go1.25 | 1.25.2-150000.1.14.1 | SUSE-SU-2025:03547-1 |
| openSUSE Leap 15.6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.25.2-r0 | — |
| Alpine v3.23 | go | 1.25.2-r0 | — |
| Alpine v3.22 | go | 1.24.8-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-cloudwatch-agent | 1.300060.1-1.amzn2023 | ALAS2023-2025-1275 |
| Amazon Linux 2023 | amazon-ecr-credential-helper | 0.10.1-3.amzn2023 | ALAS2023-2025-1271 |
| Amazon Linux 2023 | amazon-ssm-agent | 3.3.3572.0-1.amzn2023 | ALAS2023-2025-1359 |
| Amazon Linux 2023 | cni-plugins | 1.7.1-1.amzn2023.0.3 | ALAS2023-2025-1287 |
| Amazon Linux 2023 | containerd +1 | 2.1.4-1.amzn2023.0.2 | ALAS2023-2025-1272 |
| Amazon Linux 2023 | docker | 25.0.13-1.amzn2023.0.2 | ALAS2023-2025-1274 |
| Amazon Linux 2023 | ecs-init | 1.101.0-1.amzn2023 | ALAS2023-2025-1295 |
| Amazon Linux 2023 | golang +6 | 1.24.8-1.amzn2023.0.1 | ALAS2023-2025-1239 |
| Amazon Linux 2023 | golist | 0.10.1-11.amzn2023.0.5 | ALAS2023-2025-1276 |
| Amazon Linux 2023 | libcap +3 | 2.73-1.amzn2023.0.4 | ALAS2023-2025-1279 |
| Amazon Linux 2023 | nerdctl | 2.1.5-1.amzn2023.0.2 | ALAS2023-2025-1278 |
| Amazon Linux 2023 | oci-add-hooks | 0-0.1.20200504git268e3bb.amzn2023.0.6 | ALAS2023-2025-1273 |
| Amazon Linux 2023 | runc | 1.3.3-2.amzn2023.0.1 | ALAS2023-2025-1286 |
| Amazon Linux 2023 | runfinch-finch | 1.10.0-1.amzn2023.0.5 | ALAS2023-2025-1270 |
| Amazon Linux 2023 | soci-snapshotter | 0.11.1-1.amzn2023.0.3 | ALAS2023-2025-1277 |
| Amazon Linux 2 | amazon-cloudwatch-agent | 1.300060.1-1.amzn2 | ALAS2-2025-3068 |
| Amazon Linux 2 | amazon-ssm-agent | 3.3.3572.0-1.amzn2 | ALAS2-2025-3121 |
| Amazon Linux 2 | cni-plugins | 1.7.1-1.amzn2.0.3 | ALAS2-2025-3078 |
| Amazon Linux 2 | cri-tools | 1.32.0-1.amzn2.0.2 | ALAS2-2025-3079 |
| Amazon Linux 2 | golang +6 | 1.24.8-1.amzn2.0.1 | ALAS2-2025-3042 |
| Amazon Linux 2 | golist | 0.10.1-10.amzn2.0.8 | ALAS2-2025-3069 |
| Amazon Linux 2 | nerdctl | 2.1.5-1.amzn2.0.2 | ALAS2-2025-3070 |
| Amazon Linux 2 | rclone | 1.55.1-1.amzn2.0.3 | ALAS2-2025-3071 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | containerized-data-importer | 1.57.0-17 | — |
| Azure Linux 3 | cri-o +3 | No fix yet | — |
| Azure Linux 3 | gh | 2.62.0-10 | — |
| Azure Linux 3 | moby-engine | 25.0.3-14 | — |
| Azure Linux 3 | skopeo | 1.14.4-7 | — |
| Azure Linux 2 (CBL-Mariner) | containerized-data-importer | 1.55.0-26 | — |
| Azure Linux 2 (CBL-Mariner) | cri-o | 1.22.3-17 | — |
| Azure Linux 2 (CBL-Mariner) | moby-engine | 24.0.9-19 | — |
| Azure Linux 2 (CBL-Mariner) | podman +1 | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | skopeo | 1.14.2-13 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | buildah +1 | 2:1.41.6-1.0.1.el10_1 | ELSA-2025-22012 |
| Oracle Linux 10 | delve | 1.25.2-1.0.1.el10_1 | ELSA-2025-21816 |
| Oracle Linux 10 | golang +7 | 1.25.3-1.el10_1 | ELSA-2025-21816 |
| Oracle Linux 10 | grafana +1 | 10.2.6-21.el10_1 | ELSA-2025-23088 |
| Oracle Linux 10 | image-builder | 45-1.0.2.el10 | ELSA-2026-1838 |
| Oracle Linux 10 | osbuild-composer +2 | 149-4.0.1.el10_1 | ELSA-2026-1837 |
| Oracle Linux 10 | podman +3 | 7:5.6.0-8.0.1.el10_1 | ELSA-2025-23295 |
| Oracle Linux 10 | skopeo +1 | 2:1.20.0-2.el10_1 | ELSA-2025-23294 |
| Oracle Linux 9 | buildah +1 | 2:1.41.6-1.0.1.el9_7 | ELSA-2025-22011 |
| Oracle Linux 9 | delve | 1.25.2-1.0.1.el9_7 | ELSA-2025-21815 |
| Oracle Linux 9 | golang +7 | 1.25.3-1.el9_7 | ELSA-2025-21815 |
| Oracle Linux 9 | grafana +1 | 10.2.6-17.el9_7 | ELSA-2025-23087 |
| Oracle Linux 9 | image-builder | 45-1.0.2.el9_7 | ELSA-2026-50076 |
| Oracle Linux 9 | osbuild-composer +2 | 149-3.0.1.el9_7 | ELSA-2026-1381 |
| Oracle Linux 9 | podman +4 | 6:5.6.0-9.0.1.el9_7 | ELSA-2025-23325 |
| Oracle Linux 9 | skopeo +1 | 2:1.20.0-2.el9_7 | ELSA-2025-23326 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | buildah +1 | 2:1.33.12-2.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | delve | 1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd | ELSA-2025-22668 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | golang +7 | 1.25.3-2.module+el8.10.0+90715+2d4d8dfd | ELSA-2025-22668 |
| Oracle Linux 8 | grafana +1 | 9.2.10-26.0.1.el8_10 | ELSA-2025-23948 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | osbuild-composer +2 | 101.4-2.0.1.el8_10 | ELSA-2026-1380 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-24.0.1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | python3-podman | 4.9.0-3.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | runc | 4:1.2.9-2.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-5.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90731+0506229e | ELSA-2025-23374 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | age | 1.2.1-r8 | — |
| Wolfi rolling | amass | 5.0.1-r1 | — |
| Wolfi rolling | apisix-ingress-controller +2 | 1.8.4-r4 | — |
| Wolfi rolling | argo-rollouts +1 | 1.8.3-r4 | — |
| Wolfi rolling | atlantis | 0.36.0-r2 | — |
| Wolfi rolling | aws-s3-controller | 1.1.1-r1 | — |
| Wolfi rolling | aws-signer-notation-plugin | 1.0.2292-r3 | — |
| Wolfi rolling | aws-sigv4-proxy +1 | 1.10-r3 | — |
| Wolfi rolling | azure-ipam +1 | 0.4.0-r4 | — |
| Wolfi rolling | azure-workload-identity-webhook +1 | 1.5.1-r3 | — |
| Wolfi rolling | bazelisk +1 | 1.27.0-r1 | — |
| Wolfi rolling | bom | 0.7.1-r1 | — |
| Wolfi rolling | boring-registry | 0.16.6-r2 | — |
| Wolfi rolling | cadvisor +1 | 0.53.0-r6 | — |
| Wolfi rolling | capslock | 0.2.8-r1 | — |
| Wolfi rolling | cargobump | 0.1.0-r7 | — |
| Wolfi rolling | cert-exporter | 2.16.0-r2 | — |
| Wolfi rolling | cert-manager-cmctl | 2.3.0-r5 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.3-r1 | — |
| Wolfi rolling | certificate-transparency +1 | 1.3.2-r4 | — |
| Wolfi rolling | cfssl +7 | 1.6.5-r23 | — |
| Wolfi rolling | chartmuseum | 0.16.3-r8 | — |
| Wolfi rolling | checksec | 3.0.2-r6 | — |
| Wolfi rolling | chisel +1 | 1.11.3-r1 | — |
| Wolfi rolling | cloud-provider-gcp-cloud-controller-manager +1 | 34.0.0-r1 | — |
| Wolfi rolling | cloud-sql-proxy-2.16 +1 | 2.16.0-r10 | — |
| Wolfi rolling | cluster-api-gcp-controller +1 | 1.10.0-r4 | — |
| Wolfi rolling | cluster-api-provider-vsphere +1 | 1.14.0-r2 | — |
| Wolfi rolling | cluster-proportional-autoscaler +1 | 1.10.2-r7 | — |
| Wolfi rolling | configmap-reload | 0.15.0-r4 | — |
| Wolfi rolling | conftest | 0.63.0-r1 | — |
| Wolfi rolling | conjur-cli | 8.1.3-r1 | — |
| Wolfi rolling | container-object-storage-interface +4 | 0.2.1-r2 | — |
| Wolfi rolling | controller-gen | 0.19.0-r2 | — |
| Wolfi rolling | crane +1 | 0.20.6-r3 | — |
| Wolfi rolling | crictl +3 | 1.34.0-r2 | — |
| Wolfi rolling | crossplane-crank | 2.0.2-r4 | — |
| Wolfi rolling | ctop | 0.7.7-r28 | — |
| Wolfi rolling | custom-pod-autoscaler +1 | 2.12.2-r3 | — |
| Wolfi rolling | custom-pod-autoscaler-operator +1 | 1.4.2-r3 | — |
| Wolfi rolling | dagdotdev | 0.0.17-r3 | — |
| Wolfi rolling | dask-gateway +1 | 2025.4.0-r5 | — |
| Wolfi rolling | dbmate | 2.28.0-r2 | — |
| Wolfi rolling | delve +2 | 1.25.2-r2 | — |
| Wolfi rolling | dfc | 0.9.5-r1 | — |
| Wolfi rolling | direnv | 2.37.1-r2 | — |
| Wolfi rolling | distribution | 3.0.0-r42 | — |
| Wolfi rolling | dive | 0.13.1-r9 | — |
| Wolfi rolling | docker-cli-buildx | 0.29.1-r1 | — |
| Wolfi rolling | docker-credential-acr-env | 0.7.0-r24 | — |
| Wolfi rolling | docker-credential-ecr-login | 0.10.1-r3 | — |
| Wolfi rolling | docker-credential-gcr | 2.1.30-r5 | — |
| Wolfi rolling | docker-machine-driver-harvester | 1.0.4-r1 | — |
| Wolfi rolling | docker-machine-driver-linode | 0.1.15-r6 | — |
| Wolfi rolling | dockerize | 0.9.6-r1 | — |
| Wolfi rolling | doppler-kubernetes-operator | 1.7.1-r1 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 4.3.0-r4 | — |
| Wolfi rolling | elvish | 0.21.0-r7 | — |
| Wolfi rolling | envconsul | 0.13.4-r2 | — |
| Wolfi rolling | etcd-3.6 +1 | 3.6.5-r1 | — |
| Wolfi rolling | extism | 1.6.3-r2 | — |
| Wolfi rolling | falco-exporter | 0.8.7-r10 | — |
| Wolfi rolling | falco-no-driver | 0.43.0-r1 | — |
| Wolfi rolling | falcoctl | 0.11.4-r1 | — |
| Wolfi rolling | falcosidekick | 2.32.0-r1 | — |
| Wolfi rolling | ferretdb | 2.5.0-r2 | — |
| Wolfi rolling | flyte | 1.16.1-r1 | — |
| Wolfi rolling | fq | 0.15.1-r3 | — |
| Wolfi rolling | fscrypt | 0.3.5-r11 | — |
| Wolfi rolling | fulcio | 1.7.1-r8 | — |
| Wolfi rolling | gcsfuse | 2.12.2-r6 | — |
| Wolfi rolling | ghaudit | 0.4.0-r15 | — |
| Wolfi rolling | git-credential-oauth +2 | 0.16.0-r1 | — |
| Wolfi rolling | glow | 2.1.1-r7 | — |
| Wolfi rolling | go-1.20 +2 | No fix yet | — |
| Wolfi rolling | go-bindata | 3.1.3-r31 | — |
| Wolfi rolling | go-licenses | 2.0.1-r1 | — |
| Wolfi rolling | go-md2man +1 | 2.0.7-r4 | — |
| Wolfi rolling | gobump | 0.9.3-r2 | — |
| Wolfi rolling | gobuster | 3.8.2-r2 | — |
| Wolfi rolling | gops | 0.3.28-r21 | — |
| Wolfi rolling | gostatsd | 28.3.0-r19 | — |
| Wolfi rolling | gotestsum +4 | 1.13.0-r1 | — |
| Wolfi rolling | govulncheck | 1.1.4-r4 | — |
| Wolfi rolling | grpcurl | 1.9.3-r8 | — |
| Wolfi rolling | guac +4 | 1.0.1-r1 | — |
| Wolfi rolling | harbor-2.14 +6 | 2.14.0-r2 | — |
| Wolfi rolling | harbor-registry | 3.0.0-r11 | — |
| Wolfi rolling | hello-world-golang | 1.3-r14 | — |
| Wolfi rolling | helm-docs | 1.14.2-r15 | — |
| Wolfi rolling | helm-push | 0.10.4-r35 | — |
| Wolfi rolling | helm-set-status | 0.3.0-r5 | — |
| Wolfi rolling | hey | 0.1.4-r27 | — |
| Wolfi rolling | hivemind | 1.1.0-r11 | — |
| Wolfi rolling | http-echo | 1.0.0-r18 | — |
| Wolfi rolling | hydra | 2.3.0-r13 | — |
| Wolfi rolling | incert | 0.5.0-r6 | — |
| Wolfi rolling | infinispan-operator +1 | 2.4.18-r1 | — |
| Wolfi rolling | ini-file | 1.4.9-r2 | — |
| Wolfi rolling | ip-masq-agent | 2.12.0-r14 | — |
| Wolfi rolling | ipfs-cluster +2 | 1.1.4-r8 | — |
| Wolfi rolling | iptables-wrappers | 2-r3 | — |
| Wolfi rolling | istio-pilot-agent-1.25 +1 | 1.25.5-r2 | — |
| Wolfi rolling | jitsucom-bulker-bulker +4 | 2.11.913-r0 | — |
| Wolfi rolling | juicefs-1.3 +1 | 1.3.0-r7 | — |
| Wolfi rolling | k3d +2 | 5.8.3-r18 | — |
| Wolfi rolling | k6 +1 | 1.3.0-r1 | — |
| Wolfi rolling | kaf | 0.2.13-r5 | — |
| Wolfi rolling | kafka-proxy +1 | 0.4.3-r5 | — |
| Wolfi rolling | kafka_exporter | 1.9.0-r39 | — |
| Wolfi rolling | kapp | 0.64.2-r5 | — |
| Wolfi rolling | katib-earlystopping +8 | 0.19.0-r31 | — |
| Wolfi rolling | katib-suggestion-goptuna-compat | 0.19.0-r40 | — |
| Wolfi rolling | kbld | 0.46.0-r4 | — |
| Wolfi rolling | kind | 0.30.0-r2 | — |
| Wolfi rolling | ko | 0.18.0-r7 | — |
| Wolfi rolling | kpt | 1.0.0_beta55-r13 | — |
| Wolfi rolling | kratos +1 | 2.9.1-r1 | — |
| Wolfi rolling | kube-bench +1 | 0.13.0-r1 | — |
| Wolfi rolling | kube-logging-operator-custom-runner +1 | 0.13.0-r2 | — |
| Wolfi rolling | kube-metrics-adapter | 0.2.6-r1 | — |
| Wolfi rolling | kube-rbac-proxy | 0.20.0-r1 | — |
| Wolfi rolling | kube-state-metrics +2 | 2.17.0-r1 | — |
| Wolfi rolling | kube-vip-cloud-provider +1 | 0.0.12-r5 | — |
| Wolfi rolling | kubebuilder | 4.9.0-r1 | — |
| Wolfi rolling | kubecolor | 0.5.2-r1 | — |
| Wolfi rolling | kubeflow +12 | 1.10.0-r7 | — |
| Wolfi rolling | kubelet-csr-approver +1 | 1.2.11-r1 | — |
| Wolfi rolling | kuberlr +1 | 0.6.1-r4 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.17.0-r6 | — |
| Wolfi rolling | kubernetes-csi-external-attacher +1 | 4.10.0-r1 | — |
| Wolfi rolling | kubernetes-dashboard-metrics-scraper +1 | 1.2.2-r13 | — |
| Wolfi rolling | kubernetes-dashboard-web +1 | 1.7.0-r7 | — |
| Wolfi rolling | kubernetes-event-exporter +1 | 1.7-r47 | — |
| Wolfi rolling | kubernetes-replicator | 2.12.0-r3 | — |
| Wolfi rolling | kubescape-operator | 0.2.109-r1 | — |
| Wolfi rolling | kubevela +3 | 1.10.4-r2 | — |
| Wolfi rolling | kustomize | 5.7.1-r2 | — |
| Wolfi rolling | kwok +1 | 0.7.0-r4 | — |
| Wolfi rolling | lazydocker | 0.24.1-r8 | — |
| Wolfi rolling | licenseclassifier | 2.0.0-r5 | — |
| Wolfi rolling | litefs | 0.5.14-r4 | — |
| Wolfi rolling | local-path-provisioner | 0.0.32-r2 | — |
| Wolfi rolling | logstash-exporter | 1.9.1-r2 | — |
| Wolfi rolling | mage | 1.15.0-r17 | — |
| Wolfi rolling | manifest-tool | 2.2.1-r1 | — |
| Wolfi rolling | maru | 0.6.0-r5 | — |
| Wolfi rolling | mc +1 | 0.20250813.083541-r1 | — |
| Wolfi rolling | mesosphere-vsphere-csi +2 | 3.5.0-r3 | — |
| Wolfi rolling | metacontroller | 4.12.5-r1 | — |
| Wolfi rolling | metrics-server +2 | 0.8.0-r4 | — |
| Wolfi rolling | minio-object-browser +1 | 2.0.4-r1 | — |
| Wolfi rolling | mockery | 3.5.5-r1 | — |
| Wolfi rolling | mockgen | 0.6.0-r2 | — |
| Wolfi rolling | mods | 1.8.1-r3 | — |
| Wolfi rolling | mongo-tools | 100.13.0-r3 | — |
| Wolfi rolling | mongodb-kubernetes-operator +5 | 0.13.0-r4 | — |
| Wolfi rolling | nats | 0.3.0-r1 | — |
| Wolfi rolling | nerdctl | 2.1.6-r1 | — |
| Wolfi rolling | neuvector-dbgen +1 | 0_git20240423-r8 | — |
| Wolfi rolling | neuvector-sigstore-interface | 0_git20250629-r4 | — |
| Wolfi rolling | newrelic-nri-statsd | 2.11.0-r9 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r25 | — |
| Wolfi rolling | nova +1 | 3.11.8-r3 | — |
| Wolfi rolling | nri-prometheus | 2.27.2-r1 | — |
| Wolfi rolling | nsc | 2.12.0-r1 | — |
| Wolfi rolling | oauth2-proxy +1 | 7.12.0-r2 | — |
| Wolfi rolling | octo-sts +1 | 0.5.3-r3 | — |
| Wolfi rolling | openbao-k8s +1 | 1.4.0-r40 | — |
| Wolfi rolling | opensearch-k8s-operator +1 | 2.8.0-r3 | — |
| Wolfi rolling | opentofu-1.9 | 1.9.4-r2 | — |
| Wolfi rolling | otel-cli | 0.4.5-r7 | — |
| Wolfi rolling | petname | 2.11-r17 | — |
| Wolfi rolling | pg_user | 1.1.1-r2 | — |
| Wolfi rolling | pgpool2_exporter | 1.2.2-r6 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r17 | — |
| Wolfi rolling | podcli +2 | 6.9.2-r1 | — |
| Wolfi rolling | policy-controller +1 | 0.13.1-r1 | — |
| Wolfi rolling | portieris +1 | 0.13.31-r1 | — |
| Wolfi rolling | prometheus-adapter | 0.12.0-r16 | — |
| Wolfi rolling | prometheus-alertmanager +1 | 0.28.1-r10 | — |
| Wolfi rolling | prometheus-pushgateway +1 | 1.11.2-r0 | — |
| Wolfi rolling | promxy | 0.0.93-r4 | — |
| Wolfi rolling | protoc-gen-go | 1.36.10-r1 | — |
| Wolfi rolling | protoc-gen-go-grpc | 1.5.1-r8 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 1.16.0-r20 | — |
| Wolfi rolling | pvc-autoresizer +1 | 0.18.0-r1 | — |
| Wolfi rolling | rancher-helm-3 | 3.19.0-r1 | — |
| Wolfi rolling | rancher-loglevel | 0.1.6-r8 | — |
| Wolfi rolling | rancher-machine | 0.15.0.135-r1 | — |
| Wolfi rolling | rancher-system-agent | 0.3.13-r4 | — |
| Wolfi rolling | rancher-telemetry | 0.6.2-r5 | — |
| Wolfi rolling | redka +1 | 0.6.0-r4 | — |
| Wolfi rolling | regclient +8 | 0.9.2-r2 | — |
| Wolfi rolling | rekor +3 | 1.4.2-r1 | — |
| Wolfi rolling | render-template | 1.0.9-r2 | — |
| Wolfi rolling | renovate | 42.12.1-r0 | — |
| Wolfi rolling | restic +1 | 0.18.1-r1 | — |
| Wolfi rolling | rootlesskit +1 | 2.3.5-r7 | — |
| Wolfi rolling | runc +1 | 1.3.2-r1 | — |
| Wolfi rolling | s5cmd | 2.3.0-r7 | — |
| Wolfi rolling | sbom-convert | 0.0.7-r5 | — |
| Wolfi rolling | sbom-scorecard | 0.0.7-r24 | — |
| Wolfi rolling | scorecard | 5.3.0-r1 | — |
| Wolfi rolling | sealed-secrets +3 | 0.32.2-r2 | — |
| Wolfi rolling | secrets-store-csi-driver +1 | 1.5.4-r1 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-aws | 2.1.1-r1 | — |
| Wolfi rolling | shfmt | 3.12.0-r3 | — |
| Wolfi rolling | sigstore-scaffolding +13 | 0.7.25-r1 | — |
| Wolfi rolling | skaffold | 2.16.1-r3 | — |
| Wolfi rolling | skopeo | 1.20.0-r4 | — |
| Wolfi rolling | slsa-verifier | 2.7.1-r3 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r21 | — |
| Wolfi rolling | sonobuoy +1 | 0.57.3-r9 | — |
| Wolfi rolling | sops | 3.11.0-r1 | — |
| Wolfi rolling | spark-operator +1 | 2.3.0-r4 | — |
| Wolfi rolling | speedtest-go | 1.7.10-r7 | — |
| Wolfi rolling | spicedb-operator +1 | 1.21.0-r1 | — |
| Wolfi rolling | spiffe-helper +1 | 0.10.1-r2 | — |
| Wolfi rolling | spire-controller-manager +1 | 0.6.3-r2 | — |
| Wolfi rolling | spqr +1 | 2.7.0-r1 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r33 | — |
| Wolfi rolling | sriov-network-device-plugin +1 | 3.10.0-r1 | — |
| Wolfi rolling | stakater-reloader +1 | 1.4.8-r2 | — |
| Wolfi rolling | step-kms-plugin | 0.15.1-r2 | — |
| Wolfi rolling | stern | 1.33.0-r1 | — |
| Wolfi rolling | task | 3.45.4-r1 | — |
| Wolfi rolling | terraform +2 | 1.5.7-r34 | — |
| Wolfi rolling | terraform-provider-azuread | 3.6.0-r1 | — |
| Wolfi rolling | terraform-provider-kubernetes | 2.38.0-r3 | — |
| Wolfi rolling | terraform-provider-random | 3.7.2-r4 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r7 | — |
| Wolfi rolling | terraform-provider-time | 0.13.1-r4 | — |
| Wolfi rolling | terraform-provider-tls | 4.1.0-r4 | — |
| Wolfi rolling | tfsec | 1.28.14-r7 | — |
| Wolfi rolling | thanos-operator | 0.3.7-r35 | — |
| Wolfi rolling | timescaledb-parallel-copy | 0.11.0-r0 | — |
| Wolfi rolling | timescaledb-tune | 0.18.1-r2 | — |
| Wolfi rolling | timestamp-authority +2 | 1.2.9-r1 | — |
| Wolfi rolling | timoni | 0.25.2-r2 | — |
| Wolfi rolling | tofu-controller +3 | 0.16.0_rc5-r5 | — |
| Wolfi rolling | trillian +2 | 1.7.2-r5 | — |
| Wolfi rolling | trivy-operator | 0.29.0-r1 | — |
| Wolfi rolling | vault-env +1 | 1.22.0-r3 | — |
| Wolfi rolling | vault-k8s | 1.7.0-r4 | — |
| Wolfi rolling | vault-secrets-webhook +1 | 1.22.1-r1 | — |
| Wolfi rolling | velero +2 | 1.17.0-r1 | — |
| Wolfi rolling | velero-plugin-for-csi +1 | 0.7.1-r38 | — |
| Wolfi rolling | vendir | 0.44.0-r4 | — |
| Wolfi rolling | vertical-pod-autoscaler +2 | 1.5.1-r1 | — |
| Wolfi rolling | vexctl +2 | 0.4.1-r1 | — |
| Wolfi rolling | vt-cli | 1.2.0-r1 | — |
| Wolfi rolling | wait-for-port | 1.0.10-r2 | — |
| Wolfi rolling | wave | 0.10.0-r12 | — |
| Wolfi rolling | wazero | 1.9.0-r6 | — |
| Wolfi rolling | wgcf | 2.2.29-r2 | — |
| Wolfi rolling | wire-go | 0.7.0-r2 | — |
| Wolfi rolling | wireguard-go | 0.0.20250522-r5 | — |
| Wolfi rolling | xcaddy | 0.4.5-r2 | — |
| Wolfi rolling | xcover | 0.2.0-r4 | — |
| Wolfi rolling | yunikorn-k8shim +1 | 1.7.0-r5 | — |
| Wolfi rolling | yunikorn-web +1 | 1.7.0-r2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.24.8 · >= 1.25.0, < 1.25.2 | 1.24.8, 1.25.2 | GO-2025-4014 |
Advisories 50
- ALSA-2025:23294 Moderate: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1838 Moderate: image-builder security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:22012 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23088 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1837 Moderate: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1377 Moderate: image-builder security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1381 Moderate: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23087 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:21815 Moderate: delve and golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23325 Moderate: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:22011 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23326 Moderate: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23295 Moderate: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:21816 Moderate: delve and golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:23948 Moderate: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1380 Moderate: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:22668 Moderate: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:8325 Red Hat Security Advisory: buildah, crun, podman, runc, and skopeo security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7385 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7291 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:6191 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5876 Red Hat Security Advisory: OpenShift Container Platform 4.19.27 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5866 Red Hat Security Advisory: OpenShift Container Platform 4.17.52 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5234 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5086 Red Hat Security Advisory: OpenShift Container Platform 4.14.63 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4693 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4532 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4533 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4464 Red Hat Security Advisory: OpenShift Container Platform 4.16.58 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4418 Red Hat Security Advisory: OpenShift Container Platform 4.15.62 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3875 Red Hat Security Advisory: OpenShift Container Platform 4.18.35 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2711 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:26541 Red Hat Security Advisory: OpenShift Container Platform 4.13.68 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:26527 Red Hat Security Advisory: OpenShift Container Platform 4.12.92 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:21701 Red Hat Security Advisory: OpenShift Container Platform 4.20.24 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2071 Red Hat Security Advisory: OpenShift Container Platform 4.18.33 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2082 Red Hat Security Advisory: OpenShift Container Platform 4.21.1 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1837 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1838 Red Hat Security Advisory: image-builder security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:17595 Red Hat Security Advisory: OpenShift Container Platform 4.17.54 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:17446 Red Hat Security Advisory: OpenShift Container Platform 4.18.42 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1381 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1379 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1380 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1378 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1377 Red Hat Security Advisory: image-builder security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:10703 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:1025 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:0987 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:0973 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026