Description
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | archive/zip | < 1.24.12, 1.25.0 – < 1.25.6 | 1.24.12 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | golang-1.24 | No fix yet | — |
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | golang-1.23 +2 | No fix yet | — |
| Ubuntu 25.10 | golang-1.23 +2 | No fix yet | — |
| Ubuntu 24.04 LTS | golang-1.21 +4 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.17 +7 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.13 +5 | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +2 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.13 +1 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | golang +7 | 1.25.7-1.el10_1 | RHSA-2026:2706 |
| RHEL 10 | grafana +1 | 10.2.6-22.el10_1 | RHSA-2026:2914 |
| RHEL 10 | osbuild-composer +2 | 149-5.el10_1 | RHSA-2026:22450, RHSA-2026:3752 |
| RHEL 10 | podman +3 | 7:5.6.0-12.el10_1 | RHSA-2026:3336 |
| RHEL 9 | golang +7 | 1.25.7-1.el9_7 | RHSA-2026:2709 |
| RHEL 9 | grafana +1 | 10.2.6-18.el9_7 | RHSA-2026:2920 |
| RHEL 9 | osbuild-composer +2 | 149-4.el9_7 | RHSA-2026:22714, RHSA-2026:3753 |
| RHEL 9 | podman +4 | 6:5.6.0-14.el9_7 | RHSA-2026:3337 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | buildah +1 | 2:1.33.14-3.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | delve | 1.25.2-1.module+el8.10.0+23746+9db33b5e | RHSA-2026:2708 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | golang +7 | 1.25.7-1.module+el8.10.0+23993+83a15e10 | RHSA-2026:2708 |
| RHEL 8 | grafana +1 | 9.2.10-28.el8_10 | RHSA-2026:3188 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | podman +6 | 4:4.9.4-30.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | python-podman +1 | 4.9.0-3.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | runc | 4:1.2.9-4.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | skopeo +1 | 2:1.14.5-7.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | toolbox +1 | 0.0.99.5.1-1.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+24081+a04d358a | RHSA-2026:4672 |
Show 15 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | golang +7 | 1.25.7-1.el10_0 | RHSA-2026:3192 |
| RHEL 10.0 EUS | grafana +1 | 10.2.6-21.el10_0 | RHSA-2026:3831 |
| RHEL 10.0 EUS | podman +3 | 6:5.4.0-15.el10_0.1 | RHSA-2026:17040 |
| RHEL 9.6 EUS | golang +7 | 1.25.7-1.el9_6 | RHSA-2026:3193 |
| RHEL 9.6 EUS | grafana +1 | 10.2.6-18.el9_6 | RHSA-2026:3833 |
| RHEL 9.6 EUS | podman +4 | 5:5.4.0-20.el9_6.2 | RHSA-2026:7854 |
| RHEL 9.4 EUS | golang +6 | 1.21.13-14.el9_4 | RHSA-2026:3469 |
| RHEL 9.4 EUS | grafana +1 | 9.2.10-25.el9_4 | RHSA-2026:3835 |
| RHEL 9.4 EUS | podman +4 | 4:4.9.4-20.el9_4.2 | RHSA-2026:12028 |
| RHEL 9.2 E4S | golang +6 | 1.19.13-23.el9_2 | RHSA-2026:3472 |
| RHEL 9.2 E4S | grafana | 9.0.9-10.el9_2 | RHSA-2026:3836 |
| RHEL 9.2 E4S | podman +5 | 2:4.4.1-22.el9_2.11 | RHSA-2026:25248 |
| RHEL 9.0 E4S | golang +6 | 1.17.13-10.el9_0 | RHSA-2026:3473 |
| RHEL 9.0 E4S | grafana | 7.5.11-13.el9_0 | RHSA-2026:3854 |
| RHEL 8.8 TUS | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | buildah +1 | 1:1.29.8-1.module+el8.8.0+24545+b713e821 | RHSA-2026:49944 |
| RHEL 8.8 TUS | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 TUS | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2026:3471 |
| RHEL 8.8 TUS | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | go-toolset | 1.19.13-4.module+el8.8.0+23976+18ba1869 | RHSA-2026:3471 |
| RHEL 8.8 TUS | golang +6 | 1.19.13-22.module+el8.8.0+24034+309cd052 | RHSA-2026:3471 |
| RHEL 8.8 TUS | grafana | 7.5.15-9.el8_8 | RHSA-2026:3838 |
| RHEL 8.8 TUS | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.8.0+24130+2fde7a57 | RHSA-2026:49944 |
| RHEL 8.8 TUS | podman +6 | 3:4.4.1-27.module+el8.8.0+24545+b713e821.8 | RHSA-2026:49944 |
| RHEL 8.8 TUS | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | runc | 1:1.2.9-1.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 TUS | skopeo +1 | 2:1.11.6-1.module+el8.8.0+24525+a924b82f | RHSA-2026:49944 |
| RHEL 8.8 TUS | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | buildah +1 | 1:1.29.8-1.module+el8.8.0+24545+b713e821 | RHSA-2026:49944 |
| RHEL 8.8 E4S | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 E4S | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2026:3471 |
| RHEL 8.8 E4S | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | go-toolset | 1.19.13-4.module+el8.8.0+23976+18ba1869 | RHSA-2026:3471 |
| RHEL 8.8 E4S | golang +6 | 1.19.13-22.module+el8.8.0+24034+309cd052 | RHSA-2026:3471 |
| RHEL 8.8 E4S | grafana | 7.5.15-9.el8_8 | RHSA-2026:3838 |
| RHEL 8.8 E4S | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.8.0+24130+2fde7a57 | RHSA-2026:49944 |
| RHEL 8.8 E4S | podman +6 | 3:4.4.1-27.module+el8.8.0+24545+b713e821.8 | RHSA-2026:49944 |
| RHEL 8.8 E4S | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | runc | 1:1.2.9-1.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 E4S | skopeo +1 | 2:1.11.6-1.module+el8.8.0+24525+a924b82f | RHSA-2026:49944 |
| RHEL 8.8 E4S | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.6 TUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2026:3489 |
| RHEL 8.6 TUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2026:3489 |
| RHEL 8.6 TUS | golang +6 | 1.17.13-14.module+el8.6.0+24037+9dec91ea | RHSA-2026:3489 |
| RHEL 8.6 TUS | grafana | 7.5.11-9.el8_6 | RHSA-2026:3880 |
| RHEL 8.6 EUS Long Life | buildah +1 | 1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | podman +6 | 2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | runc | 1:1.2.9-1.module+el8.6.0+24505+50d764bf.2 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 E4S | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2026:3489 |
| RHEL 8.6 E4S | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2026:3489 |
| RHEL 8.6 E4S | golang +6 | 1.17.13-14.module+el8.6.0+24037+9dec91ea | RHSA-2026:3489 |
| RHEL 8.6 E4S | grafana | 7.5.11-9.el8_6 | RHSA-2026:3880 |
| RHEL 8.6 AUS | buildah +1 | 1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3 | RHSA-2026:51288 |
| RHEL 8.6 AUS | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2 | RHSA-2026:51288 |
| RHEL 8.6 AUS | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2026:3489 |
| RHEL 8.6 AUS | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2026:3489 |
| RHEL 8.6 AUS | golang +6 | 1.17.13-14.module+el8.6.0+24037+9dec91ea | RHSA-2026:3489 |
| RHEL 8.6 AUS | grafana | 7.5.11-9.el8_6 | RHSA-2026:3880 |
| RHEL 8.6 AUS | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:51288 |
| RHEL 8.6 AUS | podman +6 | 2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6 | RHSA-2026:51288 |
| RHEL 8.6 AUS | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | runc | 1:1.2.9-1.module+el8.6.0+24505+50d764bf.2 | RHSA-2026:51288 |
| RHEL 8.6 AUS | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2 | RHSA-2026:51288 |
| RHEL 8.6 AUS | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 AUS | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| Red Hat Openshift Ironic 4 | python-pyasn1 +3 | 0.5.1-4.el9 | RHSA-2026:17595, RHSA-2026:17446 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-6.rhaos4.14.el8 | RHSA-2026:28886, RHSA-2026:26541 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-19.rhaos4.13.el8 | RHSA-2026:28886, RHSA-2026:26541, RHSA-2026:17595 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.3-6.rhaos4.13.el8 | RHSA-2026:28886, RHSA-2026:26541 |
| Red Hat Hardened Images 1 | golang1.25 +6 | 1.25.9-1.hum1 | RHSA-2026:7385 |
| Red Hat Hardened Images 1 | golang1.26 +6 | 1.26.2-1.hum1 | RHSA-2026:7291 |
| Red Hat Edge Manager 1 | flightctl +5 | 1.1.2-1.el9em | RHEA-2026:14435 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | golang-src +3 | 1.25.7-1.el10_1.alma.1 | ALSA-2026:2706 |
| AlmaLinux 10 | grafana +1 | 10.2.6-22.el10_1 | ALSA-2026:2914 |
| AlmaLinux 10 | osbuild-composer +2 | 149-5.el10_1.alma.3 | ALSA-2026:3752 |
| AlmaLinux 10 | podman-docker | 7:5.6.0-12.el10_1.alma.1 | ALSA-2026:3336 |
| AlmaLinux 9 | golang +7 | 1.25.7-1.el9_7 | ALSA-2026:2709 |
| AlmaLinux 9 | grafana +1 | 10.2.6-18.el9_7 | ALSA-2026:2920 |
| AlmaLinux 9 | osbuild-composer +2 | 149-4.el9_7.alma.3 | ALSA-2026:3753 |
| AlmaLinux 9 | podman +4 | 6:5.6.0-14.el9_7 | ALSA-2026:3337 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:4672 |
| AlmaLinux 8 | buildah +1 | 2:1.33.14-3.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:4672 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:4672 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:4672 |
| AlmaLinux 8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:4672 |
| AlmaLinux 8 | criu +1 | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:4672 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:4672 |
| AlmaLinux 8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:4672 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:4672 |
| AlmaLinux 8 | delve | 1.25.2-1.module_el8.10.0+4074+24330916 | ALSA-2026:2708 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:4672 |
| AlmaLinux 8 | golang +7 | 1.25.7-1.module_el8.10.0+4117+b694c6c9 | ALSA-2026:2708 |
| AlmaLinux 8 | grafana +1 | 9.2.10-28.el8_10 | ALSA-2026:3188 |
| AlmaLinux 8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:4672 |
| AlmaLinux 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:4672 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:4672 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-30.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux 8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:4672 |
| AlmaLinux 8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-7.module_el8.10.0+4136+16425343 | ALSA-2026:4672 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:4672 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:4672 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:4672 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | golang | 1.25.7-1.el10_1 | RLSA-2026:2706 |
| Rocky Linux 10 | grafana | 10.2.6-22.el10_1 | RLSA-2026:2914 |
| Rocky Linux 10 | osbuild-composer | 149-5.el10_1.rocky.0.8 | RLSA-2026:22450, RLSA-2026:3752 |
| Rocky Linux 10 | podman | 7:5.6.0-12.el10_1 | RLSA-2026:3336 |
| Rocky Linux 9 | golang | 1.25.7-1.el9_7 | RLSA-2026:2709 |
| Rocky Linux 9 | grafana | 10.2.6-18.el9_7 | RLSA-2026:2920 |
| Rocky Linux 9 | osbuild-composer | 149-4.el9_7.rocky.0.8 | RLSA-2026:22714, RLSA-2026:3753 |
| Rocky Linux 9 | podman | 6:5.6.0-14.el9_7 | RLSA-2026:3337 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:4672 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:4672 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | delve | 1.25.2-1.module+el8.10.0+40035+ee0a7047 | RLSA-2026:2708 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | golang | 1.25.7-1.module+el8.10.0+40081+47cbcb72 | RLSA-2026:2708 |
| Rocky Linux 8 | grafana | 9.2.10-28.el8_10 | RLSA-2026:3188 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | python-podman | 4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2026:4672 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
| Rocky Linux 8 | toolbox | 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 | RLSA-2026:4672 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2026:4672 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLES 15 SP7 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES 15 SP7 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLES 15 SP7 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES 15 SP6 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLES 15 SP6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES 15 SP6 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLES 15 SP6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES 15 SP5 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLES 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES 15 SP5 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLES 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES 15 SP4 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLES 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES 15 SP4 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLES 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | go1.24 | 1.24.12-160000.1.1 | SUSE-SU-2026:20122-1 |
| SLES for SAP 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | SUSE-SU-2026:20629-1 |
| SLES for SAP 16.0 | go1.25 | 1.25.6-160000.1.1 | SUSE-SU-2026:20132-1 |
| SLES for SAP 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | SUSE-SU-2026:20623-1 |
| SLES for SAP 15 SP6 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLES for SAP 15 SP6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES for SAP 15 SP6 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLES for SAP 15 SP6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES for SAP 15 SP5 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLES for SAP 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES for SAP 15 SP5 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLES for SAP 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES for SAP 15 SP4 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLES for SAP 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES for SAP 15 SP4 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLES for SAP 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES 16.0 | go1.24 | 1.24.12-160000.1.1 | SUSE-SU-2026:20122-1 |
| SLES 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | SUSE-SU-2026:20629-1 |
| SLES 16.0 | go1.25 | 1.25.6-160000.1.1 | SUSE-SU-2026:20132-1 |
| SLES 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | SUSE-SU-2026:20623-1 |
| SLE HPC 15 SP5 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLE HPC 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLE HPC 15 SP5 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLE HPC 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLE HPC 15 SP4 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| SLE HPC 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLE HPC 15 SP4 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| SLE HPC 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | coredns | 1.14.1-1.1 | openSUSE-SU-2026:10101-1 |
| openSUSE Tumbleweed | go1.24 | 1.24.12-1.1 | openSUSE-SU-2026:10063-1 |
| openSUSE Tumbleweed | go1.25 | 1.25.6-1.1 | openSUSE-SU-2026:10064-1 |
| openSUSE Tumbleweed | kubelogin | 0.2.16-1.1 | openSUSE-SU-2026:10329-1 |
| openSUSE Leap 16.0 | coredns | 1.14.2-bp160.1.1 | openSUSE-SU-2026:20619-1 |
| openSUSE Leap 16.0 | go1.24 | 1.24.12-160000.1.1 | openSUSE-SU-2026:20077-1 |
| openSUSE Leap 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | openSUSE-SU-2026:20308-1 |
| openSUSE Leap 16.0 | go1.25 | 1.25.6-160000.1.1 | openSUSE-SU-2026:20085-1 |
| openSUSE Leap 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | openSUSE-SU-2026:20301-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
| openSUSE Leap 15.6 | go1.24 | 1.24.12-150000.1.53.1 | SUSE-SU-2026:0219-1 |
| openSUSE Leap 15.6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| openSUSE Leap 15.6 | go1.25 | 1.25.6-150000.1.26.1 | SUSE-SU-2026:0218-1 |
| openSUSE Leap 15.6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20260128T190828-150000.1.143.1 | SUSE-SU-2026:0354-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.25.6-r0 | — |
| Alpine v3.24 | opentofu | 1.11.4-r0 | — |
| Alpine v3.23 | go | 1.25.6-r0 | — |
| Alpine v3.22 | go | 1.24.12-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-cloudwatch-agent | 1.300064.1-1.amzn2023 | ALAS2023-2026-1473 |
| Amazon Linux 2023 | amazon-ecr-credential-helper | 0.11.0-3.amzn2023 | ALAS2023-2026-1370 |
| Amazon Linux 2023 | cni-plugins | 1.7.1-1.amzn2023.0.5 | ALAS2023-2026-1373 |
| Amazon Linux 2023 | containerd +1 | 2.1.5-1.amzn2023.0.5 | ALAS2023-2026-1374 |
| Amazon Linux 2023 | docker | 25.0.14-1.amzn2023.0.2 | ALAS2023-2026-1376 |
| Amazon Linux 2023 | ecs-init | 1.101.3-1.amzn2023 | ALAS2023-2026-1443 |
| Amazon Linux 2023 | git-lfs | 3.7.1-79.amzn2023 | ALAS2023-2025-1258 |
| Amazon Linux 2023 | golang +6 | 1.24.12-1.amzn2023.0.1 | ALAS2023-2026-1381 |
| Amazon Linux 2023 | golang-github-burntsushi-toml +1 | 1.5.0-1.amzn2023.0.1 | ALAS2023-2026-1751 |
| Amazon Linux 2023 | golang-github-burntsushi-toml-test +1 | 0.2.0-8.amzn2023.0.3 | ALAS2023-2026-1750 |
| Amazon Linux 2023 | golang-github-cpuguy83-md2man +2 | 2.0.2-24.amzn2023.0.7 | ALAS2023-2026-1749 |
| Amazon Linux 2023 | golist | 0.10.1-11.amzn2023.0.6 | ALAS2023-2026-1382 |
| Amazon Linux 2023 | libcap +3 | 2.73-1.amzn2023.0.6 | ALAS2023-2026-1389 |
| Amazon Linux 2023 | nerdctl | 2.2.1-1.amzn2023.0.2 | ALAS2023-2026-1401 |
| Amazon Linux 2023 | oci-add-hooks | 0-0.1.20200504git268e3bb.amzn2023.0.8 | ALAS2023-2026-1405 |
| Amazon Linux 2023 | runc | 1.3.4-1.amzn2023.0.2 | ALAS2023-2026-1419 |
| Amazon Linux 2023 | runfinch-finch | 1.14.1-1.amzn2023.0.1 | ALAS2023-2026-1420 |
| Amazon Linux 2023 | soci-snapshotter | 0.12.0-1.amzn2023.0.3 | ALAS2023-2026-1421 |
| Amazon Linux 2 | amazon-cloudwatch-agent | 1.300064.1-1.amzn2 | ALAS2-2026-3191 |
| Amazon Linux 2 | cni-plugins | 1.7.1-1.amzn2.0.5 | ALAS2-2026-3134 |
| Amazon Linux 2 | cri-tools | 1.32.0-1.amzn2.0.4 | ALAS2-2026-3135 |
| Amazon Linux 2 | golang +6 | 1.24.12-1.amzn2.0.1 | ALAS2-2026-3136 |
| Amazon Linux 2 | golang-github-cpuguy83-go-md2man | 1.0.4-4.amzn2.0.4 | ALAS2-2026-3137 |
| Amazon Linux 2 | golist | 0.10.1-10.amzn2.0.10 | ALAS2-2026-3138 |
| Amazon Linux 2 | nerdctl | 2.2.1-1.amzn2.0.2 | ALAS2-2026-3146 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | 1.24.12-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | golang +7 | 1.25.7-1.el10_1 | ELSA-2026-2706 |
| Oracle Linux 10 | grafana +1 | 10.2.6-22.el10_1 | ELSA-2026-2914 |
| Oracle Linux 10 | osbuild-composer +2 | 149-5.0.1.el10_1 | ELSA-2026-22450, ELSA-2026-3752 |
| Oracle Linux 10 | podman +3 | 7:5.6.0-12.0.1.el10_1 | ELSA-2026-3336 |
| Oracle Linux 9 | golang +7 | 1.25.7-1.el9_7 | ELSA-2026-2709 |
| Oracle Linux 9 | grafana +1 | 10.2.6-18.el9_7 | ELSA-2026-2920 |
| Oracle Linux 9 | osbuild-composer +2 | 149-4.0.1.el9_7 | ELSA-2026-22714, ELSA-2026-3753 |
| Oracle Linux 9 | podman +4 | 6:5.6.0-14.0.1.el9_7 | ELSA-2026-3337 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | buildah +1 | 2:1.33.14-3.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | delve | 1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd | ELSA-2026-2708 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | golang +7 | 1.25.7-1.module+el8.10.0+90804+12f38c29 | ELSA-2026-2708 |
| Oracle Linux 8 | grafana +1 | 9.2.10-28.0.1.el8_10 | ELSA-2026-3188 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-30.0.1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | python3-podman | 4.9.0-3.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | runc | 4:1.2.9-4.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-7.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90844+cf83192e | ELSA-2026-4672 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r40 | — |
| Wolfi rolling | aws-flb-cloudwatch | 1.9.4-r23 | — |
| Wolfi rolling | aws-flb-kinesis | 1.10.3-r4 | — |
| Wolfi rolling | bento +3 | 1.14.1-r1 | — |
| Wolfi rolling | bom | 0.7.1-r4 | — |
| Wolfi rolling | cert-manager-cmctl | 2.4.0-r2 | — |
| Wolfi rolling | cilium-cli | 0.19.0-r1 | — |
| Wolfi rolling | conftest | 0.66.0-r1 | — |
| Wolfi rolling | cosign | 3.0.4-r2 | — |
| Wolfi rolling | croc | 10.3.1-r2 | — |
| Wolfi rolling | dask-gateway-server | 2025.4.0-r7 | — |
| Wolfi rolling | eksctl | 0.221.0-r1 | — |
| Wolfi rolling | falco-no-driver | 0.43.0-r1 | — |
| Wolfi rolling | ferretdb | 2.7.0-r3 | — |
| Wolfi rolling | flux-image-automation-controller | 1.0.4-r4 | — |
| Wolfi rolling | flux-kustomize-controller | 1.7.3-r4 | — |
| Wolfi rolling | flux-notification-controller | 1.7.5-r4 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 2.1.7-r2 | — |
| Wolfi rolling | gitlab-runner-helper-18.7 | 18.7.2-r1 | — |
| Wolfi rolling | gitness | 3.3.0-r5 | — |
| Wolfi rolling | go-1.20 +3 | No fix yet | — |
| Wolfi rolling | goreleaser | 2.13.3-r2 | — |
| Wolfi rolling | guac +1 | 1.0.1-r4 | — |
| Wolfi rolling | headlamp | 0.39.0-r1 | — |
| Wolfi rolling | helm-3 | 3.22.0-r0 | — |
| Wolfi rolling | helm-operator | 1.42.0-r4 | — |
| Wolfi rolling | helm-set-status | 0.3.0-r9 | — |
| Wolfi rolling | hubble | 1.18.5-r1 | — |
| Wolfi rolling | ingress-nginx-controller-1.12 | 1.12.8-r3 | — |
| Wolfi rolling | k3d | 5.8.3-r21 | — |
| Wolfi rolling | k3s +2 | 1.35.0.1-r2 | — |
| Wolfi rolling | k8s_gateway | 1.6.2-r1 | — |
| Wolfi rolling | katib-earlystopping +8 | 0.19.0-r31 | — |
| Wolfi rolling | katib-suggestion-goptuna-compat | 0.19.0-r40 | — |
| Wolfi rolling | kine | 0.14.11-r0 | — |
| Wolfi rolling | kube-logging-operator | 6.3.2-r1 | — |
| Wolfi rolling | kubeflow-pipelines-apiserver | 2.15.0-r7 | — |
| Wolfi rolling | kubernetes-dashboard | 7.14.0-r3 | — |
| Wolfi rolling | kubernetes-dashboard-api | 1.14.0-r2 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.26.7-r6 | — |
| Wolfi rolling | kubo | 0.39.0-r2 | — |
| Wolfi rolling | mattermost-11.1 | 11.1.3-r1 | — |
| Wolfi rolling | mc | 0.20250813.083541-r4 | — |
| Wolfi rolling | minio | 0.20251015.172955-r3 | — |
| Wolfi rolling | nerdctl | 2.2.1-r2 | — |
| Wolfi rolling | newrelic-fluent-bit-output | 3.3.0-r1 | — |
| Wolfi rolling | opensearch-k8s-operator | 2.8.0-r6 | — |
| Wolfi rolling | opentofu-1.9 | 1.9.4-r5 | — |
| Wolfi rolling | osv-scanner | 2.3.2-r1 | — |
| Wolfi rolling | rancher-helm-3 | 3.19.0-r5 | — |
| Wolfi rolling | redis-operator | 0.23.0-r1 | — |
| Wolfi rolling | redka | 1.0.1-r0 | — |
| Wolfi rolling | runc | 1.4.0-r2 | — |
| Wolfi rolling | scorecard | 5.4.0-r3 | — |
| Wolfi rolling | src | 6.12.0-r2 | — |
| Wolfi rolling | steampipe | 2.3.4-r1 | — |
| Wolfi rolling | terraform | 1.5.7-r37 | — |
| Wolfi rolling | terraform-provider-pagerduty | 3.30.9-r1 | — |
| Wolfi rolling | tfsec | 1.28.14-r10 | — |
| Wolfi rolling | thanos-operator | 0.3.7-r37 | — |
| Wolfi rolling | timoni | 0.25.2-r4 | — |
| Wolfi rolling | tofu-controller | 0.16.0_rc5-r9 | — |
| Wolfi rolling | traefik-3.6 | 3.6.7-r1 | — |
| Wolfi rolling | vale | 3.13.0-r4 | — |
| Wolfi rolling | xeol | 0.10.8-r21 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.24.12 · >= 1.25.0, < 1.25.6 | 1.24.12, 1.25.6 | GO-2026-4342 |
Advisories 50
- WID-SEC-2026-0129 Golang Go: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026
- ALSA-2026:3752 Important: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2914 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3753 Important: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2709 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2920 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3337 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3336 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2706 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:4672 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3188 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2708 Important: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-4084 Oracle Siebel CRM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2026
- RHSA-2026:7854 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7385 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7291 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:51288 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:49944 Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:4672 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3880 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3854 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3838 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3836 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3833 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3835 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3831 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3752 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3753 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3489 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3473 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3472 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3471 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3469 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3337 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3336 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3192 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3193 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3188 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2920 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2914 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:28886 Red Hat Security Advisory: OpenShift Container Platform 4.14.68 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2708 Red Hat Security Advisory: go-toolset:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2709 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:2706 Red Hat Security Advisory: golang security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:26541 Red Hat Security Advisory: OpenShift Container Platform 4.13.68 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:25248 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:22714 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:22450 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:17595 Red Hat Security Advisory: OpenShift Container Platform 4.17.54 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:17446 Red Hat Security Advisory: OpenShift Container Platform 4.18.42 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026