Description
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in excessive resource consumption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | crypto/x509 | < 1.24.11, 1.25.0 – < 1.25.5 | 1.24.11 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | golang-1.24 | No fix yet | — |
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | golang-1.24 +1 | No fix yet | — |
| Ubuntu 25.10 | golang-1.24 +1 | No fix yet | — |
| Ubuntu 24.04 LTS | golang-1.24 +1 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.24 +1 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | buildah +1 | 2:1.41.8-2.el10_1 | RHSA-2026:3297 |
| RHEL 10 | delve | 1.25.2-2.el10_1 | RHSA-2026:19013, RHSA-2026:3864 |
| RHEL 10 | git-lfs | 3.6.1-7.el10_1 | RHSA-2026:4164 |
| RHEL 10 | golang +7 | 1.25.5-1.el10_1 | RHSA-2026:0922 |
| RHEL 10 | grafana +1 | 10.2.6-22.el10_1 | RHSA-2026:2914 |
| RHEL 10 | grafana-pcp | 5.3.0-2.el10_1 | RHSA-2026:3035 |
| RHEL 10 | image-builder | 31-4.el10_1 | RHSA-2026:3840 |
| RHEL 10 | ipp-usb | 0.9.27-4.el10_1 | RHSA-2026:1715 |
| RHEL 10 | opentelemetry-collector | 0.135.0-3.el10_1 | RHSA-2026:1907 |
| RHEL 10 | osbuild-composer +2 | 149-5.el10_1 | RHSA-2026:3752 |
| RHEL 10 | podman +3 | 7:5.6.0-12.el10_1 | RHSA-2026:3336 |
| RHEL 10 | rhc | 1:0.3.4-2.el10_1 | RHSA-2026:4892 |
| RHEL 10 | rhc-worker-playbook | 0.2.3-3.el10_1 | RHSA-2026:3971 |
| RHEL 10 | skopeo +1 | 2:1.20.0-3.el10_1 | RHSA-2026:3343 |
| RHEL 10 | yggdrasil +1 | 0.4.8-3.el10_1 | RHSA-2026:5146 |
| RHEL 9 | buildah +1 | 2:1.41.8-2.el9_7 | RHSA-2026:3298 |
| RHEL 9 | containernetworking-plugins | 1:1.7.1-3.el9_7 | RHSA-2026:18913, RHSA-2026:3341 |
| RHEL 9 | git-lfs | 3.6.1-7.el9_7 | RHSA-2026:3928 |
| RHEL 9 | golang +7 | 1.25.5-2.el9_7 | RHSA-2026:0923 |
| RHEL 9 | grafana +1 | 10.2.6-18.el9_7 | RHSA-2026:2920 |
| RHEL 9 | grafana-pcp | 5.1.1-12.el9_7 | RHSA-2026:3040 |
| RHEL 9 | image-builder | 31-3.el9_7 | RHSA-2026:3839 |
| RHEL 9 | opentelemetry-collector | 0.135.0-3.el9_7 | RHSA-2026:1908 |
| RHEL 9 | osbuild-composer +2 | 149-4.el9_7 | RHSA-2026:3753 |
| RHEL 9 | podman +4 | 6:5.6.0-14.el9_7 | RHSA-2026:3337 |
| RHEL 9 | rhc +1 | 1:0.2.7-2.el9_7 | RHSA-2026:4901 |
| RHEL 9 | runc | 4:1.4.0-2.el9_7 | RHSA-2026:3291 |
| RHEL 9 | skopeo +1 | 2:1.20.0-3.el9_7 | RHSA-2026:3340 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | buildah +1 | 2:1.33.14-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-7.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | delve | 1.25.2-1.module+el8.10.0+23746+9db33b5e | RHSA-2026:0921 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | git-lfs | 3.4.1-7.el8_10 | RHSA-2026:2323 |
| RHEL 8 | golang +7 | 1.25.5-1.module+el8.10.0+23901+9d60aaf1 | RHSA-2026:0921 |
| RHEL 8 | grafana +1 | 9.2.10-27.el8_10 | RHSA-2026:1344 |
| RHEL 8 | grafana-pcp | 5.1.1-11.el8_10 | RHSA-2026:1518 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | osbuild-composer +2 | 101.4-3.el8_10 | RHSA-2026:2124 |
| RHEL 8 | podman +6 | 4:4.9.4-28.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | python-podman +1 | 4.9.0-3.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | rhc | 1:0.2.5-4.el8_10 | RHSA-2026:4952 |
| RHEL 8 | runc | 4:1.2.9-3.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | skopeo +1 | 2:1.14.5-6.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | toolbox +1 | 0.0.99.5.1-1.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+23963+b64d8032 | RHSA-2026:3428 |
Show 29 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.16.0.12-1.el9sat | RHSA-2026:5968 |
| Red Hat Satellite Capsule 6 | dynflow-utils | 1.6.3-1.1.el8sat | RHSA-2026:27076 |
| Red Hat Satellite Capsule 6 | foreman +2 | 3.16.0.12-1.el9sat | RHSA-2026:5968 |
| Red Hat Satellite Capsule 6 | python-pillow +1 | 12.2.0-1.el8pc | RHSA-2026:27076 |
| Red Hat Satellite Capsule 6 | rubygem-rubyipmi | 0.13.0-1.el9sat | RHSA-2026:5968 |
| Red Hat Satellite 6 | dynflow-utils | 1.6.3-1.1.el8sat | RHSA-2026:27076 |
| Red Hat Satellite 6 | foreman +13 | 3.16.0.12-1.el9sat | RHSA-2026:5968 |
| Red Hat Satellite 6 | python-pillow +1 | 12.2.0-1.el8pc | RHSA-2026:27076 |
| Red Hat Satellite 6 | rubygem-foreman_kubevirt | 0.4.3-1.el9sat | RHSA-2026:5968 |
| Red Hat Satellite 6 | rubygem-katello | 4.18.0.9-1.el9sat | RHSA-2026:5968 |
| Red Hat Satellite 6 | rubygem-rubyipmi | 0.13.0-1.el9sat | RHSA-2026:5968 |
| Red Hat Satellite 6 | yggdrasil-worker-forwarder | 0.0.3-4.el9sat | RHSA-2026:27076, RHSA-2026:5968 |
| RHEL 10.0 EUS | buildah +1 | 2:1.39.8-1.el10_0 | RHSA-2026:14868 |
| RHEL 10.0 EUS | delve | 1.25.2-2.el10_0 | RHSA-2026:3843 |
| RHEL 10.0 EUS | git-lfs | 3.6.1-2.el10_0.2 | RHSA-2026:4166 |
| RHEL 10.0 EUS | golang +7 | 1.25.5-1.el10_0 | RHSA-2026:1814 |
| RHEL 10.0 EUS | grafana +1 | 10.2.6-21.el10_0 | RHSA-2026:3831 |
| RHEL 10.0 EUS | grafana-pcp | 5.2.2-4.el10_0 | RHSA-2026:3816 |
| RHEL 10.0 EUS | gvisor-tap-vsock +1 | 6:0.8.5-2.el10_0.1 | RHSA-2026:17084 |
| RHEL 10.0 EUS | ipp-usb +1 | 0.9.27-3.el10_0.1 | RHSA-2026:2265 |
| RHEL 10.0 EUS | opentelemetry-collector | 0.135.0-3.el10_0 | RHSA-2026:3288 |
| RHEL 10.0 EUS | osbuild-composer +2 | 134.1-5.el10_0 | RHSA-2026:5852 |
| RHEL 10.0 EUS | podman +3 | 6:5.4.0-15.el10_0.1 | RHSA-2026:17040 |
| RHEL 10.0 EUS | rhc | 1:0.3.2-2.el10_0 | RHSA-2026:4907 |
| RHEL 10.0 EUS | rhc-worker-playbook | 0.2.3-3.el10_0 | RHSA-2026:3970 |
| RHEL 10.0 EUS | skopeo +1 | 2:1.18.1-3.el10_0.1 | RHSA-2026:16696 |
| RHEL 10.0 EUS | yggdrasil +1 | 0.4.7-2.el10_0 | RHSA-2026:3506 |
| RHEL 9.6 EUS | buildah +1 | 2:1.39.6-2.el9_6 | RHSA-2026:11749 |
| RHEL 9.6 EUS | containernetworking-plugins | 1:1.6.2-3.el9_6 | RHSA-2026:9109 |
| RHEL 9.6 EUS | git-lfs | 3.6.1-2.el9_6.2 | RHSA-2026:3929 |
| RHEL 9.6 EUS | golang +7 | 1.25.5-1.el9_6 | RHSA-2026:1813 |
| RHEL 9.6 EUS | grafana +1 | 10.2.6-18.el9_6 | RHSA-2026:3833 |
| RHEL 9.6 EUS | grafana-pcp | 5.1.1-12.el9_6 | RHSA-2026:3817 |
| RHEL 9.6 EUS | gvisor-tap-vsock +1 | 6:0.8.5-2.el9_6.1 | RHSA-2026:9108 |
| RHEL 9.6 EUS | opentelemetry-collector | 0.135.0-3.el9_6 | RHSA-2026:3289 |
| RHEL 9.6 EUS | osbuild-composer +2 | 132.2-5.el9_6 | RHSA-2026:5544 |
| RHEL 9.6 EUS | podman +4 | 5:5.4.0-20.el9_6.2 | RHSA-2026:7854 |
| RHEL 9.6 EUS | rhc +1 | 1:0.2.7-1.el9_6.1 | RHSA-2026:5077 |
| RHEL 9.6 EUS | runc | 4:1.2.9-3.el9_6 | RHSA-2026:9097 |
| RHEL 9.6 EUS | skopeo +1 | 2:1.18.1-5.el9_6 | RHSA-2026:9098 |
| RHEL 9.4 EUS | buildah +1 | 2:1.33.13-3.el9_4.1 | RHSA-2026:12030 |
| RHEL 9.4 EUS | butane | 0.20.0-1.el9_4.1 | RHSA-2026:3053 |
| RHEL 9.4 EUS | containernetworking-plugins | 1:1.4.0-6.el9_4.3 | RHSA-2026:12032 |
| RHEL 9.4 EUS | git-lfs | 3.4.1-4.el9_4.4 | RHSA-2026:3930 |
| RHEL 9.4 EUS | golang +6 | 1.21.13-13.el9_4 | RHSA-2026:2218 |
| RHEL 9.4 EUS | grafana +1 | 9.2.10-25.el9_4 | RHSA-2026:3835 |
| RHEL 9.4 EUS | grafana-pcp | 5.1.1-6.el9_4 | RHSA-2026:3818 |
| RHEL 9.4 EUS | gvisor-tap-vsock | 6:0.7.3-5.el9_4.3 | RHSA-2026:12033 |
| RHEL 9.4 EUS | opentelemetry-collector | 0.135.0-3.el9_4 | RHSA-2026:3287 |
| RHEL 9.4 EUS | osbuild-composer +2 | 101.3-4.el9_4 | RHSA-2026:4211 |
| RHEL 9.4 EUS | podman +4 | 4:4.9.4-20.el9_4.2 | RHSA-2026:12028 |
| RHEL 9.4 EUS | rhc +1 | 1:0.2.4-6.el9_4 | RHSA-2026:5078 |
| RHEL 9.4 EUS | runc | 4:1.2.9-1.el9_4.1 | RHSA-2026:12031 |
| RHEL 9.4 EUS | skopeo +1 | 2:1.14.5-2.el9_4.4 | RHSA-2026:12029 |
| RHEL 9.2 E4S | buildah +1 | 1:1.29.7-1.el9_2.5 | RHSA-2026:25252 |
| RHEL 9.2 E4S | containernetworking-plugins | 1:1.2.0-3.el9_2.3 | RHSA-2026:25251 |
| RHEL 9.2 E4S | git-lfs | 3.2.0-2.el9_2.5 | RHSA-2026:3931 |
| RHEL 9.2 E4S | golang +6 | 1.19.13-21.el9_2 | RHSA-2026:2219 |
| RHEL 9.2 E4S | grafana | 9.0.9-10.el9_2 | RHSA-2026:3836 |
| RHEL 9.2 E4S | grafana-pcp | 5.1.1-4.el9_2 | RHSA-2026:3820 |
| RHEL 9.2 E4S | osbuild-composer +3 | 76.1-5.el9_2 | RHSA-2026:5327 |
| RHEL 9.2 E4S | podman +5 | 2:4.4.1-22.el9_2.11 | RHSA-2026:25248 |
| RHEL 9.2 E4S | rhc | 1:0.2.2-1.el9_2.1 | RHSA-2026:5076 |
| RHEL 9.2 E4S | runc | 4:1.2.9-1.el9_2.2 | RHSA-2026:25253 |
| RHEL 9.2 E4S | skopeo +1 | 2:1.11.4-0.1.el9_2.6 | RHSA-2026:25250 |
| RHEL 9.0 E4S | buildah +1 | 1:1.26.11-1.el9_0 | RHSA-2026:16102 |
| RHEL 9.0 E4S | git-lfs | 2.13.3-5.el9_0.6 | RHSA-2026:3932 |
| RHEL 9.0 E4S | golang +6 | 1.17.13-9.el9_0 | RHSA-2026:2320 |
| RHEL 9.0 E4S | grafana | 7.5.11-13.el9_0 | RHSA-2026:3854 |
| RHEL 9.0 E4S | grafana-pcp | 3.2.0-5.el9_0 | RHSA-2026:3822 |
| RHEL 9.0 E4S | osbuild-composer +3 | 46.3-7.el9_0 | RHSA-2026:5533 |
| RHEL 9.0 E4S | rhc | 1:0.2.1-12.el9_0 | RHSA-2026:5079 |
| RHEL 8.8 TUS | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | buildah +1 | 1:1.29.8-1.module+el8.8.0+24545+b713e821 | RHSA-2026:49944 |
| RHEL 8.8 TUS | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 TUS | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2026:2441 |
| RHEL 8.8 TUS | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | git-lfs | 3.2.0-2.el8_8.6 | RHSA-2026:3974 |
| RHEL 8.8 TUS | go-toolset | 1.19.13-4.module+el8.8.0+23976+18ba1869 | RHSA-2026:2441 |
| RHEL 8.8 TUS | golang +6 | 1.19.13-19.module+el8.8.0+23965+aadf92d2 | RHSA-2026:2441 |
| RHEL 8.8 TUS | grafana | 7.5.15-9.el8_8 | RHSA-2026:3838 |
| RHEL 8.8 TUS | grafana-pcp | 3.2.0-5.el8_8 | RHSA-2026:3821 |
| RHEL 8.8 TUS | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.8.0+24130+2fde7a57 | RHSA-2026:49944 |
| RHEL 8.8 TUS | osbuild-composer +3 | 75-7.el8_8 | RHSA-2026:4753 |
| RHEL 8.8 TUS | podman +6 | 3:4.4.1-27.module+el8.8.0+24545+b713e821.8 | RHSA-2026:49944 |
| RHEL 8.8 TUS | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | rhc | 1:0.2.2-1.el8_8.1 | RHSA-2026:5022 |
| RHEL 8.8 TUS | runc | 1:1.2.9-1.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 TUS | skopeo +1 | 2:1.11.6-1.module+el8.8.0+24525+a924b82f | RHSA-2026:49944 |
| RHEL 8.8 TUS | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 TUS | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | aardvark-dns | 2:1.5.0-2.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | buildah +1 | 1:1.29.8-1.module+el8.8.0+24545+b713e821 | RHSA-2026:49944 |
| RHEL 8.8 E4S | cockpit-podman | 63.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | conmon | 3:2.1.6-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | container-selinux | 2:2.229.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | containernetworking-plugins | 1:1.2.0-3.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 E4S | containers-common | 2:1-67.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | crit +4 | 3.15-4.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | crun | 1.14.3-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | delve | 1.9.1-1.module+el8.8.0+16778+5fbb74f5 | RHSA-2026:2441 |
| RHEL 8.8 E4S | fuse-overlayfs | 1.11-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | git-lfs | 3.2.0-2.el8_8.6 | RHSA-2026:3974 |
| RHEL 8.8 E4S | go-toolset | 1.19.13-4.module+el8.8.0+23976+18ba1869 | RHSA-2026:2441 |
| RHEL 8.8 E4S | golang +6 | 1.19.13-19.module+el8.8.0+23965+aadf92d2 | RHSA-2026:2441 |
| RHEL 8.8 E4S | grafana | 7.5.15-9.el8_8 | RHSA-2026:3838 |
| RHEL 8.8 E4S | grafana-pcp | 3.2.0-5.el8_8 | RHSA-2026:3821 |
| RHEL 8.8 E4S | libslirp +1 | 4.4.0-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | netavark | 2:1.5.1-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.8.0+24130+2fde7a57 | RHSA-2026:49944 |
| RHEL 8.8 E4S | osbuild-composer +3 | 75-7.el8_8 | RHSA-2026:4753 |
| RHEL 8.8 E4S | podman +6 | 3:4.4.1-27.module+el8.8.0+24545+b713e821.8 | RHSA-2026:49944 |
| RHEL 8.8 E4S | python-podman +1 | 4.4.1-1.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | rhc | 1:0.2.2-1.el8_8.1 | RHSA-2026:5022 |
| RHEL 8.8 E4S | runc | 1:1.2.9-1.module+el8.8.0+24525+a924b82f.1 | RHSA-2026:49944 |
| RHEL 8.8 E4S | skopeo +1 | 2:1.11.6-1.module+el8.8.0+24525+a924b82f | RHSA-2026:49944 |
| RHEL 8.8 E4S | slirp4netns | 1.2.0-3.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | toolbox +1 | 0.0.99.3-7.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.8 E4S | udica | 0.2.6-20.module+el8.8.0+23884+2031fc78 | RHSA-2026:49944 |
| RHEL 8.6 TUS | buildah +1 | 1:1.26.11-1.module+el8.6.0+24306+fc1f97ae | RHSA-2026:19634 |
| RHEL 8.6 TUS | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:19634 |
| RHEL 8.6 TUS | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2026:2334 |
| RHEL 8.6 TUS | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | git-lfs | 2.13.3-3.el8_6.6 | RHSA-2026:3972 |
| RHEL 8.6 TUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2026:2334 |
| RHEL 8.6 TUS | golang +6 | 1.17.13-12.module+el8.6.0+23956+e8c5263b | RHSA-2026:2334 |
| RHEL 8.6 TUS | grafana | 7.5.11-9.el8_6 | RHSA-2026:3880 |
| RHEL 8.6 TUS | grafana-pcp | 3.2.0-3.el8_6 | RHSA-2026:3812 |
| RHEL 8.6 TUS | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:19634 |
| RHEL 8.6 TUS | osbuild-composer +3 | 46.3-6.el8_6 | RHSA-2026:5853 |
| RHEL 8.6 TUS | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:19634 |
| RHEL 8.6 TUS | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | rhc | 1:0.2.1-13.el8_6 | RHSA-2026:5031 |
| RHEL 8.6 TUS | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:19634 |
| RHEL 8.6 TUS | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:19634 |
| RHEL 8.6 TUS | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 TUS | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 EUS Long Life | buildah +1 | 1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | podman +6 | 2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | runc | 1:1.2.9-1.module+el8.6.0+24505+50d764bf.2 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 EUS Long Life | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:51288 |
| RHEL 8.6 E4S | buildah +1 | 1:1.26.11-1.module+el8.6.0+24306+fc1f97ae | RHSA-2026:19634 |
| RHEL 8.6 E4S | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:19634 |
| RHEL 8.6 E4S | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2026:2334 |
| RHEL 8.6 E4S | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | git-lfs | 2.13.3-3.el8_6.6 | RHSA-2026:3972 |
| RHEL 8.6 E4S | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2026:2334 |
| RHEL 8.6 E4S | golang +6 | 1.17.13-12.module+el8.6.0+23956+e8c5263b | RHSA-2026:2334 |
| RHEL 8.6 E4S | grafana | 7.5.11-9.el8_6 | RHSA-2026:3880 |
| RHEL 8.6 E4S | grafana-pcp | 3.2.0-3.el8_6 | RHSA-2026:3812 |
| RHEL 8.6 E4S | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:19634 |
| RHEL 8.6 E4S | osbuild-composer +3 | 46.3-6.el8_6 | RHSA-2026:5853 |
| RHEL 8.6 E4S | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:19634 |
| RHEL 8.6 E4S | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | rhc | 1:0.2.1-13.el8_6 | RHSA-2026:5031 |
| RHEL 8.6 E4S | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:19634 |
| RHEL 8.6 E4S | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:19634 |
| RHEL 8.6 E4S | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 E4S | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:19634 |
| RHEL 8.6 AUS | buildah +1 | 1:1.26.11-1.module+el8.6.0+24306+fc1f97ae | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | cockpit-podman | 49.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | conmon | 2:2.1.4-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | container-selinux | 2:2.189.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | containernetworking-plugins | 1:1.1.1-5.module+el8.6.0+24209+25a14987.1 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | containers-common | 2:1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | crit +4 | 3.15-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | crun | 1.14.3-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | delve | 1.7.2-1.module+el8.6.0+12972+ebab5911 | RHSA-2026:2334 |
| RHEL 8.6 AUS | fuse-overlayfs | 1.9-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | git-lfs | 2.13.3-3.el8_6.6 | RHSA-2026:3972 |
| RHEL 8.6 AUS | go-toolset | 1.17.13-2.module+el8.6.0+22782+bd95fb4c | RHSA-2026:2334 |
| RHEL 8.6 AUS | golang +6 | 1.17.13-12.module+el8.6.0+23956+e8c5263b | RHSA-2026:2334 |
| RHEL 8.6 AUS | grafana | 7.5.11-9.el8_6 | RHSA-2026:3880 |
| RHEL 8.6 AUS | grafana-pcp | 3.2.0-3.el8_6 | RHSA-2026:3812 |
| RHEL 8.6 AUS | libslirp +1 | 4.4.0-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | netavark +1 | 2:1.0.1-40.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | oci-seccomp-bpf-hook | 1.2.6-1.module+el8.6.0+24215+d8cb7679.1 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | osbuild-composer +3 | 46.3-6.el8_6 | RHSA-2026:5853 |
| RHEL 8.6 AUS | podman +6 | 2:4.2.0-8.module+el8.6.0+24209+25a14987.5 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | python-podman +1 | 4.0.1-1.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | rhc | 1:0.2.1-13.el8_6 | RHSA-2026:5031 |
| RHEL 8.6 AUS | runc | 1:1.2.9-1.module+el8.6.0+24209+25a14987.1 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | skopeo +1 | 2:1.9.5-1.module+el8.6.0+24224+8a7523f7.1 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | slirp4netns | 1.2.0-3.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | toolbox +1 | 0.0.99.3-0.7.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.6 AUS | udica | 0.2.6-5.module+el8.6.0+24209+25a14987 | RHSA-2026:51288, RHSA-2026:19634 |
| RHEL 8.4 EUS Long Life | delve | 1.5.0-2.module+el8.4.0+8864+58b0fcdb | RHSA-2026:2217 |
| RHEL 8.4 EUS Long Life | git-lfs | 2.13.3-3.el8_4.4 | RHSA-2026:3973 |
| RHEL 8.4 EUS Long Life | go-toolset | 1.15.14-3.module+el8.4.0+22765+91da4d3f | RHSA-2026:2217 |
| RHEL 8.4 EUS Long Life | golang +6 | 1.15.14-18.module+el8.4.0+23967+1519124e | RHSA-2026:2217 |
| RHEL 8.4 EUS Long Life | grafana | 7.3.6-12.el8_4 | RHSA-2026:3879 |
| RHEL 8.4 EUS Long Life | grafana-pcp | 3.0.2-3.el8_4 | RHSA-2026:3815 |
| RHEL 8.4 EUS Long Life | osbuild-composer +2 | 28.7-5.el8_4 | RHSA-2026:5461 |
| RHEL 8.4 EUS Long Life | rhc | 1:0.2.0-5.el8_4 | RHSA-2026:5030 |
| RHEL 8.4 AUS | delve | 1.5.0-2.module+el8.4.0+8864+58b0fcdb | RHSA-2026:2217 |
| RHEL 8.4 AUS | git-lfs | 2.13.3-3.el8_4.4 | RHSA-2026:3973 |
| RHEL 8.4 AUS | go-toolset | 1.15.14-3.module+el8.4.0+22765+91da4d3f | RHSA-2026:2217 |
| RHEL 8.4 AUS | golang +6 | 1.15.14-18.module+el8.4.0+23967+1519124e | RHSA-2026:2217 |
| RHEL 8.4 AUS | grafana | 7.3.6-12.el8_4 | RHSA-2026:3879 |
| RHEL 8.4 AUS | grafana-pcp | 3.0.2-3.el8_4 | RHSA-2026:3815 |
| RHEL 8.4 AUS | osbuild-composer +2 | 28.7-5.el8_4 | RHSA-2026:5461 |
| RHEL 8.4 AUS | rhc | 1:0.2.0-5.el8_4 | RHSA-2026:5030 |
| RHEL 8.2 AUS | delve | 1.3.2-3.module+el8.2.0+5581+896cb53e | RHSA-2026:2223 |
| RHEL 8.2 AUS | go-toolset | 1.13.15-1.module+el8.2.0+7662+fa98b974 | RHSA-2026:2223 |
| RHEL 8.2 AUS | golang +6 | 1.13.15-13.module+el8.2.0+23958+12140f3a | RHSA-2026:2223 |
| RHEL 8.2 AUS | grafana +12 | 6.3.6-10.el8_2 | RHSA-2026:3841 |
| RHEL 7 ELS | rhc | 1:0.2.4-3.el7_9 | RHSA-2026:7676 |
| Red Hat Openshift Ironic 4 | python-pyasn1 +3 | 0.5.1-4.el9 | RHSA-2026:17595, RHSA-2026:17446 |
| Red Hat OpenStack 18 | golang-github-openstack-k8s-operators-os-diff | 0.1.1-18.0.20260602234716.a95ae05.el9ost | RHSA-2026:39810 |
| Red Hat OpenStack 17 | etcd | 3.4.26-9.5.el9ost | RHSA-2026:28047 |
| Red Hat OpenStack 16 | collectd-sensubility | 0.2.1-1.1.el8ost | RHSA-2026:54757 |
| Red Hat OpenStack 16 | erlang +20 | 23.3.4.18-2.el8ost | RHSA-2026:54757 |
| Red Hat OpenStack 16 | etcd | 3.3.23-22.el8ost | RHSA-2026:54757 |
| Red Hat OpenStack 16 | python-oslo-messaging +1 | 10.2.4-2.20260710155333.82281a0.el8ost | RHSA-2026:54757 |
| Red Hat OpenStack 16 | python-pyasn1 +2 | 0.4.6-4.el8ost | RHSA-2026:54757 |
| Red Hat OpenStack 16 | python3-glance +1 | 1:19.0.5-2.20260512165254.eb6ad61.el8ost | RHSA-2026:54757 |
| Red Hat OpenStack 16 | python3-keystone +1 | 1:16.0.3-2.20260616134936.9d699a7.el8ost | RHSA-2026:54757 |
| Red Hat OpenStack 16 | python3-nova +11 | 1:20.6.2-2.20260317135026.8a24acd.el8ost | RHSA-2026:54757 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1:1.4.0-6.rhaos4.12.el8 | RHSA-2026:28961, RHSA-2026:28886, RHSA-2026:26541 |
| Red Hat OpenShift 4 | ose-aws-ecr-image-credential-provider | 4.15.0-202606040938.p2.gfd77d92.assembly.stream.el8 | RHSA-2026:28961 |
| Red Hat OpenShift 4 | ose-azure-acr-image-credential-provider | 4.15.0-202606040938.p2.g0d799a2.assembly.stream.el8 | RHSA-2026:28961 |
| Red Hat OpenShift 4 | ose-gcp-gcr-image-credential-provider | 4.15.0-202606040938.p2.gfc50272.assembly.stream.el8 | RHSA-2026:28961 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-19.rhaos4.13.el8 | RHSA-2026:28886, RHSA-2026:26541, RHSA-2026:17595 |
| Red Hat OpenShift 4 | runc | 4:1.2.9-2.rhaos4.16.el8 | RHSA-2026:5866, RHSA-2026:4464 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.9.4-8.rhaos4.12.el8 | RHSA-2026:28961, RHSA-2026:28886, RHSA-2026:26541 |
| Red Hat Hardened Images 1 | golang1.25 +6 | 1.25.9-1.hum1 | RHSA-2026:7385 |
| Red Hat Hardened Images 1 | golang1.26 +6 | 1.26.2-1.hum1 | RHSA-2026:7291 |
| Red Hat Edge Manager 1 | flightctl +3 | 1.0.3-1.el9em | RHSA-2026:41019, RHSA-2026:36796 |
| Red Hat Ceph Storage 7 | ceph +25 | 2:18.2.1-381.el8cp | RHSA-2026:2769 |
| Red Hat Ceph Storage 7 | cephadm | 2:18.2.1-381.el9cp | RHSA-2026:2769 |
| Red Hat Ansible Automation Platform Inside 2 | receptor | 1.6.3-1.el8ap | RHSA-2026:1506, RHSA-2026:1497, RHSA-2026:1249 |
| Red Hat Ansible Automation Platform Developer 2 | python3.11-django | 4.2.27-1.el8ap | RHSA-2026:1506, RHSA-2026:1249 |
| Red Hat Ansible Automation Platform Developer 2 | python3.11-urllib3 | 2.6.3-1.el8ap | RHSA-2026:1506, RHSA-2026:1249 |
| Red Hat Ansible Automation Platform Developer 2 | receptor | 1.6.3-1.el8ap | RHSA-2026:1506, RHSA-2026:1497, RHSA-2026:1249 |
| Red Hat Ansible Automation Platform 2 | automation-controller-venv-tower | 4.5.30-1.el8ap | RHSA-2026:1506, RHSA-2026:1497, RHSA-2026:1249 |
| Red Hat Ansible Automation Platform 2 | python3.11-django | 4.2.27-1.el8ap | RHSA-2026:1506, RHSA-2026:1249 |
| Red Hat Ansible Automation Platform 2 | python3.11-protobuf | 4.25.8-1.el9ap | RHSA-2026:1249 |
| Red Hat Ansible Automation Platform 2 | python3.11-urllib3 | 2.6.3-1.el8ap | RHSA-2026:1506, RHSA-2026:1249 |
| Red Hat Ansible Automation Platform 2 | receptor | 1.6.3-1.el8ap | RHSA-2026:1506, RHSA-2026:1497, RHSA-2026:1249 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | buildah +1 | 2:1.41.8-2.el10_1 | ALSA-2026:3297 |
| AlmaLinux 10 | delve | 1.25.2-2.el10_1 | ALSA-2026:19013, ALSA-2026:3864 |
| AlmaLinux 10 | git-lfs | 3.6.1-7.el10_1 | ALSA-2026:4164 |
| AlmaLinux 10 | golang-src +3 | 1.25.5-1.el10_1.alma.1 | ALSA-2026:0922 |
| AlmaLinux 10 | grafana +1 | 10.2.6-22.el10_1 | ALSA-2026:2914 |
| AlmaLinux 10 | grafana-pcp | 5.3.0-2.el10_1 | ALSA-2026:3035 |
| AlmaLinux 10 | image-builder | 31-4.el10_1 | ALSA-2026:3840 |
| AlmaLinux 10 | ipp-usb | 0.9.27-4.el10_1 | ALSA-2026:1715 |
| AlmaLinux 10 | opentelemetry-collector | 0.135.0-3.el10_1 | ALSA-2026:1907 |
| AlmaLinux 10 | osbuild-composer +2 | 149-5.el10_1.alma.3 | ALSA-2026:3752 |
| AlmaLinux 10 | podman-docker | 7:5.6.0-12.el10_1.alma.1 | ALSA-2026:3336 |
| AlmaLinux 10 | skopeo +1 | 2:1.20.0-3.el10_1 | ALSA-2026:3343 |
| AlmaLinux 10 | yggdrasil +1 | 0.4.8-3.el10_1 | ALSA-2026:5146 |
| AlmaLinux 9 | buildah +1 | 2:1.41.8-2.el9_7 | ALSA-2026:3298 |
| AlmaLinux 9 | containernetworking-plugins | 1:1.7.1-3.el9_7 | ALSA-2026:18913, ALSA-2026:3341 |
| AlmaLinux 9 | git-lfs | 3.6.1-7.el9_7 | ALSA-2026:3928 |
| AlmaLinux 9 | golang +7 | 1.25.5-2.el9_7 | ALSA-2026:0923 |
| AlmaLinux 9 | grafana +1 | 10.2.6-18.el9_7 | ALSA-2026:2920 |
| AlmaLinux 9 | grafana-pcp | 5.1.1-12.el9_7 | ALSA-2026:3040 |
| AlmaLinux 9 | image-builder | 31-3.el9_7 | ALSA-2026:3839 |
| AlmaLinux 9 | opentelemetry-collector | 0.135.0-3.el9_7 | ALSA-2026:1908 |
| AlmaLinux 9 | osbuild-composer +2 | 149-4.el9_7.alma.3 | ALSA-2026:3753 |
| AlmaLinux 9 | podman +4 | 6:5.6.0-14.el9_7 | ALSA-2026:3337 |
| AlmaLinux 9 | runc | 4:1.4.0-2.el9_7 | ALSA-2026:3291 |
| AlmaLinux 9 | skopeo +1 | 2:1.20.0-3.el9_7 | ALSA-2026:3340 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:3428 |
| AlmaLinux 8 | buildah +1 | 2:1.33.14-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:3428 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:3428 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:3428 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-7.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:3428 |
| AlmaLinux 8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:3428 |
| AlmaLinux 8 | criu +1 | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:3428 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:3428 |
| AlmaLinux 8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:3428 |
| AlmaLinux 8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:3428 |
| AlmaLinux 8 | delve | 1.25.2-1.module_el8.10.0+4074+24330916 | ALSA-2026:0921 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:3428 |
| AlmaLinux 8 | git-lfs | 3.4.1-7.el8_10 | ALSA-2026:2323 |
| AlmaLinux 8 | golang +7 | 1.25.5-1.module_el8.10.0+4107+b32a33ce | ALSA-2026:0921 |
| AlmaLinux 8 | grafana +1 | 9.2.10-27.el8_10 | ALSA-2026:1344 |
| AlmaLinux 8 | grafana-pcp | 5.1.1-11.el8_10 | ALSA-2026:1518 |
| AlmaLinux 8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:3428 |
| AlmaLinux 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:3428 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:3428 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:3428 |
| AlmaLinux 8 | osbuild-composer +2 | 101.4-3.el8_10.alma.1 | ALSA-2026:2124 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-28.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:3428 |
| AlmaLinux 8 | runc | 4:1.2.9-3.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.5-6.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:3428 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:3428 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:3428 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | buildah | 2:1.41.8-2.el10_1 | RLSA-2026:3297 |
| Rocky Linux 10 | delve | 1.25.2-2.el10_1 | RLSA-2026:19013, RLSA-2026:3864 |
| Rocky Linux 10 | git-lfs | 3.6.1-7.el10_1 | RLSA-2026:4164 |
| Rocky Linux 10 | golang | 1.25.5-1.el10_1 | RLSA-2026:0922 |
| Rocky Linux 10 | golang-github-openprinting-ipp-usb | 0.9.27-4.el10_1 | RLSA-2026:1715 |
| Rocky Linux 10 | grafana | 10.2.6-22.el10_1 | RLSA-2026:2914 |
| Rocky Linux 10 | grafana-pcp | 5.3.0-2.el10_1 | RLSA-2026:3035 |
| Rocky Linux 10 | image-builder | 31-4.el10_1.rocky.0.2 | RLSA-2026:3840 |
| Rocky Linux 10 | osbuild-composer | 149-5.el10_1.rocky.0.8 | RLSA-2026:3752 |
| Rocky Linux 10 | podman | 7:5.6.0-12.el10_1 | RLSA-2026:3336 |
| Rocky Linux 10 | skopeo | 2:1.20.0-3.el10_1 | RLSA-2026:3343 |
| Rocky Linux 10 | yggdrasil | 0.4.8-3.el10_1 | RLSA-2026:5146 |
| Rocky Linux 9 | buildah | 2:1.41.8-2.el9_7 | RLSA-2026:3298 |
| Rocky Linux 9 | containernetworking-plugins | 1:1.7.1-3.el9_7 | RLSA-2026:18913, RLSA-2026:3341 |
| Rocky Linux 9 | git-lfs | 3.6.1-7.el9_7 | RLSA-2026:3928 |
| Rocky Linux 9 | golang | 1.25.5-2.el9_7 | RLSA-2026:0923 |
| Rocky Linux 9 | grafana | 10.2.6-18.el9_7 | RLSA-2026:2920 |
| Rocky Linux 9 | grafana-pcp | 5.1.1-12.el9_7 | RLSA-2026:3040 |
| Rocky Linux 9 | image-builder | 31-3.el9_7.rocky.0.2 | RLSA-2026:3839 |
| Rocky Linux 9 | opentelemetry-collector | 0.135.0-3.el9 | RLSA-2026:1908 |
| Rocky Linux 9 | osbuild-composer | 149-4.el9_7.rocky.0.8 | RLSA-2026:3753 |
| Rocky Linux 9 | podman | 6:5.6.0-14.el9_7 | RLSA-2026:3337 |
| Rocky Linux 9 | runc | 4:1.4.0-2.el9_7 | RLSA-2026:3291 |
| Rocky Linux 9 | skopeo | 2:1.20.0-3.el9_7 | RLSA-2026:3340 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:3428 |
| Rocky Linux 8 | buildah | 2:1.33.14-2.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-7.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:3428 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | delve | 1.25.2-1.module+el8.10.0+40035+ee0a7047 | RLSA-2026:0921 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | git-lfs | 3.4.1-7.el8_10 | RLSA-2026:2323 |
| Rocky Linux 8 | grafana | 9.2.10-27.el8_10 | RLSA-2026:1344 |
| Rocky Linux 8 | grafana-pcp | 5.1.1-11.el8_10 | RLSA-2026:1518 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | osbuild-composer | 101.4-3.el8_10.rocky.0.6 | RLSA-2026:2124 |
| Rocky Linux 8 | podman | 4:4.9.4-28.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | python-podman | 4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2026:3428 |
| Rocky Linux 8 | runc | 4:1.2.9-3.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | skopeo | 2:1.14.5-6.module+el8.10.0+40087+cfe9c127 | RLSA-2026:3428 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
| Rocky Linux 8 | toolbox | 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 | RLSA-2026:3428 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2026:3428 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES 15 SP7 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES 15 SP7 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLES 15 SP7 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES 15 SP6 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES 15 SP6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES 15 SP6 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLES 15 SP6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES 15 SP6 | govulncheck-vulndb | 0.0.20251209T172047-150000.1.127.1 | SUSE-SU-2025:4395-1 |
| SLES 15 SP5 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES 15 SP5 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLES 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES 15 SP4 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES 15 SP4 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLES 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES 15 SP3 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES 15 SP3 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | go1.24 | 1.24.11-160000.1.1 | SUSE-SU-2025:21193-1 |
| SLES for SAP 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | SUSE-SU-2026:20629-1 |
| SLES for SAP 16.0 | go1.25 | 1.25.5-160000.1.1 | SUSE-SU-2025:21192-1 |
| SLES for SAP 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | SUSE-SU-2026:20623-1 |
| SLES for SAP 15 SP6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| SLES for SAP 15 SP6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| SLES for SAP 15 SP5 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES for SAP 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES for SAP 15 SP5 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLES for SAP 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES for SAP 15 SP4 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES for SAP 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLES for SAP 15 SP4 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLES for SAP 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLES for SAP 15 SP3 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLES for SAP 15 SP3 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLES 16.0 | go1.24 | 1.24.11-160000.1.1 | SUSE-SU-2025:21193-1 |
| SLES 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | SUSE-SU-2026:20629-1 |
| SLES 16.0 | go1.25 | 1.25.5-160000.1.1 | SUSE-SU-2025:21192-1 |
| SLES 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | SUSE-SU-2026:20623-1 |
| SLE HPC 15 SP5 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLE HPC 15 SP5 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLE HPC 15 SP5 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLE HPC 15 SP5 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLE HPC 15 SP4 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLE HPC 15 SP4 | go1.24-openssl | 1.24.12-150000.1.18.1 | SUSE-SU-2026:0296-1 |
| SLE HPC 15 SP4 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SLE HPC 15 SP4 | go1.25-openssl | 1.25.6-150000.1.9.1 | SUSE-SU-2026:0297-1 |
| SLE HPC 15 SP3 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SLE HPC 15 SP3 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| SUSE Enterprise Storage 7.1 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| SUSE Enterprise Storage 7.1 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | buildpacks-cli | 0.39.1-1.1 | openSUSE-SU-2025:15817-1 |
| openSUSE Tumbleweed | cf-cli | 8.18.3+git.0.83ce51d9c-1.1 | openSUSE-SU-2026:10688-1 |
| openSUSE Tumbleweed | digger-cli | 0.6.143-1.1 | openSUSE-SU-2026:10260-1 |
| openSUSE Tumbleweed | go1.24 | 1.24.11-1.1 | openSUSE-SU-2025:15796-1 |
| openSUSE Tumbleweed | go1.25 | 1.25.5-1.1 | openSUSE-SU-2025:15795-1 |
| openSUSE Tumbleweed | k6 | 1.5.0-1.1 | openSUSE-SU-2026:10030-1 |
| openSUSE Tumbleweed | regclient | 0.11.1-1.1 | openSUSE-SU-2025:15807-1 |
| openSUSE Leap 16.0 | go1.24 | 1.24.11-160000.1.1 | openSUSE-SU-2025:20158-1 |
| openSUSE Leap 16.0 | go1.24-openssl | 1.24.13-160000.1.1 | openSUSE-SU-2026:20308-1 |
| openSUSE Leap 16.0 | go1.25 | 1.25.5-160000.1.1 | openSUSE-SU-2025:20157-1 |
| openSUSE Leap 16.0 | go1.25-openssl | 1.25.7-160000.1.1 | openSUSE-SU-2026:20301-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 | openSUSE-SU-2026:21483-1 |
| openSUSE Leap 15.6 | go1.24 | 1.24.11-150000.1.50.1 | SUSE-SU-2025:4337-1 |
| openSUSE Leap 15.6 | go1.24-openssl | 1.24.12-150600.13.15.1 | SUSE-SU-2026:0308-1 |
| openSUSE Leap 15.6 | go1.25 | 1.25.5-150000.1.23.1 | SUSE-SU-2025:4336-1 |
| openSUSE Leap 15.6 | go1.25-openssl | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20251209T172047-150000.1.127.1 | SUSE-SU-2025:4395-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | docker | 29.1.2-r0 | — |
| Alpine v3.24 | go | 1.25.5-r0 | — |
| Alpine v3.24 | rclone | 1.72.1-r0 | — |
| Alpine v3.23 | docker | 29.1.2-r0 | — |
| Alpine v3.23 | go | 1.25.5-r0 | — |
| Alpine v3.23 | rclone | 1.72.1-r0 | — |
| Alpine v3.22 | go | 1.24.11-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-cloudwatch-agent | 1.300062.1-1.amzn2023 | ALAS2023-2025-1358 |
| Amazon Linux 2023 | amazon-ecr-credential-helper | 0.11.0-2.amzn2023 | ALAS2023-2025-1327 |
| Amazon Linux 2023 | amazon-ssm-agent | 3.3.3572.0-1.amzn2023 | ALAS2023-2025-1359 |
| Amazon Linux 2023 | cni-plugins | 1.7.1-1.amzn2023.0.4 | ALAS2023-2025-1321 |
| Amazon Linux 2023 | docker | 25.0.14-1.amzn2023.0.1 | ALAS2023-2025-1340 |
| Amazon Linux 2023 | ecs-init | 1.101.1-1.amzn2023 | ALAS2023-2025-1341 |
| Amazon Linux 2023 | golang +6 | 1.24.11-1.amzn2023.0.1 | ALAS2023-2025-1323 |
| Amazon Linux 2023 | golang-github-burntsushi-toml +1 | 1.5.0-1.amzn2023.0.1 | ALAS2023-2026-1751 |
| Amazon Linux 2023 | golang-github-burntsushi-toml-test +1 | 0.2.0-8.amzn2023.0.3 | ALAS2023-2026-1750 |
| Amazon Linux 2023 | golang-github-cpuguy83-md2man +2 | 2.0.2-24.amzn2023.0.7 | ALAS2023-2026-1749 |
| Amazon Linux 2023 | libcap +3 | 2.73-1.amzn2023.0.5 | ALAS2023-2025-1322 |
| Amazon Linux 2023 | nerdctl +2 | 2.1.5-1.amzn2023.0.3 | ALAS2023-2025-1333, ALAS2023-2025-1326 |
| Amazon Linux 2023 | oci-add-hooks | 0-0.1.20200504git268e3bb.amzn2023.0.7 | ALAS2023-2025-1335 |
| Amazon Linux 2023 | runc | 1.3.4-1.amzn2023.0.1 | ALAS2023-2025-1328 |
| Amazon Linux 2023 | runfinch-finch | 1.10.0-1.amzn2023.0.6 | ALAS2023-2025-1336 |
| Amazon Linux 2023 | soci-snapshotter | 0.12.0-1.amzn2023.0.2 | ALAS2023-2025-1334 |
| Amazon Linux 2 | amazon-cloudwatch-agent | 1.300062.1-1.amzn2 | ALAS2-2025-3120 |
| Amazon Linux 2 | cni-plugins | 1.7.1-1.amzn2.0.4 | ALAS2-2025-3098 |
| Amazon Linux 2 | cri-tools | 1.32.0-1.amzn2.0.3 | ALAS2-2025-3097 |
| Amazon Linux 2 | golang +6 | 1.24.11-1.amzn2.0.1 | ALAS2-2025-3105 |
| Amazon Linux 2 | golang-github-cpuguy83-go-md2man | 1.0.4-4.amzn2.0.3 | ALAS2-2025-3118 |
| Amazon Linux 2 | golist | 0.10.1-10.amzn2.0.9 | ALAS2-2025-3119 |
| Amazon Linux 2 | nerdctl | 2.1.5-1.amzn2.0.3 | ALAS2-2025-3100 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | 1.25.5-1 | — |
| Azure Linux 2 (CBL-Mariner) | msft-golang | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | buildah +1 | 2:1.41.8-2.0.1.el10_1 | ELSA-2026-3297 |
| Oracle Linux 10 | delve | 1.25.2-2.0.1.el10_1 | ELSA-2026-19013, ELSA-2026-3864 |
| Oracle Linux 10 | git-lfs | 3.6.1-7.el10_1 | ELSA-2026-4164 |
| Oracle Linux 10 | golang +7 | 1.25.5-1.el10_1 | ELSA-2026-0922 |
| Oracle Linux 10 | grafana +1 | 10.2.6-22.el10_1 | ELSA-2026-2914 |
| Oracle Linux 10 | grafana-pcp | 5.3.0-2.el10_1 | ELSA-2026-3035 |
| Oracle Linux 10 | image-builder | 45-1.0.3.el10 | ELSA-2026-3840 |
| Oracle Linux 10 | ipp-usb | 0.9.27-4.el10_1 | ELSA-2026-1715 |
| Oracle Linux 10 | osbuild-composer +2 | 149-5.0.1.el10_1 | ELSA-2026-3752 |
| Oracle Linux 10 | podman +3 | 7:5.6.0-12.0.1.el10_1 | ELSA-2026-3336 |
| Oracle Linux 10 | skopeo +1 | 2:1.20.0-3.el10_1 | ELSA-2026-3343 |
| Oracle Linux 10 | yggdrasil +1 | 0.4.8-3.el10_1 | ELSA-2026-5146 |
| Oracle Linux 9 | buildah +1 | 2:1.41.8-2.0.1.el9_7 | ELSA-2026-3298 |
| Oracle Linux 9 | containernetworking-plugins | 1:1.7.1-3.el9_7 | ELSA-2026-18913, ELSA-2026-3341 |
| Oracle Linux 9 | git-lfs | 3.6.1-7.el9_7 | ELSA-2026-3928 |
| Oracle Linux 9 | golang +7 | 1.25.5-2.el9_7 | ELSA-2026-0923 |
| Oracle Linux 9 | grafana +1 | 10.2.6-18.el9_7 | ELSA-2026-2920 |
| Oracle Linux 9 | grafana-pcp | 5.1.1-12.el9_7 | ELSA-2026-3040 |
| Oracle Linux 9 | image-builder | 45-1.0.3.el9_7 | ELSA-2026-3839 |
| Oracle Linux 9 | osbuild-composer +2 | 149-4.0.1.el9_7 | ELSA-2026-3753 |
| Oracle Linux 9 | podman +4 | 6:5.6.0-14.0.1.el9_7 | ELSA-2026-3337 |
| Oracle Linux 9 | runc | 4:1.4.0-2.el9_7 | ELSA-2026-3291 |
| Oracle Linux 9 | skopeo +1 | 2:1.20.0-3.el9_7 | ELSA-2026-3340 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | buildah +1 | 2:1.33.14-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-6.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | containers-common | 2:1-82.0.1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | crit +4 | 3.18-5.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | delve | 1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd | ELSA-2026-0921 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | git-lfs | 3.4.1-7.el8_10 | ELSA-2026-2323 |
| Oracle Linux 8 | golang +7 | 1.25.5-1.module+el8.10.0+90772+95994ed8 | ELSA-2026-0921 |
| Oracle Linux 8 | grafana +1 | 9.2.10-27.0.1.el8_10 | ELSA-2026-1344 |
| Oracle Linux 8 | grafana-pcp | 5.1.1-11.el8_10 | ELSA-2026-1518 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | osbuild-composer +2 | 101.4-3.0.1.el8_10 | ELSA-2026-2124 |
| Oracle Linux 8 | podman +6 | 4:4.9.4-27.0.1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | python3-podman | 4.9.0-3.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | runc | 4:1.2.9-3.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.5-6.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
| Oracle Linux 8 | udica | 0.2.6-21.module+el8.10.0+90820+1c0b9746 | ELSA-2026-3428 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r39 | — |
| Wolfi rolling | actions-runner-controller +3 | 0.13.0-r3 | — |
| Wolfi rolling | apache-exporter | 1.0.11-r2 | — |
| Wolfi rolling | apisix-ingress-controller +2 | 1.8.4-r6 | — |
| Wolfi rolling | argocd-image-updater +1 | 1.0.1-r2 | — |
| Wolfi rolling | aws-flb-cloudwatch | 1.9.4-r21 | — |
| Wolfi rolling | aws-load-balancer-controller +1 | 2.16.0-r2 | — |
| Wolfi rolling | aws-nuke | 3.62.0-r1 | — |
| Wolfi rolling | aws-privateca-issuer +1 | 1.7.1-r1 | — |
| Wolfi rolling | boring-registry | 0.16.6-r4 | — |
| Wolfi rolling | buildctl +1 | 0.26.2-r1 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.3-r3 | — |
| Wolfi rolling | chisel +1 | 1.11.3-r3 | — |
| Wolfi rolling | cis-operator-1.4 | 1.4.5-r1 | — |
| Wolfi rolling | cloud-provider-vsphere | 1.34.0-r4 | — |
| Wolfi rolling | crossplane-provider-keycloak | 2.12.0-r0 | — |
| Wolfi rolling | ctop | 0.7.7-r29 | — |
| Wolfi rolling | custom-pod-autoscaler +1 | 2.12.2-r4 | — |
| Wolfi rolling | dask-gateway +1 | 2025.4.0-r6 | — |
| Wolfi rolling | db-operator +1 | 2.16.0-r3 | — |
| Wolfi rolling | dfc | 0.9.5-r2 | — |
| Wolfi rolling | dgraph | 25.0.0-r3 | — |
| Wolfi rolling | dive | 0.13.1-r10 | — |
| Wolfi rolling | docker-credential-acr-env | 0.7.0-r27 | — |
| Wolfi rolling | etcd-3.6 | 3.6.6-r2 | — |
| Wolfi rolling | falco-exporter | 0.8.7-r11 | — |
| Wolfi rolling | falco-no-driver | 0.43.0-r1 | — |
| Wolfi rolling | flannel-cni-plugin +1 | 1.8.0.2-r3 | — |
| Wolfi rolling | flux-image-reflector-controller +1 | 1.0.4-r3 | — |
| Wolfi rolling | frp | 0.65.0-r4 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 2.1.7-r1 | — |
| Wolfi rolling | gitaly-18.6 +8 | 18.6.1-r1 | — |
| Wolfi rolling | gitea +1 | 1.25.2-r1 | — |
| Wolfi rolling | github-mcp-server | 0.24.1-r0 | — |
| Wolfi rolling | gitleaks | 8.30.0-r1 | — |
| Wolfi rolling | gitness | 3.3.0-r4 | — |
| Wolfi rolling | gitsign +2 | 0.13.0-r7 | — |
| Wolfi rolling | gke-gcloud-auth-plugin | 0.1.0-r11 | — |
| Wolfi rolling | glab | 1.78.3-r1 | — |
| Wolfi rolling | glow | 2.1.1-r8 | — |
| Wolfi rolling | go-1.20 +2 | No fix yet | — |
| Wolfi rolling | go-discover | 0_git20251208-r0 | — |
| Wolfi rolling | go-jsonnet | 0.21.0-r2 | — |
| Wolfi rolling | go-licenses | 2.0.1-r2 | — |
| Wolfi rolling | go-md2man +1 | 2.0.7-r5 | — |
| Wolfi rolling | gobump | 0.9.3-r3 | — |
| Wolfi rolling | gobuster | 3.8.2-r4 | — |
| Wolfi rolling | gogatekeeper +1 | 4.3.0-r3 | — |
| Wolfi rolling | gomplate | 4.3.3-r5 | — |
| Wolfi rolling | gonew | 0.39.0-r1 | — |
| Wolfi rolling | gops | 0.3.28-r22 | — |
| Wolfi rolling | goreleaser | 2.13.0-r1 | — |
| Wolfi rolling | gostatsd | 28.3.0-r20 | — |
| Wolfi rolling | gotestsum | 1.13.0-r2 | — |
| Wolfi rolling | govulncheck | 1.1.4-r5 | — |
| Wolfi rolling | gptscript | 0.9.7-r2 | — |
| Wolfi rolling | grafana-12.3 +1 | 12.3.0-r2 | — |
| Wolfi rolling | grafana-agent-operator | 0.44.6-r1 | — |
| Wolfi rolling | grafana-alloy | 1.12.0-r1 | — |
| Wolfi rolling | grafana-image-renderer | 5.0.11-r1 | — |
| Wolfi rolling | grafana-mimir | 3.0.1-r1 | — |
| Wolfi rolling | grafana-operator +1 | 5.20.0-r3 | — |
| Wolfi rolling | grafana-rollout-operator | 0.32.0-r2 | — |
| Wolfi rolling | grpc-health-probe +1 | 0.4.42-r1 | — |
| Wolfi rolling | grpcurl | 1.9.3-r9 | — |
| Wolfi rolling | grype | 0.104.1-r1 | — |
| Wolfi rolling | guac +4 | 1.0.1-r3 | — |
| Wolfi rolling | harbor-2.14 +6 | 2.14.1-r1 | — |
| Wolfi rolling | harbor-cli | 0.0.15-r1 | — |
| Wolfi rolling | harbor-registry | 3.0.0-r13 | — |
| Wolfi rolling | harbor-scanner-trivy | 0.34.1-r1 | — |
| Wolfi rolling | hcloud | 1.57.0-r2 | — |
| Wolfi rolling | headlamp | 0.38.0-r2 | — |
| Wolfi rolling | hello-world-golang | 1.3-r15 | — |
| Wolfi rolling | helm-3 | 3.19.2-r2 | — |
| Wolfi rolling | helm-4 | 4.0.1-r2 | — |
| Wolfi rolling | helm-docs | 1.14.2-r17 | — |
| Wolfi rolling | helm-mapkubeapis | 0.6.1-r7 | — |
| Wolfi rolling | helm-operator +1 | 1.42.0-r3 | — |
| Wolfi rolling | helm-push | 0.10.4-r38 | — |
| Wolfi rolling | helm-set-status | 0.3.0-r8 | — |
| Wolfi rolling | hey | 0.1.4-r28 | — |
| Wolfi rolling | http-echo | 1.0.0-r19 | — |
| Wolfi rolling | hubble +1 | 1.18.3-r2 | — |
| Wolfi rolling | hubble-ui +1 | 0.13.3-r2 | — |
| Wolfi rolling | hugo +1 | 0.152.2-r2 | — |
| Wolfi rolling | hydra | 25.4.0-r2 | — |
| Wolfi rolling | incert | 0.5.0-r7 | — |
| Wolfi rolling | infinispan-operator +1 | 2.5.0-r2 | — |
| Wolfi rolling | influx | 2.7.5-r12 | — |
| Wolfi rolling | ip-masq-agent | 2.12.0-r15 | — |
| Wolfi rolling | ipfs-cluster +2 | 1.1.4-r10 | — |
| Wolfi rolling | jaeger-operator +1 | 1.65.0-r11 | — |
| Wolfi rolling | jitsucom-bulker +5 | 2.11.913-r2 | — |
| Wolfi rolling | juicefs-1.3 +1 | 1.3.1-r1 | — |
| Wolfi rolling | k3d +2 | 5.8.3-r20 | — |
| Wolfi rolling | k3s-1.32 +2 | 1.32.10.1-r1 | — |
| Wolfi rolling | k3s-static | 1.34.2.1-r1 | — |
| Wolfi rolling | k6 | 1.4.2-r1 | — |
| Wolfi rolling | k8s_gateway +1 | 1.6.1-r2 | — |
| Wolfi rolling | k8sgpt | 0.4.26-r3 | — |
| Wolfi rolling | k8sgpt-operator +1 | 0.2.24-r2 | — |
| Wolfi rolling | k8ssandra-client +1 | 0.8.4-r2 | — |
| Wolfi rolling | k8ssandra-operator +1 | 1.29.0-r2 | — |
| Wolfi rolling | k9s | 0.50.16-r5 | — |
| Wolfi rolling | kaf | 0.2.13-r7 | — |
| Wolfi rolling | kafka-proxy +1 | 0.4.3-r7 | — |
| Wolfi rolling | kafka_exporter | 1.9.0-r41 | — |
| Wolfi rolling | kapp | 0.65.0-r1 | — |
| Wolfi rolling | kapp-controller +1 | 0.59.1-r1 | — |
| Wolfi rolling | kargo +1 | 1.8.4-r1 | — |
| Wolfi rolling | karma | 0.122-r1 | — |
| Wolfi rolling | kbld | 0.47.0-r1 | — |
| Wolfi rolling | kiali | 2.19.0-r1 | — |
| Wolfi rolling | kind | 0.30.0-r3 | — |
| Wolfi rolling | kine | 0.14.6-r2 | — |
| Wolfi rolling | knative-client | 1.20.0-r1 | — |
| Wolfi rolling | ko | 0.18.0-r9 | — |
| Wolfi rolling | kor | 0.6.6-r1 | — |
| Wolfi rolling | kots +2 | 1.129.1-r0 | — |
| Wolfi rolling | kpt | 1.0.0_beta55-r14 | — |
| Wolfi rolling | kratos +1 | 2.9.1-r2 | — |
| Wolfi rolling | kserve +8 | 0.16.0-r2 | — |
| Wolfi rolling | kserve-rest-proxy +1 | 0.12.0-r12 | — |
| Wolfi rolling | ksops +1 | 4.4.0-r3 | — |
| Wolfi rolling | kube-bench +6 | 0.14.0-r2 | — |
| Wolfi rolling | kube-fluentd-operator +3 | 1.18.2-r52 | — |
| Wolfi rolling | kube-logging-operator +4 | 6.2.1-r1 | — |
| Wolfi rolling | kube-metrics-adapter | 0.2.6-r3 | — |
| Wolfi rolling | kube-rbac-proxy | 0.20.1-r1 | — |
| Wolfi rolling | kube-state-metrics +1 | 2.17.0-r3 | — |
| Wolfi rolling | kube-vip +1 | 1.0.2-r2 | — |
| Wolfi rolling | kube-vip-cloud-provider +1 | 0.0.12-r7 | — |
| Wolfi rolling | kubeadm-1.34 +28 | 1.34.2-r2 | — |
| Wolfi rolling | kubebuilder | 4.10.1-r1 | — |
| Wolfi rolling | kubecolor | 0.5.3-r1 | — |
| Wolfi rolling | kubectl-1.33 | 1.33.6-r2 | — |
| Wolfi rolling | kubeflow-access-management +5 | 1.10.0-r9 | — |
| Wolfi rolling | kubeflow-katib +17 | 0.19.0-r2 | — |
| Wolfi rolling | kubeflow-pipelines +11 | 2.15.0-r2 | — |
| Wolfi rolling | kubelet-csr-approver +1 | 1.2.12-r1 | — |
| Wolfi rolling | kuberay-operator +1 | 1.5.1-r1 | — |
| Wolfi rolling | kuberlr | 0.6.1-r5 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.17.0-r7 | — |
| Wolfi rolling | kubernetes-csi-driver-nfs +1 | 4.12.1-r3 | — |
| Wolfi rolling | kubernetes-csi-external-attacher +1 | 4.10.0-r3 | — |
| Wolfi rolling | kubernetes-csi-external-health-monitor +1 | 0.16.0-r3 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 6.1.0-r2 | — |
| Wolfi rolling | kubernetes-csi-external-resizer | 2.0.0-r2 | — |
| Wolfi rolling | kubernetes-dashboard | 7.14.0-r2 | — |
| Wolfi rolling | kubernetes-dashboard-api +1 | 1.14.0-r1 | — |
| Wolfi rolling | kubernetes-dashboard-metrics-scraper +1 | 1.2.2-r14 | — |
| Wolfi rolling | kubernetes-dashboard-web +1 | 1.7.0-r8 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.26.7-r2 | — |
| Wolfi rolling | kubernetes-event-exporter +1 | 1.7-r49 | — |
| Wolfi rolling | kubernetes-replicator | 2.12.2-r1 | — |
| Wolfi rolling | kubescape | 3.0.46-r0 | — |
| Wolfi rolling | kuma-2.12 +6 | 2.12.3-r2 | — |
| Wolfi rolling | mesosphere-vsphere-csi +2 | 3.5.0-r5 | — |
| Wolfi rolling | metrics-agent +1 | 2.14.7-r1 | — |
| Wolfi rolling | metrics-server +2 | 0.8.0-r6 | — |
| Wolfi rolling | migrate +1 | 4.19.1-r1 | — |
| Wolfi rolling | minio-object-browser +1 | 2.0.4-r3 | — |
| Wolfi rolling | minio-operator +1 | 7.1.1-r6 | — |
| Wolfi rolling | mkcert | 1.4.4-r19 | — |
| Wolfi rolling | mockery | 3.6.1-r1 | — |
| Wolfi rolling | mods | 1.8.1-r5 | — |
| Wolfi rolling | mongo-tools | 100.13.0-r5 | — |
| Wolfi rolling | mongodb-kubernetes-operator +5 | 0.13.0-r5 | — |
| Wolfi rolling | multus-cni +1 | 4.2.3-r1 | — |
| Wolfi rolling | nats | 0.3.0-r3 | — |
| Wolfi rolling | nats-server +1 | 2.12.2-r2 | — |
| Wolfi rolling | nats-top +1 | 0.6.3-r11 | — |
| Wolfi rolling | nerdctl | 2.2.0-r3 | — |
| Wolfi rolling | neuvector-dbgen +1 | 0_git20240423-r9 | — |
| Wolfi rolling | neuvector-sigstore-interface | 0_git20250629-r6 | — |
| Wolfi rolling | newrelic-fluent-bit-output +1 | 2.4.0-r6 | — |
| Wolfi rolling | newrelic-infra-operator | 0.26.1-r2 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.71.2-r0 | — |
| Wolfi rolling | newrelic-k8s-metadata-injection +1 | 1.39.0-r1 | — |
| Wolfi rolling | newrelic-nri-kube-events | 2.16.2-r1 | — |
| Wolfi rolling | newrelic-nri-statsd | 2.12.0-r1 | — |
| Wolfi rolling | newrelic-prometheus-configurator | 2.4.2-r1 | — |
| Wolfi rolling | nfpm | 2.44.0-r1 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r27 | — |
| Wolfi rolling | node-feature-discovery-0.18 | 0.18.3-r3 | — |
| Wolfi rolling | nodetaint | 0.0.4-r39 | — |
| Wolfi rolling | nova +1 | 3.11.9-r1 | — |
| Wolfi rolling | nri-apache +1 | 1.15.3-r1 | — |
| Wolfi rolling | nri-cassandra +2 | 2.16.0-r1 | — |
| Wolfi rolling | nri-consul +1 | 2.9.4-r1 | — |
| Wolfi rolling | nri-couchbase +1 | 2.8.3-r1 | — |
| Wolfi rolling | nri-discovery-kubernetes +1 | 1.13.6-r1 | — |
| Wolfi rolling | nri-elasticsearch +1 | 5.4.5-r1 | — |
| Wolfi rolling | nri-f5 +1 | 2.9.1-r1 | — |
| Wolfi rolling | nri-haproxy +1 | 3.2.3-r1 | — |
| Wolfi rolling | nri-jmx +2 | 3.11.1-r1 | — |
| Wolfi rolling | nri-kafka +2 | 3.15.0-r2 | — |
| Wolfi rolling | nri-kubernetes | 3.50.2-r1 | — |
| Wolfi rolling | nri-memcached +1 | 2.7.3-r1 | — |
| Wolfi rolling | nri-mongodb +2 | 2.10.0-r1 | — |
| Wolfi rolling | nri-mssql +1 | 2.25.1-r1 | — |
| Wolfi rolling | nri-mysql +10 | 1.18.1-r1 | — |
| Wolfi rolling | nri-nginx +1 | 3.6.3-r1 | — |
| Wolfi rolling | nri-postgresql +1 | 2.22.1-r1 | — |
| Wolfi rolling | nri-rabbitmq +1 | 2.15.3-r1 | — |
| Wolfi rolling | nri-redis +1 | 1.12.6-r1 | — |
| Wolfi rolling | nsc | 2.12.0-r3 | — |
| Wolfi rolling | nuclei | 3.6.0-r0 | — |
| Wolfi rolling | oauth2-proxy +1 | 7.13.0-r2 | — |
| Wolfi rolling | octo-sts +1 | 0.5.3-r4 | — |
| Wolfi rolling | op-geth +6 | 1.101603.5-r2 | — |
| Wolfi rolling | opa +1 | 1.11.0-r1 | — |
| Wolfi rolling | openbao +1 | 2.4.4-r1 | — |
| Wolfi rolling | openbao-k8s +1 | 1.4.0-r42 | — |
| Wolfi rolling | opencost +1 | 1.118.0-r2 | — |
| Wolfi rolling | opensearch-k8s-operator +1 | 2.8.0-r4 | — |
| Wolfi rolling | opentelemetry-collector +4 | 0.141.0-r1 | — |
| Wolfi rolling | oras | 1.3.0-r3 | — |
| Wolfi rolling | osv-scanner | 2.3.0-r1 | — |
| Wolfi rolling | otel-cli | 0.4.5-r8 | — |
| Wolfi rolling | paranoia | 0.5.0-r1 | — |
| Wolfi rolling | pdfcpu | 0.11.1-r2 | — |
| Wolfi rolling | percona-server-mongodb-operator +2 | 1.21.1-r2 | — |
| Wolfi rolling | petname | 2.11-r18 | — |
| Wolfi rolling | pg_timetable +1 | 6.2.0-r2 | — |
| Wolfi rolling | pg_user | 1.1.1-r3 | — |
| Wolfi rolling | pgpool2_exporter | 1.2.2-r8 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r18 | — |
| Wolfi rolling | pluto +1 | 5.22.6-r1 | — |
| Wolfi rolling | podcli +2 | 6.9.3-r1 | — |
| Wolfi rolling | podman +1 | 5.7.0-r2 | — |
| Wolfi rolling | polaris | 10.1.2-r1 | — |
| Wolfi rolling | policy-controller +1 | 0.13.1-r4 | — |
| Wolfi rolling | pombump | 0.0.16-r2 | — |
| Wolfi rolling | portieris +1 | 0.13.33-r2 | — |
| Wolfi rolling | postgres-operator +1 | 1.15.0-r3 | — |
| Wolfi rolling | prometheus-adapter +2 | 0.12.0-r18 | — |
| Wolfi rolling | prometheus-alertmanager +1 | 0.29.0-r2 | — |
| Wolfi rolling | prometheus-operator +3 | 0.87.0-r2 | — |
| Wolfi rolling | promxy | 0.0.93-r6 | — |
| Wolfi rolling | protoc-gen-go-grpc | 1.6.0-r1 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 1.16.0-r23 | — |
| Wolfi rolling | pulumi-language-dotnet | 3.94.1-r1 | — |
| Wolfi rolling | pulumi-language-yaml | 1.25.1-r1 | — |
| Wolfi rolling | pvc-autoresizer +5 | 0.18.0-r2 | — |
| Wolfi rolling | q | 0.19.11-r2 | — |
| Wolfi rolling | rabbitmq-cluster-operator +2 | 2.17.2-r2 | — |
| Wolfi rolling | rabbitmq-default-user-credential-updater +1 | 1.0.9-r1 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator +2 | 1.18.1-r2 | — |
| Wolfi rolling | rancher-helm-3 | 3.19.0-r4 | — |
| Wolfi rolling | rancher-loglevel | 0.1.6-r9 | — |
| Wolfi rolling | rancher-machine | 0.15.0.137-r2 | — |
| Wolfi rolling | rancher-system-agent | 0.3.14-r2 | — |
| Wolfi rolling | rancher-system-upgrade-controller | 0.18.0-r1 | — |
| Wolfi rolling | rancher-telemetry | 0.6.2-r7 | — |
| Wolfi rolling | ratify +10 | 1.4.0-r8 | — |
| Wolfi rolling | rclone +1 | 1.72.0-r1 | — |
| Wolfi rolling | redis-operator +1 | 0.22.2-r1 | — |
| Wolfi rolling | redka | 0.6.0-r5 | — |
| Wolfi rolling | regclient +6 | 0.11.1-r0 | — |
| Wolfi rolling | rekor +3 | 1.4.3-r2 | — |
| Wolfi rolling | restic +1 | 0.18.1-r3 | — |
| Wolfi rolling | rootlesskit +1 | 2.3.5-r8 | — |
| Wolfi rolling | runc +3 | 1.4.0-r1 | — |
| Wolfi rolling | s5cmd | 2.3.0-r8 | — |
| Wolfi rolling | sbom-convert | 0.0.7-r6 | — |
| Wolfi rolling | scorecard | 5.4.0-r2 | — |
| Wolfi rolling | sealed-secrets +3 | 0.33.1-r2 | — |
| Wolfi rolling | seaweedfs +2 | 4.02-r0 | — |
| Wolfi rolling | secrets-store-csi-driver +1 | 1.5.4-r3 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-aws | 2.1.1-r2 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.7.2-r2 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.10.0-r0 | — |
| Wolfi rolling | sftpgo | 2.7.0-r2 | — |
| Wolfi rolling | sftpgo-plugin-eventsearch | 1.0.21-r2 | — |
| Wolfi rolling | sftpgo-plugin-eventstore | 1.0.22-r2 | — |
| Wolfi rolling | sftpgo-plugin-geoipfilter | 1.0.11-r1 | — |
| Wolfi rolling | sftpgo-plugin-kms | 1.0.16-r2 | — |
| Wolfi rolling | sftpgo-plugin-pubsub | 1.0.15-r2 | — |
| Wolfi rolling | sigstore-scaffolding +13 | 0.7.31-r2 | — |
| Wolfi rolling | skaffold +1 | 2.17.0-r2 | — |
| Wolfi rolling | slsa-verifier | 2.7.1-r5 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r22 | — |
| Wolfi rolling | snyk-cli | 1.1301.0-r2 | — |
| Wolfi rolling | sonobuoy +1 | 0.57.3-r12 | — |
| Wolfi rolling | sops | 3.11.0-r3 | — |
| Wolfi rolling | spark-operator +1 | 2.4.0-r2 | — |
| Wolfi rolling | spegel +1 | 0.5.1-r3 | — |
| Wolfi rolling | spicedb +1 | 1.47.1-r1 | — |
| Wolfi rolling | spicedb-operator +1 | 1.21.0-r3 | — |
| Wolfi rolling | spiffe-helper +1 | 0.11.0-r1 | — |
| Wolfi rolling | spire-agent +2 | 1.13.3-r2 | — |
| Wolfi rolling | spire-controller-manager +1 | 0.6.3-r3 | — |
| Wolfi rolling | splunk-otel-collector +6 | 0.140.0-r1 | — |
| Wolfi rolling | spqr | 2.8.0-r2 | — |
| Wolfi rolling | sql_exporter | 0.18.5-r0 | — |
| Wolfi rolling | src | 6.10.0-r2 | — |
| Wolfi rolling | src-fingerprint | 0.19.0-r35 | — |
| Wolfi rolling | sriov-network-device-plugin +1 | 3.10.0-r3 | — |
| Wolfi rolling | stakater-reloader +1 | 1.4.10-r1 | — |
| Wolfi rolling | steampipe | 2.3.2-r3 | — |
| Wolfi rolling | stern | 1.33.1-r1 | — |
| Wolfi rolling | supercronic | 0.2.39-r1 | — |
| Wolfi rolling | syft | 1.38.0-r2 | — |
| Wolfi rolling | tailscale +1 | 1.92.0-r1 | — |
| Wolfi rolling | task | 3.45.5-r2 | — |
| Wolfi rolling | tdbg +8 | 1.29.1-r2 | — |
| Wolfi rolling | tekton-chains | 0.26.0-r2 | — |
| Wolfi rolling | temporal +3 | 1.5.1-r2 | — |
| Wolfi rolling | temporal-ui-server +1 | 2.43.3-r2 | — |
| Wolfi rolling | terraform +2 | 1.5.7-r36 | — |
| Wolfi rolling | terraform-docs | 0.20.0-r7 | — |
| Wolfi rolling | terraform-mcp-server | 0.3.3-r1 | — |
| Wolfi rolling | terraform-provider-azuread | 3.7.0-r2 | — |
| Wolfi rolling | terraform-provider-azurerm | 4.55.0-r0 | — |
| Wolfi rolling | terraform-provider-google | 7.12.0-r2 | — |
| Wolfi rolling | terraform-provider-random | 3.7.2-r6 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r9 | — |
| Wolfi rolling | terraform-provider-time | 0.13.1-r5 | — |
| Wolfi rolling | terraform-provider-tls | 4.1.0-r6 | — |
| Wolfi rolling | tfsec | 1.28.14-r9 | — |
| Wolfi rolling | thanos +1 | 0.40.1-r2 | — |
| Wolfi rolling | thanos-operator +1 | 0.3.7-r36 | — |
| Wolfi rolling | timestamp-authority +2 | 2.0.3-r0 | — |
| Wolfi rolling | tofu-controller +3 | 0.16.0_rc5-r8 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.24.11 · >= 1.25.0, < 1.25.5 | 1.24.11, 1.25.5 | GO-2025-4155 |
Advisories 50
- WID-SEC-2025-2724 Golang Go: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2026
- WID-SEC-2026-2189 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
- ALSA-2026:2914 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3864 Important: delve security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:5146 Important: yggdrasil security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3752 Important: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1907 Important: opentelemetry-collector security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3297 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1715 Important: golang-github-openprinting-ipp-usb security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3035 Important: grafana-pcp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:4164 Important: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3840 Important: image-builder security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3343 Important: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3928 Important: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3753 Important: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3337 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2920 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3040 Important: grafana-pcp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3291 Important: runc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3298 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3839 Important: image-builder security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1908 Important: opentelemetry-collector security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:0923 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3340 Important: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3341 Important: containernetworking-plugins security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:18913 Important: containernetworking-plugins security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3336 Important: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19013 Moderate: delve security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:0922 Important: golang security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1518 Important: grafana-pcp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3428 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:0921 Important: go-toolset:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2124 Important: osbuild-composer security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2323 Important: git-lfs security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1344 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:9108 Red Hat Security Advisory: gvisor-tap-vsock security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9109 Red Hat Security Advisory: containernetworking-plugins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9097 Red Hat Security Advisory: runc security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:9098 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7854 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7676 Red Hat Security Advisory: rhc security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7385 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7291 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5968 Red Hat Security Advisory: Satellite 6.18.4 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5866 Red Hat Security Advisory: OpenShift Container Platform 4.17.52 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5853 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5852 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5544 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5533 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:5461 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Oct 20, 2026