Skip to content
OpenAdvisories
Medium · 6.8 Public exploit CVE-2026-111943 BIT-golang-2026-111943EUVD-2026-106926GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383

Distrust compromised intermediate certificates in crypto/x509

Published Oct 21, 2026 · Updated Oct 30, 2026 · Assigned by Go

Vendor: Go standard library Product: crypto/x509 Package: actions-runner-controller Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-config-downloader Package: amazon-k8s-cni Package: amazon-k8s-cni-init Package: apisix-ingress-controller Package: argo-workflow-executor-3.7 Package: argo-workflows-3.7 Package: ascan Package: aws-flb-kinesis Package: az Package: azure-ipam Package: azurefile-csi-1.35 Package: biome Package: blob-csi-1.27 Package: blobfuse2 Package: bom Package: boring-registry Package: buck2 Package: buf Package: buildah Package: ca-certificates Package: ca-certificates-bundle Package: ca-certificates-bundle-ecs Package: ca-certificates-doc Package: ca-certificates-mozilla Package: calico-apiserver-3.31 Package: calico-apiserver-3.32 Package: calico-app-policy-3.31 Package: calico-app-policy-3.32 Package: calico-cni-3.31 Package: calico-cni-3.32 Package: calico-felix-3.31 Package: calico-felix-3.32 Package: calico-goldmane-3.31 Package: calico-goldmane-3.32 Package: calico-key-cert-provisioner-3.31 Package: calico-key-cert-provisioner-3.32 Package: calico-kube-controllers-3.31 Package: calico-kube-controllers-3.32 Package: calico-node-3.31 Package: calico-node-3.32 Package: calico-pod2daemon-3.31 Package: calico-pod2daemon-3.32 Package: calico-typha-client-3.31 Package: calico-typha-client-3.32 Package: calico-typhad-3.31 Package: calico-typhad-3.32 Package: calico-whisker-backend-3.31 Package: calico-whisker-backend-3.32 Package: calicoctl-3.31 Package: calicoctl-3.32 Package: cass-operator Package: cerbos Package: cerbosctl Package: cert-manager-csi-driver Package: cert-manager-webhook-pdns Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: chisel Package: cinc-auditor Package: cis-operator-1.4 Package: cleave Package: cloud-provider-aws-1.36-cloud-controller-manager Package: cloud-provider-aws-1.36-ecr-credential-provider Package: cloud-provider-vsphere Package: cloud-sql-proxy-2.21 Package: cluster-api-aws-controller Package: cluster-autoscaler-1.35 Package: codex Package: confluent-docker-utils Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: containerd-1 Package: containerd-2 Package: containerd-2.3 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-shim-runc-v2-2.3 Package: containerd-stress-1 Package: containerd-stress-2 Package: containerd-stress-2.3 Package: cri-tools Package: crictl Package: critest Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-sns Package: crossplane-provider-family-azure Package: ctr-1 Package: ctr-2 Package: ctr-2.3 Package: ctr-2.4 Package: dask-gateway-server Package: dask-kubernetes Package: datadog-agent-7.78-core-integrations Package: datadog-agent-7.79 Package: datadog-agent-7.79-core-integrations Package: datadog-agent-7.80 Package: datadog-agent-7.80-core-integrations Package: datadog-agent-7.80-fakeintake Package: datadog-agent-7.81 Package: datadog-agent-7.81-core-integrations Package: datadog-agent-nvml Package: datadog-cluster-agent-7.80 Package: datadog-operator Package: dataplaneapi Package: deno Package: descheduler Package: dive Package: docker Package: docker-cli-buildx Package: docker-cli-compose Package: dockerd-28 Package: eksctl Package: emissary Package: envoy-1.38 Package: etcd-3.6 Package: external-dns-0.21 Package: ferretdb Package: fluent-operator Package: flux-helm-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: gcc Package: ggshield Package: git-lfs Package: git-sync Package: go Package: go-1.25 Package: go-1.25-asm Package: go-1.25-cover Package: go-1.25-doc Package: go-discover Package: golang Package: golang-1.19 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golang-1.26 Package: golang-1.27 Package: golang-1.27 Package: google-cloud-sdk-core Package: goreleaser Package: gostatsd Package: grafana-12.4 Package: grafana-operator Package: grafana-pyroscope-2.0 Package: grafana-rollout-operator Package: grpc-1.68 Package: grpc-1.81 Package: health-checker-1.35 Package: helm-mapkubeapis Package: helm-push Package: helm-set-status Package: http-echo Package: httpie Package: hydra Package: istio-cni-1.30 Package: istio-install-cni-1.30 Package: istio-pilot-agent-1.30 Package: istio-pilot-discovery-1.30 Package: istioctl-1.30 Package: jaeger-2-anonymizer Package: jaeger-2-es-index-cleaner Package: jaeger-2-es-rollover Package: jaeger-2-esmapping-generator Package: jaeger-2-jaeger Package: jaeger-2-remote-storage Package: jaeger-2-tracegen Package: java-cacerts Package: jitsucom-bulker-bulker Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-syncctl Package: juicefs-1.3 Package: juicefs-csi-driver Package: jwt-tool Package: k8s_gateway Package: k8s-sidecar Package: k8ssandra-client Package: k8ssandra-operator Package: kaniko-ca-certificates-bundle Package: karma Package: kbld Package: kdash Package: kind Package: kine Package: knative-eventing-1.21-channel-controller Package: knative-eventing-1.21-channel-dispatcher Package: knative-eventing-1.21-controller Package: knative-eventing-1.21-filter Package: knative-eventing-1.21-ingress Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-mtchannel-broker Package: knative-eventing-1.21-webhook Package: ko Package: kpt Package: kserve-storage-controller Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-apiserver-1.37 Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.37 Package: kube-logging-operator-custom-runner Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-proxy-1.37 Package: kube-rbac-proxy Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-scheduler-1.37 Package: kube-vip-cloud-provider Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubeadm-1.37 Package: kubectl-1.32 Package: kubectl-1.34 Package: kubectl-1.35 Package: kubectl-1.37 Package: kubeflow-jupyter-web-app Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubeflow-pipelines-visualization-server Package: kubelet-1.34 Package: kubelet-1.35 Package: kubelet-1.37 Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-1.37 Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-livenessprobe Package: kubernetes-dns-node-cache Package: kubernetes-replicator Package: kuma-cni-2.12 Package: kuma-cni-2.13 Package: kuma-cp-2.12 Package: kuma-cp-2.13 Package: kuma-dp-2.12 Package: kuma-dp-2.13 Package: kuma-install-cni-2.12 Package: kuma-install-cni-2.13 Package: kumactl-2.12 Package: kumactl-2.13 Package: kustomize Package: kyverno-1.18 Package: kyverno-background-controller-1.18 Package: kyverno-cleanup-controller-1.18 Package: kyverno-cli-1.18 Package: kyverno-init-container-1.18 Package: kyverno-readiness-checker-1.18 Package: kyverno-reports-controller-1.18 Package: libnss Package: libnvidia-container Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-volume-node-cleanup Package: log-counter-1.35 Package: mattermost-11.7 Package: mc Package: mcp-grafana Package: meilisearch Package: melange Package: metallb Package: metallb-controller Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: minio Package: mountpoint-s3-csi-driver-2.5 Package: mountpoint-s3-csi-driver-2.6 Package: nats-server Package: neon Package: newrelic-nri-statsd Package: nextcloud-server-33 Package: nfpm Package: node-problem-detector-1.35 Package: nri-apache Package: nri-couchbase Package: nri-kubernetes Package: nri-mssql Package: nri-redis Package: nss Package: nuclei Package: nushell Package: ollama Package: opentofu-1.12 Package: opentofu-1.9 Package: perl-mozilla-ca Package: pg_timetable Package: php-8.2-pdo_snowflake Package: php-8.3-pdo_snowflake Package: php-8.4-pdo_snowflake Package: pixi Package: pnpm-12 Package: prometheus-adapter Package: promxy Package: pulumi-kubernetes-operator Package: pulumi-language-yaml Package: pvc-autoresizer Package: py3-cassandra-medusa Package: py3-pip-wheel Package: py3.10-grpcio-1.67 Package: py3.10-grpcio-1.68 Package: py3.10-grpcio-1.69 Package: py3.10-grpcio-1.70 Package: py3.10-grpcio-1.71 Package: py3.10-grpcio-1.72 Package: py3.10-grpcio-1.73 Package: py3.10-grpcio-1.74 Package: py3.10-grpcio-1.75 Package: py3.10-grpcio-1.76 Package: py3.10-grpcio-1.78 Package: py3.10-grpcio-1.80 Package: py3.10-grpcio-1.81 Package: py3.10-grpcio-1.83 Package: py3.10-pip-base Package: py3.10-pipenv Package: py3.11-grpcio-1.67 Package: py3.11-grpcio-1.68 Package: py3.11-grpcio-1.69 Package: py3.11-grpcio-1.70 Package: py3.11-grpcio-1.71 Package: py3.11-grpcio-1.72 Package: py3.11-grpcio-1.73 Package: py3.11-grpcio-1.74 Package: py3.11-grpcio-1.75 Package: py3.11-grpcio-1.76 Package: py3.11-grpcio-1.78 Package: py3.11-grpcio-1.80 Package: py3.11-grpcio-1.81 Package: py3.11-grpcio-1.83 Package: py3.11-pip-base Package: py3.11-pipenv Package: py3.12-grpcio-1.67 Package: py3.12-grpcio-1.68 Package: py3.12-grpcio-1.69 Package: py3.12-grpcio-1.70 Package: py3.12-grpcio-1.71 Package: py3.12-grpcio-1.72 Package: py3.12-grpcio-1.73 Package: py3.12-grpcio-1.74 Package: py3.12-grpcio-1.75 Package: py3.12-grpcio-1.76 Package: py3.12-grpcio-1.78 Package: py3.12-grpcio-1.80 Package: py3.12-grpcio-1.81 Package: py3.12-grpcio-1.83 Package: py3.12-pip-base Package: py3.12-pipenv Package: py3.13-ambassador Package: py3.13-grpcio-1.67 Package: py3.13-grpcio-1.68 Package: py3.13-grpcio-1.69 Package: py3.13-grpcio-1.70 Package: py3.13-grpcio-1.71 Package: py3.13-grpcio-1.72 Package: py3.13-grpcio-1.73 Package: py3.13-grpcio-1.74 Package: py3.13-grpcio-1.75 Package: py3.13-grpcio-1.76 Package: py3.13-grpcio-1.78 Package: py3.13-grpcio-1.80 Package: py3.13-grpcio-1.81 Package: py3.13-grpcio-1.83 Package: py3.13-pip-base Package: py3.13-pipenv Package: py3.14-grpcio-1.83 Package: py3.14-pip-base Package: py3.14-pipenv Package: py3.15-pip-base Package: pypy-3.10 Package: pypy-3.11 Package: python-tensorboard Package: rabbitmq-default-user-credential-updater Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-agent-2.14 Package: rancher-system-agent Package: rancher-telemetry Package: reflex Package: renovate Package: rke2-cloud-provider Package: rook-1.19 Package: rook-1.19-oci-compat Package: ruby3.4-kube-logging-operator-fluentd-outputs Package: rustls-webpki Package: sccache Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: semgrep Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-pubsub Package: shadowsocks-rust-sslocal Package: shadowsocks-rust-ssmanager Package: shadowsocks-rust-ssserver Package: shadowsocks-rust-ssservice Package: slsa-verifier Package: snyk-cli Package: speedtest-go Package: spegel Package: spicedb-operator Package: spin Package: stakater-reloader Package: stdlib Package: steampipe Package: stern Package: superset-6.0 Package: superset-6.1 Package: tekton-pipelines-controller-1.13 Package: tekton-pipelines-entrypoint-1.13 Package: tekton-pipelines-events-1.13 Package: tekton-pipelines-resolvers-1.13 Package: tekton-pipelines-sidecarlogresults-1.13 Package: tekton-pipelines-webhook-1.13 Package: tensorflow Package: terraform-provider-sendgrid Package: tetra Package: tetragon Package: tetragon-operator Package: timescaledb-tune Package: tkn Package: trino Package: typescript Package: uv Package: uv-compat Package: volume-modifier-for-k8s Package: wasm-pack Package: wasmcloud Package: webpki-root-certs Package: webpki-roots Package: wireguard-go Package: wolfictl Package: wordpress Package: yunikorn-web Package: zarf Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: crates.io Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

Affected products

VendorProductAffectedFixed
Go standard library crypto/x509 < 1.26.10, 1.27.0-0 – < 1.27.3 1.26.10

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.10-1 —
Debian 14 golang-1.27 1.27.3-1 —
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-1.26 +1 No fix yet —
Ubuntu 26.04 LTS golang-1.24 +2 No fix yet —
Ubuntu 24.04 LTS golang-1.24 +2 No fix yet —
Ubuntu 22.04 LTS golang-1.24 +2 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 buildah +1 2:1.43.1-7.el10_2 RHSA-2026:88262
RHEL 10 delve 1.26.1-3.el10_2 RHSA-2026:95519
RHEL 10 golang +7 1.26.10-1.el10_2 RHSA-2026:86093
RHEL 10 grafana +1 10.2.6-28.el10_2.8 RHSA-2026:98601, RHSA-2026:89751
RHEL 10 grafana-pcp 5.3.0-8.el10_2.2 RHSA-2026:88316
RHEL 10 ignition +3 2.26.0-3.el10_2.4 RHSA-2026:91720
RHEL 10 ipp-usb 0.9.27-7.el10_2.4 RHSA-2026:88280
RHEL 10 opentelemetry-collector 0.158.0-2.el10_2 RHSA-2026:93596
RHEL 10 podman +3 7:5.8.2-11.el10_2 RHSA-2026:88336
RHEL 10 rhc 1:0.3.8-8.el10_2 RHSA-2026:89832
RHEL 10 skopeo +1 2:1.22.2-6.el10_2 RHSA-2026:89761
RHEL 10 yggdrasil +1 0.4.9.2-1.el10_2.4 RHSA-2026:91138
RHEL 9 buildah +1 2:1.43.4-2.el9_8 RHSA-2026:90424
RHEL 9 delve 1.26.1-2.el9_8 RHSA-2026:95518
RHEL 9 golang +7 1.26.10-1.el9_8 RHSA-2026:86196
RHEL 9 grafana +1 10.2.6-23.el9_8.7 RHSA-2026:89744
RHEL 9 grafana-pcp 5.1.1-17.el9_8.2 RHSA-2026:88354
RHEL 9 ignition +3 2.26.0-1.el9_8.2 RHSA-2026:98539, RHSA-2026:91719
RHEL 9 opentelemetry-collector 0.158.0-2.el9_8 RHSA-2026:93617
RHEL 9 podman +4 6:5.8.2-8.el9_8 RHSA-2026:90362
RHEL 9 rhc +1 1:0.2.7-16.el9_8 RHSA-2026:89740
RHEL 9 skopeo +1 2:1.22.2-9.el9_8 RHSA-2026:90462
RHEL 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 buildah +1 2:1.33.15-2.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 conmon 3:2.1.10-2.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 container-selinux 2:2.229.0-3.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 containernetworking-plugins 1:1.4.0-11.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 containers-common 2:1-82.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 crit +4 3.18-5.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 crun 1.14.3-4.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 delve 1.26.1-1.module+el8.10.0+24516+40554724 RHSA-2026:95638, RHSA-2026:86203
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 golang +7 1.26.10-1.module+el8.10.0+25107+6b50279c RHSA-2026:95638, RHSA-2026:86203
RHEL 8 grafana +1 9.2.10-36.el8_10 RHSA-2026:88188
RHEL 8 grafana-pcp 5.1.1-19.el8_10 RHSA-2026:88189
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 oci-seccomp-bpf-hook 1.2.10-4.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 podman +6 4:4.9.4-38.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 python-podman +1 4.9.0-3.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 rhc 1:0.2.5-13.el8_10 RHSA-2026:89741
RHEL 8 runc 4:1.2.9-9.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 skopeo +1 2:1.14.6-5.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 toolbox +1 0.0.99.5.1-1.module+el8.10.0+25171+d379b437 RHSA-2026:89760
RHEL 8 udica 0.2.6-21.module+el8.10.0+25171+d379b437 RHSA-2026:89760
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Service Interconnect 2 skupper-cli 2.2.4-1.el8 RHSA-2026:91329
RHEL 10.2 EUS go-fdo-client 1.0.0-4.el10_2.9 RHSA-2026:99087
RHEL 10.2 EUS go-fdo-server +3 1.0.1-2.el10_2.6 RHSA-2026:99038
RHEL 10.0 EUS delve 1.26.1-3.el10_0 RHSA-2026:89884
RHEL 10.0 EUS git-lfs 3.6.1-2.el10_0.8 RHSA-2026:90757
RHEL 10.0 EUS golang +7 1.26.10-1.el10_0 RHSA-2026:87040
RHEL 10.0 EUS grafana +1 10.2.6-27.el10_0 RHSA-2026:88397
RHEL 10.0 EUS grafana-pcp 5.3.0-1.el10_0.2 RHSA-2026:88317
RHEL 10.0 EUS ignition +2 2.21.0-3.el10_0.5 RHSA-2026:90513
RHEL 10.0 EUS ipp-usb +1 0.9.27-3.el10_0.6 RHSA-2026:99063
RHEL 10.0 EUS opentelemetry-collector 0.158.0-2.el10_0 RHSA-2026:95016
RHEL 10.0 EUS osbuild-composer +2 134.1-13.el10_0 RHSA-2026:91646
RHEL 10.0 EUS rhc 1:0.3.2-6.el10_0.2 RHSA-2026:89892
RHEL 10.0 EUS yggdrasil +1 0.4.7-6.el10_0.1 RHSA-2026:91572
RHEL 9.8 EUS oci-seccomp-bpf-hook 1.2.11-3.el9_8 RHSA-2026:99049
RHEL 9.6 EUS delve 1.26.1-1.el9_6.2 RHSA-2026:89933
RHEL 9.6 EUS git-lfs 3.6.1-2.el9_6.8 RHSA-2026:89920
RHEL 9.6 EUS golang +7 1.26.10-1.el9_6 RHSA-2026:87043
RHEL 9.6 EUS grafana +1 10.2.6-24.el9_6 RHSA-2026:88396
RHEL 9.6 EUS grafana-pcp 5.1.1-15.el9_6.2 RHSA-2026:87911
RHEL 9.6 EUS ignition +3 2.21.0-7.el9_6.2 RHSA-2026:90514
RHEL 9.6 EUS opentelemetry-collector 0.158.0-2.el9_6 RHSA-2026:95014
RHEL 9.6 EUS osbuild-composer +2 132.2-13.el9_6 RHSA-2026:91587
RHEL 9.6 EUS rhc +1 1:0.2.7-1.el9_6.8 RHSA-2026:89914
RHEL 9.4 E4S delve 1.26.1-1.el9_4.2 RHSA-2026:89885
RHEL 9.4 E4S git-lfs 3.4.1-4.el9_4.7 RHSA-2026:89921
RHEL 9.4 E4S golang +7 1.26.10-1.el9_4 RHSA-2026:87042
RHEL 9.4 E4S grafana +1 9.2.10-29.el9_4 RHSA-2026:88332
RHEL 9.4 E4S grafana-pcp 5.1.1-10.el9_4 RHSA-2026:86972
RHEL 9.4 E4S ignition +2 2.17.0-2.el9_4.3 RHSA-2026:90518
RHEL 9.4 E4S opentelemetry-collector 0.158.0-2.el9_4 RHSA-2026:95015
RHEL 9.4 E4S rhc 1:0.2.4-9.el9_4.3 RHSA-2026:89908
RHEL 9.2 E4S delve 1.26.1-1.el9_2.2 RHSA-2026:89888
RHEL 9.2 E4S git-lfs 3.2.0-2.el9_2.11 RHSA-2026:89922
RHEL 9.2 E4S golang +7 1.26.10-1.el9_2 RHSA-2026:87041
RHEL 9.2 E4S grafana 9.0.9-14.el9_2 RHSA-2026:87732
RHEL 9.2 E4S grafana-pcp 5.1.1-5.el9_2.3 RHSA-2026:86973
RHEL 9.2 E4S ignition +2 2.15.0-2.el9_2.2 RHSA-2026:90519
RHEL 9.2 E4S osbuild-composer +3 76.1-10.el9_2 RHSA-2026:92372
RHEL 9.2 E4S rhc 1:0.2.2-1.el9_2.7 RHSA-2026:89915
RHEL 8.8 TUS git-lfs 3.2.0-2.el8_8.9 RHSA-2026:89925
RHEL 8.8 E4S git-lfs 3.2.0-2.el8_8.9 RHSA-2026:89925
RHEL 8.6 EUS Long Life git-lfs 2.13.3-3.el8_6.9 RHSA-2026:89926
RHEL 8.6 AUS git-lfs 2.13.3-3.el8_6.9 RHSA-2026:89926
RHEL 7 ELS host-metering +1 1.4.0-10.el7_9 RHSA-2026:99613
Red Hat Openshift Ironic 4 openstack-ironic +5 1:21.0.1-0.20261012095526.c95b83b.el9 RHSA-2026:90271
Red Hat OpenShift 4 cri-o 1.25.5-9.rhaos4.12.git6120b13.el9 RHSA-2026:92286, RHSA-2026:90271, RHSA-2026:89724
Red Hat OpenShift 4 cri-tools 1.25.0-8.el9 RHSA-2026:96281, RHSA-2026:90271, RHSA-2026:89724
Red Hat OpenShift 4 ignition +1 2.14.0-9.rhaos4.12.el9 RHSA-2026:90271, RHSA-2026:89724, RHSA-2026:89713
Red Hat OpenShift 4 microshift +16 4.20.44-202610271817.p0.ge0d31e5.assembly.4.20.44.el9 RHSA-2026:91172, RHSA-2026:89818, RHSA-2026:89817
Red Hat OpenShift 4 microshift-sriov +1 4.21.40-202610260627.p0.g728ad5e.assembly.4.21.40.el9 RHSA-2026:89818, RHSA-2026:89817
Red Hat OpenShift 4 openshift +1 4.12.0-202610221648.p2.g0e18cfc.assembly.stream.el8 RHSA-2026:90271, RHSA-2026:89724, RHSA-2026:89713
Red Hat OpenShift 4 openshift-ansible +1 4.17.0-202611050920.p2.gf11de04.assembly.stream.el8 RHSA-2026:96281
Red Hat OpenShift 4 openshift-clients +1 4.12.0-202610221648.p2.gd691257.assembly.stream.el8 RHSA-2026:96281, RHSA-2026:90271, RHSA-2026:89724
Red Hat OpenShift 4 openshift-kubelet +3 4.16.0-202610221642.p2.g41c4e9b.assembly.stream.el8 RHSA-2026:89724, RHSA-2026:89713, RHSA-2026:89229
Red Hat OpenShift 4 openshift-kuryr +4 4.12.0-202610242309.p2.g8fd2f8b.assembly.stream.el8 RHSA-2026:90271
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.16.0-202610221642.p2.gd39ac87.assembly.stream.el8 RHSA-2026:96281, RHSA-2026:89724, RHSA-2026:89713
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.16.0-202610221642.p2.g90fa18b.assembly.stream.el8 RHSA-2026:96281, RHSA-2026:89724, RHSA-2026:89713
Red Hat OpenShift 4 ose-crio-credential-provider 4.21.0-202610221616.p2.g83d4961.assembly.stream.el8 RHSA-2026:89229, RHSA-2026:89196
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.16.0-202610221642.p2.g26b43df.assembly.stream.el8 RHSA-2026:96281, RHSA-2026:89724, RHSA-2026:89713
Red Hat OpenShift 4 skopeo +1 2:1.14.5-9.rhaos4.16.el8 RHSA-2026:89713
Red Hat Hardened Images 1 buildah 1.45.2-1.1.hum1 RHSA-2026:86858
Red Hat Hardened Images 1 caddy 2.11.7-0.3.hum1 RHSA-2026:86922
Red Hat Hardened Images 1 cosign 3.1.3-0.4.hum1 RHSA-2026:86990
Red Hat Hardened Images 1 dex 2.46.0-0.3.hum1 RHSA-2026:86927
Red Hat Hardened Images 1 distribution 3.1.2-0.3.hum1 RHSA-2026:87065
Red Hat Hardened Images 1 etcd 3.7.2-0.3.hum1 RHSA-2026:86776
Red Hat Hardened Images 1 fulcio 1.9.0-0.3.hum1 RHSA-2026:86938
Red Hat Hardened Images 1 git-lfs 3.8.0-0.4.hum1 RHSA-2026:86936
Red Hat Hardened Images 1 git-sync 4.7.1-0.3.hum1 RHSA-2026:86992
Red Hat Hardened Images 1 go-fdo-client 1.0.0-2.3.hum1 RHSA-2026:86908
Red Hat Hardened Images 1 go-fdo-server +3 1.0.2-1.2.hum1 RHSA-2026:86948
Red Hat Hardened Images 1 golang1.26 +5 1.26.10-0.1.hum1 RHSA-2026:85899
Red Hat Hardened Images 1 golang1.27 +5 1.27.3-1.hum1 RHSA-2026:86029
Red Hat Hardened Images 1 grafana12.4 12.4.13-0.2.hum1 RHSA-2026:87075
Red Hat Hardened Images 1 grafana13.1 13.1.7-0.3.hum1 RHSA-2026:86930
Red Hat Hardened Images 1 grafana13.2 13.2.4-0.2.hum1 RHSA-2026:86928
Red Hat Hardened Images 1 grype 0.121.0-0.2.hum1 RHSA-2026:86943
Red Hat Hardened Images 1 helm3 3.22.1-0.2.hum1 RHSA-2026:86946
Red Hat Hardened Images 1 helm4 4.3.1-0.2.hum1 RHSA-2026:86960
Red Hat Hardened Images 1 hugo 0.168.0-0.2.hum1 RHSA-2026:87028
Red Hat Hardened Images 1 jaeger 2.21.0-0.2.hum1 RHSA-2026:86939
Red Hat Hardened Images 1 k6v1 1.8.2-0.2.hum1 RHSA-2026:86958
Red Hat Hardened Images 1 k6v2 2.3.0-0.3.hum1 RHSA-2026:86738
Red Hat Hardened Images 1 kube-state-metrics 2.20.0-0.4.hum1 RHSA-2026:86733
Red Hat Hardened Images 1 kubernetes1.35 +3 1.35.9-0.3.hum1 RHSA-2026:86906
Red Hat Hardened Images 1 kubernetes1.36 +3 1.36.5-1.2.hum1 RHSA-2026:86886
Red Hat Hardened Images 1 loki3.6 +2 3.6.18-0.2.hum1 RHSA-2026:86812
Red Hat Hardened Images 1 loki3.7 +2 3.7.8-0.4.hum1 RHSA-2026:87053
Red Hat Hardened Images 1 nats-server2.12 2.12.15-0.3.hum1 RHSA-2026:86929
Red Hat Hardened Images 1 nats-server2.14 2.14.8-0.2.hum1 RHSA-2026:86867
Red Hat Hardened Images 1 oauth2-proxy 7.15.5-0.3.hum1 RHSA-2026:86952
Red Hat Hardened Images 1 opentelemetry-collector +1 0.163.1-0.2.hum1 RHSA-2026:86934, RHSA-2026:86839
Red Hat Hardened Images 1 opentelemetry-collector-contrib 0.162.0-0.4.hum1 RHSA-2026:86932
Red Hat Hardened Images 1 opentofu1.10 1.10.10-0.6.hum1 RHSA-2026:86949
Red Hat Hardened Images 1 opentofu1.12 1.12.8-0.2.hum1 RHSA-2026:87092
Red Hat Hardened Images 1 oras 1.3.5-0.2.hum1 RHSA-2026:86863
Red Hat Hardened Images 1 podman +4 6.1.4-1.1.hum1 RHSA-2026:86944
Red Hat Hardened Images 1 prometheus3.13 3.13.4-0.2.hum1 RHSA-2026:87029
Red Hat Hardened Images 1 prometheus3.5 3.5.5-0.9.hum1 RHSA-2026:87076
Red Hat Hardened Images 1 rekor +1 1.5.4-0.3.hum1 RHSA-2026:86977
Red Hat Hardened Images 1 skopeo +1 1.24.1-1.2.hum1 RHSA-2026:86956
Red Hat Hardened Images 1 spire1.14 +3 1.14.8-0.2.hum1 RHSA-2026:87008
Red Hat Hardened Images 1 spire1.15 +3 1.15.4-0.2.hum1 RHSA-2026:87153, RHSA-2026:86987
Red Hat Hardened Images 1 syft 1.55.0-0.2.hum1 RHSA-2026:86978
Red Hat Hardened Images 1 tempo2.10 2.10.8-0.6.hum1 RHSA-2026:86918
Red Hat Hardened Images 1 tempo3.0 3.0.4-0.2.hum1 RHSA-2026:87024
Red Hat Hardened Images 1 trivy 0.76.0-0.2.hum1 RHSA-2026:86914
Red Hat Hardened Images 1 xcaddy 0.4.7-0.3.hum1 RHSA-2026:86893

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 buildah +1 2:1.43.1-7.el10_2 ALSA-2026:88262
AlmaLinux 10 delve 1.26.1-3.el10_2 ALSA-2026:95519
AlmaLinux 10 golang +7 1.26.10-1.el10_2.alma.1 ALSA-2026:86093
AlmaLinux 10 grafana-pcp 5.3.0-8.el10_2.2 ALSA-2026:88316
AlmaLinux 10 ignition +3 2.26.0-3.el10_2.4 ALSA-2026:91720
AlmaLinux 10 ipp-usb 0.9.27-7.el10_2.4 ALSA-2026:88280
AlmaLinux 10 oci-seccomp-bpf-hook 1.2.11-3.el10_2 ALSA-2026:89752
AlmaLinux 10 opentelemetry-collector 0.158.0-2.el10_2 ALSA-2026:93596
AlmaLinux 10 podman +3 7:5.8.2-11.el10_2.alma.1 ALSA-2026:88336
AlmaLinux 10 skopeo +1 2:1.22.2-6.el10_2 ALSA-2026:89761
AlmaLinux 10 yggdrasil +1 0.4.9.2-1.el10_2.4 ALSA-2026:91138
AlmaLinux 9 buildah +1 2:1.43.4-2.el9_8 ALSA-2026:90424
AlmaLinux 9 delve 1.26.1-2.el9_8 ALSA-2026:95518
AlmaLinux 9 golang +7 1.26.10-1.el9_8 ALSA-2026:86196
AlmaLinux 9 grafana +1 10.2.6-23.el9_8.7 ALSA-2026:89744
AlmaLinux 9 grafana-pcp 5.1.1-17.el9_8.2 ALSA-2026:88354
AlmaLinux 9 ignition +3 2.26.0-1.el9_8.2 ALSA-2026:91719
AlmaLinux 9 opentelemetry-collector 0.158.0-2.el9_8 ALSA-2026:93617
AlmaLinux 9 podman +4 6:5.8.2-8.el9_8 ALSA-2026:90362
AlmaLinux 9 skopeo +1 2:1.22.2-9.el9_8 ALSA-2026:90462
AlmaLinux 8 aardvark-dns 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 ALSA-2026:89760
AlmaLinux 8 buildah +1 2:1.33.15-2.module_el8.10.0+4327+ab8e4068 ALSA-2026:89760
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+4102+6c76e544 ALSA-2026:89760
AlmaLinux 8 conmon 3:2.1.10-2.module_el8.10.0+4327+ab8e4068 ALSA-2026:89760
AlmaLinux 8 container-selinux 2:2.229.0-3.module_el8.10.0+4213+0493256b ALSA-2026:89760
AlmaLinux 8 containernetworking-plugins 1:1.4.0-11.module_el8.10.0+4327+ab8e4068 ALSA-2026:89760
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2026:89760
AlmaLinux 8 crit +4 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2026:89760
AlmaLinux 8 crun 1.14.3-4.module_el8.10.0+4269+94686149 ALSA-2026:89760
AlmaLinux 8 delve 1.26.1-1.module_el8.10.0+4307+6e4cbc60 ALSA-2026:95638, ALSA-2026:86203
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2026:89760
AlmaLinux 8 golang +7 1.26.10-1.module_el8.10.0+4307+6e4cbc60 ALSA-2026:95638, ALSA-2026:86203
AlmaLinux 8 grafana +1 9.2.10-36.el8_10 ALSA-2026:88188
AlmaLinux 8 grafana-pcp 5.1.1-19.el8_10 ALSA-2026:88189
AlmaLinux 8 libslirp +1 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2026:89760
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3845+87b84552 ALSA-2026:89760
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-4.module_el8.10.0+4327+ab8e4068 ALSA-2026:89760
AlmaLinux 8 podman +6 4:4.9.4-38.module_el8.10.0+4327+ab8e4068 ALSA-2026:89760
AlmaLinux 8 python3-podman 4.9.0-3.module_el8.10.0+4016+efd18bf8 ALSA-2026:89760
AlmaLinux 8 runc 4:1.2.9-9.module_el8.10.0+4327+ab8e4068 ALSA-2026:89760
AlmaLinux 8 skopeo +1 2:1.14.6-5.module_el8.10.0+4327+ab8e4068 ALSA-2026:89760
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2026:89760
AlmaLinux 8 toolbox +1 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 ALSA-2026:89760
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+4068+0e21408f ALSA-2026:89760

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 buildah 2:1.43.1-7.el10_2 RLSA-2026:88262
Rocky Linux 10 delve 1.26.1-3.el10_2 RLSA-2026:98086, RLSA-2026:95519
Rocky Linux 10 golang 1.26.10-1.el10_2 RLSA-2026:86093
Rocky Linux 10 golang-github-openprinting-ipp-usb 0.9.27-7.el10_2.4 RLSA-2026:88280
Rocky Linux 10 grafana-pcp 5.3.0-8.el10_2.2 RLSA-2026:88316
Rocky Linux 10 gvisor-tap-vsock +1 6:0.8.7-2.el10_3 RLSA-2026:98610
Rocky Linux 10 ignition 2.26.0-3.el10_2.4 RLSA-2026:91720
Rocky Linux 10 oci-seccomp-bpf-hook 1.2.11-3.el10_2 RLSA-2026:89752
Rocky Linux 10 opentelemetry-collector 0.158.0-2.el10_2 RLSA-2026:93596
Rocky Linux 10 podman 7:5.8.2-11.el10_2 RLSA-2026:88336
Rocky Linux 10 skopeo 2:1.22.2-6.el10_2 RLSA-2026:89761
Rocky Linux 10 yggdrasil 0.4.9.2-1.el10_2.4 RLSA-2026:91138
Rocky Linux 9 buildah 2:1.43.4-2.el9_8 RLSA-2026:90424
Rocky Linux 9 delve 1.26.1-2.el9_8 RLSA-2026:97877, RLSA-2026:95518
Rocky Linux 9 golang 1.26.10-1.el9_8 RLSA-2026:86196
Rocky Linux 9 grafana 10.2.6-23.el9_8.7 RLSA-2026:89744
Rocky Linux 9 grafana-pcp 5.1.1-17.el9_8.2 RLSA-2026:98479, RLSA-2026:88354
Rocky Linux 9 gvisor-tap-vsock +1 6:0.8.8-2.el9_9 RLSA-2026:98502
Rocky Linux 9 ignition 2.26.0-1.el9_8.2 RLSA-2026:98539, RLSA-2026:91719
Rocky Linux 9 ignition-edge +2 2.26.0-2.el9_9.1 RLSA-2026:98539
Rocky Linux 9 opentelemetry-collector 0.158.0-2.el9_8 RLSA-2026:93617
Rocky Linux 9 podman 6:5.8.2-8.el9_8 RLSA-2026:90362
Rocky Linux 9 skopeo 2:1.22.2-9.el9_8 RLSA-2026:90462
Rocky Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2026:89760
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2026:89760
Rocky Linux 8 container-selinux 2:2.229.0-3.module+el8.10.0+40223+e940a224 RLSA-2026:89760
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2026:89760
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2026:89760
Rocky Linux 8 crun 1.14.3-4.module+el8.10.0+40310+c25440c1 RLSA-2026:89760
Rocky Linux 8 delve 1.26.1-1.module+el8.10.0+40244+e7cb3ff8 RLSA-2026:95638, RLSA-2026:86203
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2026:89760
Rocky Linux 8 golang 1.26.10-1.module+el8.10.0+40387+102242d5 RLSA-2026:95638
Rocky Linux 8 grafana 9.2.10-36.el8_10 RLSA-2026:88188
Rocky Linux 8 grafana-pcp 5.1.1-19.el8_10 RLSA-2026:88189
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2026:89760
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:89760
Rocky Linux 8 python-podman 4.9.0-3.module+el8.10.0+1896+b18fa106 RLSA-2026:89760
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:89760
Rocky Linux 8 toolbox 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 RLSA-2026:89760
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2026:89760

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP7 go1.26-openssl 1.26.10-150600.13.18.1 SUSE-SU-2026:4866-1
SLES 15 SP7 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
SLES 15 SP6 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP6 go1.26-openssl 1.26.10-150600.13.18.1 SUSE-SU-2026:4866-1
SLES 15 SP6 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
SLES 15 SP5 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP5 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES 15 SP5 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
SLES 15 SP4 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP4 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES 15 SP4 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.26 1.26.10-160000.1.1 SUSE-SU-2026:24359-1
SLES for SAP 16.0 go1.27 1.27.3-160000.1.1 SUSE-SU-2026:24360-1
SLES for SAP 15 SP6 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES for SAP 15 SP6 go1.26-openssl 1.26.10-150600.13.18.1 SUSE-SU-2026:4866-1
SLES for SAP 15 SP6 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
SLES for SAP 15 SP5 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES for SAP 15 SP5 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES for SAP 15 SP5 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
SLES for SAP 15 SP4 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES for SAP 15 SP4 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES for SAP 15 SP4 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
SLES 16.0 go1.26 1.26.10-160000.1.1 SUSE-SU-2026:24359-1
SLES 16.0 go1.27 1.27.3-160000.1.1 SUSE-SU-2026:24360-1
SLE HPC 15 SP5 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLE HPC 15 SP5 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLE HPC 15 SP5 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1
SLE HPC 15 SP4 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLE HPC 15 SP4 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLE HPC 15 SP4 go1.27 1.27.3-150000.1.15.1 SUSE-SU-2026:4863-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed bugwarden 0.7.0-1.1 openSUSE-SU-2026:12385-1
openSUSE Tumbleweed buildpacks-cli 0.40.10-1.1 openSUSE-SU-2026:12260-1
openSUSE Tumbleweed diun 4.33.1-1.1 openSUSE-SU-2026:12360-1
openSUSE Tumbleweed docker-compose 5.6.1-1.1 openSUSE-SU-2026:12236-1
openSUSE Tumbleweed fleet-cli 0.16.3-1.1 openSUSE-SU-2026:12320-1
openSUSE Tumbleweed github-mcp-server 2.0.3-1.1 openSUSE-SU-2026:12284-1
openSUSE Tumbleweed gitoxide 0.61.0-1.1 openSUSE-SU-2026:12238-1
openSUSE Tumbleweed go1.26 1.26.10-1.1 openSUSE-SU-2026:12212-1
openSUSE Tumbleweed go1.27 1.27.3-1.1 openSUSE-SU-2026:12239-1
openSUSE Tumbleweed golang-github-prometheus-alertmanager 0.34.2-1.1 openSUSE-SU-2026:12455-1
openSUSE Tumbleweed gotosocial 0.22.3-1.1 openSUSE-SU-2026:12226-1
openSUSE Tumbleweed hcloud-cli 1.70.2-1.1 openSUSE-SU-2026:12291-1
openSUSE Tumbleweed headscale 0.29.7-1.1 openSUSE-SU-2026:12543-1
openSUSE Tumbleweed istioctl 1.31.3-1.1 openSUSE-SU-2026:12262-1
openSUSE Tumbleweed kubelogin 0.2.22-1.1 openSUSE-SU-2026:12298-1
openSUSE Tumbleweed nova 3.12.3-1.1 openSUSE-SU-2026:12464-1
openSUSE Tumbleweed okteto 3.24.1-1.1 openSUSE-SU-2026:12264-1
openSUSE Tumbleweed pinact 5.0.2-1.1 openSUSE-SU-2026:12303-1
openSUSE Tumbleweed pluto 5.24.5-1.1 openSUSE-SU-2026:12470-1
openSUSE Tumbleweed polaris 10.2.6-1.1 openSUSE-SU-2026:12471-1
openSUSE Tumbleweed rclone 1.76.0-1.1 openSUSE-SU-2026:12505-1
openSUSE Tumbleweed regclient 0.11.7-1.1 openSUSE-SU-2026:12220-1
openSUSE Tumbleweed tekton-cli 0.46.2-1.1 openSUSE-SU-2026:12253-1
openSUSE Tumbleweed versitygw 1.10.0-1.1 openSUSE-SU-2026:12354-1
openSUSE Leap 16.0 go1.26 1.26.10-160000.1.1 openSUSE-SU-2026:22152-1
openSUSE Leap 16.0 go1.27 1.27.3-160000.1.1 openSUSE-SU-2026:22153-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 docker 29.9.2-r0 —
Alpine v3.24 docker-cli-buildx 0.38.1-r0 —
Alpine v3.24 docker-cli-compose 5.6.1-r0 —
Alpine v3.24 go 1.26.10-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300073.2-1.amzn2023 ALAS2023-2026-3350
Amazon Linux 2023 amazon-ecr-credential-helper 0.12.0-6.amzn2023 ALAS2023-2026-3345
Amazon Linux 2023 amazon-efs-utils 3.3.5-1.amzn2023 ALAS2023-2026-3378
Amazon Linux 2023 amazon-ssm-agent 3.3.5700.0-1.amzn2023 ALAS2023-2026-3358
Amazon Linux 2023 buildah 2:1.43.1-1.amzn2023.0.3 ALAS2023-2026-3326
Amazon Linux 2023 cni-plugins 1.7.1-1.amzn2023.0.9 ALAS2023-2026-3349
Amazon Linux 2023 containerd +1 2.3.7-1.amzn2023.0.2 ALAS2023-2026-3339
Amazon Linux 2023 credentials-fetcher 2.0.3-1.amzn2023.0.8 ALAS2023-2026-3360
Amazon Linux 2023 docker 25.0.18-1.amzn2023.0.2 ALAS2023-2026-3324
Amazon Linux 2023 ecs-init 1.108.2-1.amzn2023 ALAS2023-2026-3359
Amazon Linux 2023 git-lfs 3.7.1-82.amzn2023 ALAS2023-2026-3322
Amazon Linux 2023 golang +6 1.26.10-1.amzn2023.0.1 ALAS2023-2026-3327
Amazon Linux 2023 golang-github-burntsushi-toml +1 1.5.0-1.amzn2023.0.9 ALAS2023-2026-3364
Amazon Linux 2023 golang-github-burntsushi-toml-test +1 0.2.0-8.amzn2023.0.11 ALAS2023-2026-3363
Amazon Linux 2023 golang-github-cpuguy83-md2man +2 2.0.2-24.amzn2023.0.15 ALAS2023-2026-3362
Amazon Linux 2023 golist 0.10.4-12.amzn2023.0.17 ALAS2023-2026-3361
Amazon Linux 2023 nerdctl 2.3.5-1.amzn2023.0.3 ALAS2023-2026-3344
Amazon Linux 2023 oci-add-hooks 0-0.1.20200504git268e3bb.amzn2023.0.14 ALAS2023-2026-3346
Amazon Linux 2023 rclone 1.75.1-2.amzn2023 ALAS2023-2026-3348
Amazon Linux 2023 runc 1.4.3-1.amzn2023.0.3 ALAS2023-2026-3323
Amazon Linux 2023 runfinch-finch 1.19.0-1.amzn2023.0.3 ALAS2023-2026-3343
Amazon Linux 2023 skopeo +1 2:1.22.2-1.amzn2023.0.3 ALAS2023-2026-3325
Amazon Linux 2023 soci-snapshotter 0.16.1-1.amzn2023.0.1 ALAS2023-2026-3351
Amazon Linux 2023 yq 4.53.3-16.amzn2023 ALAS2023-2026-3347
Amazon Linux 2 amazon-cloudwatch-agent 1.300073.2-1.amzn2 ALAS2-2026-4049
Amazon Linux 2 amazon-efs-utils 3.3.5-1.amzn2 ALAS2-2026-4069
Amazon Linux 2 amazon-ssm-agent 3.3.5700.0-1.amzn2 ALAS2-2026-4063
Amazon Linux 2 cni-plugins 1.7.1-1.amzn2.0.9 ALAS2-2026-4054
Amazon Linux 2 cri-tools 1.32.0-1.amzn2.0.8 ALAS2-2026-4042
Amazon Linux 2 golang +6 1.26.10-1.amzn2.0.1 ALAS2-2026-4043
Amazon Linux 2 golang-github-cpuguy83-go-md2man 1.0.4-4.amzn2.0.5 ALAS2-2026-4056
Amazon Linux 2 golist 0.10.1-10.amzn2.0.19 ALAS2-2026-4064
Amazon Linux 2 nerdctl 2.3.5-1.amzn2.0.3 ALAS2-2026-4053
Amazon Linux 2 rclone 1.55.1-1.amzn2.0.12 ALAS2-2026-4055

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 gcc +3 No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 buildah +1 2:1.43.1-7.0.1.el10_2 ELSA-2026-88262
Oracle Linux 10 ca-certificates 2025.2.80_v9.0.305-102.0.1.el10_2 ELSA-2026-500451
Oracle Linux 10 delve 1.26.1-3.0.1.el10_2 ELSA-2026-95519
Oracle Linux 10 golang +7 1.26.10-1.0.1.el10_2 ELSA-2026-86093
Oracle Linux 10 grafana +1 10.2.6-28.el10_2.9 ELSA-2026-89751
Oracle Linux 10 grafana-pcp 5.3.0-8.el10_2.2 ELSA-2026-88316
Oracle Linux 10 ignition +3 2.26.0-3.0.1.el10_2.4 ELSA-2026-91720
Oracle Linux 10 ipp-usb 0.9.27-7.el10_2.4 ELSA-2026-88280
Oracle Linux 10 oci-seccomp-bpf-hook 1.2.11-3.el10_2 ELSA-2026-89752
Oracle Linux 10 podman +3 7:5.8.2-11.0.1.el10_2 ELSA-2026-88336
Oracle Linux 10 skopeo +1 2:1.22.2-6.el10_2 ELSA-2026-89761
Oracle Linux 10 yggdrasil +1 0.4.9.2-1.el10_2.4 ELSA-2026-91138
Oracle Linux 9 buildah +1 2:1.43.4-2.0.1.el9_8 ELSA-2026-90424
Oracle Linux 9 ca-certificates 2025.2.80_v9.0.305-91.0.1.el9 ELSA-2026-500450
Oracle Linux 9 delve 1.26.1-2.0.1.el9_8 ELSA-2026-95518
Oracle Linux 9 golang +7 1.26.10-1.0.1.el9_8 ELSA-2026-86196
Oracle Linux 9 grafana +1 10.2.6-23.el9_8.7 ELSA-2026-89744
Oracle Linux 9 grafana-pcp 5.1.1-17.el9_8.2 ELSA-2026-88354
Oracle Linux 9 ignition +3 2.26.0-1.el9_8.2 ELSA-2026-91719
Oracle Linux 9 podman +4 6:5.8.2-8.0.1.el9_8 ELSA-2026-90362
Oracle Linux 9 skopeo +1 2:1.22.2-9.el9_8 ELSA-2026-90462
Oracle Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 buildah +1 2:1.33.15-2.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 ca-certificates 2025.2.80_v9.0.304-80.2.0.1.el8_10 ELSA-2026-500449
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 conmon 3:2.1.10-2.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 container-selinux 2:2.229.0-3.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 containernetworking-plugins 1:1.4.0-11.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 crun 1.14.3-4.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 delve 1.26.1-1.0.1.module+el8.10.0+91008+b9491da4 ELSA-2026-95638, ELSA-2026-86203
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 golang +7 1.26.10-1.0.1.module+el8.10.0+91075+4cd454b9 ELSA-2026-95638, ELSA-2026-86203
Oracle Linux 8 grafana +1 9.2.10-36.0.1.el8_10 ELSA-2026-88188
Oracle Linux 8 grafana-pcp 5.1.1-19.el8_10 ELSA-2026-88189
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-4.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 podman +6 4:4.9.4-38.0.1.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 python3-podman 4.9.0-3.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 runc 4:1.2.9-9.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 skopeo +1 2:1.14.6-5.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+91087+698d4460 ELSA-2026-89760
Oracle Linux 7 ca-certificates 2025.2.80_v9.0.304-71.0.2.el7_9 ELSA-2026-500496

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling actions-runner-controller 0.15.0-r4 —
Wolfi rolling amass 5.1.1-r21 —
Wolfi rolling amazon-cloudwatch-agent +1 1.300074.0-r3 —
Wolfi rolling amazon-k8s-cni +1 1.23.2-r4 —
Wolfi rolling apisix-ingress-controller 2.2.0-r9 —
Wolfi rolling argo-workflows-3.7 +1 3.7.18-r13 —
Wolfi rolling ascan 2.13.0-r1 —
Wolfi rolling aws-flb-kinesis 1.10.4-r11 —
Wolfi rolling az 2.91.0-r2 —
Wolfi rolling azure-ipam 0.4.0-r36 —
Wolfi rolling azurefile-csi-1.35 1.35.11-r1 —
Wolfi rolling biome 2.6.4-r1 —
Wolfi rolling blob-csi-1.27 1.27.11-r4 —
Wolfi rolling blobfuse2 2.4.2-r29 —
Wolfi rolling bom 0.8.0-r3 —
Wolfi rolling boring-registry 0.19.0-r12 —
Wolfi rolling buck2 20261015-r1 —
Wolfi rolling buf 1.74.0-r1 —
Wolfi rolling buildah 1.45.2-r2 —
Wolfi rolling calicoctl-3.31 +12 3.31.7-r7 —
Wolfi rolling calicoctl-3.32 +12 3.32.3-r0 —
Wolfi rolling cass-operator 1.32.0-r7 —
Wolfi rolling cerbos +1 0.56.0-r4 —
Wolfi rolling cert-manager-csi-driver 0.16.0-r12 —
Wolfi rolling cert-manager-webhook-pdns 2.5.5-r30 —
Wolfi rolling cfssl +6 1.7.1-r4 —
Wolfi rolling chisel 1.12.0-r5 —
Wolfi rolling cinc-auditor 7.1.7-r9 —
Wolfi rolling cis-operator-1.4 1.4.10-r5 —
Wolfi rolling cleave 2.12.1-r1 —
Wolfi rolling cloud-provider-aws-1.36-ecr-credential-provider +1 1.36.1-r13 —
Wolfi rolling cloud-provider-vsphere 1.37.0-r8 —
Wolfi rolling cloud-sql-proxy-2.21 2.21.3-r21 —
Wolfi rolling cluster-api-aws-controller 2.13.1-r4 —
Wolfi rolling cluster-autoscaler-1.35 1.35.2-r16 —
Wolfi rolling codex 0.165.0-r1 —
Wolfi rolling confluent-docker-utils 0.0.172-r6 —
Wolfi rolling consul-k8s-1.9 +1 1.9.12-r5 —
Wolfi rolling crictl +2 1.37.0-r3 —
Wolfi rolling crossplane-2.2 +1 2.2.6-r5 —
Wolfi rolling crossplane-provider-aws-ec2 +2 2.9.0-r5 —
Wolfi rolling crossplane-provider-aws-eks +1 2.9.0-r6 —
Wolfi rolling crossplane-provider-aws-sns 2.9.0-r7 —
Wolfi rolling crossplane-provider-family-azure 2.8.0-r5 —
Wolfi rolling ctr-1 +3 1.7.36-r6 —
Wolfi rolling ctr-2 +4 2.4.2-r1 —
Wolfi rolling ctr-2.3 +3 2.3.7-r2 —
Wolfi rolling dask-gateway-server 2026.3.0-r15 —
Wolfi rolling dask-kubernetes 2026.3.0-r19 —
Wolfi rolling datadog-agent-7.78-core-integrations 7.78.4-r31 —
Wolfi rolling datadog-agent-7.79 +1 7.79.2-r30 —
Wolfi rolling datadog-agent-7.80 +2 7.80.4-r24 —
Wolfi rolling datadog-agent-7.80-core-integrations 7.80.4-r27 —
Wolfi rolling datadog-agent-7.81 +1 7.81.3-r16 —
Wolfi rolling datadog-agent-nvml 1.0.9-r11 —
Wolfi rolling datadog-operator 1.31.1-r1 —
Wolfi rolling dataplaneapi 3.4.4-r1 —
Wolfi rolling deno 2.9.8-r1 —
Wolfi rolling descheduler 0.37.0-r5 —
Wolfi rolling dive 0.13.1-r28 —
Wolfi rolling dockerd-28 28.5.2-r46 —
Wolfi rolling eksctl 0.231.0-r3 —
Wolfi rolling emissary +1 4.1.0-r24 —
Wolfi rolling envoy-1.38 1.38.9-r1 —
Wolfi rolling etcd-3.6 3.6.15-r4 —
Wolfi rolling external-dns-0.21 0.21.0-r30 —
Wolfi rolling ferretdb 2.7.0-r36 —
Wolfi rolling fluent-operator 3.10.1-r5 —
Wolfi rolling flux-helm-controller 1.6.5-r4 —
Wolfi rolling flux-image-reflector-controller 1.2.5-r11 —
Wolfi rolling flux-kustomize-controller 1.9.6-r4 —
Wolfi rolling ggshield 1.55.0-r5 —
Wolfi rolling git-lfs 3.8.0-r4 —
Wolfi rolling git-sync 4.7.1-r7 —
Wolfi rolling go-1.25 +4 No fix yet —
Wolfi rolling go-discover 0_git20261012-r1 —
Wolfi rolling google-cloud-sdk-core 591.0.0-r1 —
Wolfi rolling goreleaser 2.18.3-r2 —
Wolfi rolling gostatsd 28.3.0-r40 —
Wolfi rolling grafana-12.4 12.4.13-r3 —
Wolfi rolling grafana-operator 5.25.0-r5 —
Wolfi rolling grafana-pyroscope-2.0 2.0.6-r12 —
Wolfi rolling grafana-rollout-operator 0.41.0-r1 —
Wolfi rolling grpc-1.68 +4 1.68.2-r21 —
Wolfi rolling grpc-1.81 +4 1.81.1-r10 —
Wolfi rolling helm-mapkubeapis 0.6.1-r37 —
Wolfi rolling helm-push 0.11.1-r32 —
Wolfi rolling helm-set-status 0.3.0-r37 —
Wolfi rolling http-echo 1.0.0-r37 —
Wolfi rolling httpie 3.2.4-r18 —
Wolfi rolling hydra 26.2.0-r33 —
Wolfi rolling istioctl-1.30 +4 1.30.6-r2 —
Wolfi rolling jaeger-2-jaeger +6 2.22.0-r3 —
Wolfi rolling java-cacerts +6 20260909-r3 —
Wolfi rolling jitsucom-bulker-bulker +4 2.15.0-r10 —
Wolfi rolling juicefs-1.3 1.3.3-r12 —
Wolfi rolling juicefs-csi-driver 0.33.1-r1 —
Wolfi rolling jwt-tool 2.3.0-r9 —
Wolfi rolling k8s-sidecar 2.14.1-r2 —
Wolfi rolling k8s_gateway 1.8.2-r16 —
Wolfi rolling k8ssandra-client 0.9.1-r6 —
Wolfi rolling k8ssandra-operator 1.33.0-r5 —
Wolfi rolling karma 0.133-r2 —
Wolfi rolling kbld 0.49.2-r2 —
Wolfi rolling kdash 2.1.1-r6 —
Wolfi rolling kind 0.33.0-r3 —
Wolfi rolling kine 0.17.2-r3 —
Wolfi rolling knative-eventing-1.21-filter +7 1.21.4-r15 —
Wolfi rolling ko 0.19.1-r12 —
Wolfi rolling kpt 1.0.1-r4 —
Wolfi rolling kserve-storage-controller 0.21.0-r10 —
Wolfi rolling kube-logging-operator-custom-runner 1.0.0-r5 —
Wolfi rolling kube-rbac-proxy 0.23.0-r4 —
Wolfi rolling kube-vip-cloud-provider 0.0.13-r4 —
Wolfi rolling kubeadm-1.34 +7 1.34.12-r3 —
Wolfi rolling kubeadm-1.35 +7 1.35.9-r5 —
Wolfi rolling kubeadm-1.37 +7 1.37.1-r3 —
Wolfi rolling kubeflow-jupyter-web-app 1.10.0-r30 —
Wolfi rolling kubeflow-pipelines-apiserver +4 2.17.2-r13 —
Wolfi rolling kubeflow-pipelines-visualization-server 2.18.0-r1 —
Wolfi rolling kubernetes-csi-driver-nfs 4.13.5-r4 —
Wolfi rolling kubernetes-csi-livenessprobe 2.20.0-r3 —
Wolfi rolling kubernetes-dns-node-cache 1.26.8-r26 —
Wolfi rolling kubernetes-replicator 2.12.4-r11 —
Wolfi rolling kuma-cp-2.12 +4 2.12.3-r33 —
Wolfi rolling kuma-cp-2.13 +4 2.13.11-r5 —
Wolfi rolling kustomize 5.8.3-r1 —
Wolfi rolling kyverno-1.18 +6 1.18.2-r20 —
Wolfi rolling libnvidia-container 1.20.1-r2 —
Wolfi rolling litefs 0.5.14-r21 —
Wolfi rolling litestream 0.5.17-r9 —
Wolfi rolling local-path-provisioner 0.0.37-r6 —
Wolfi rolling local-static-provisioner +1 2.10.0-r3 —
Wolfi rolling log-counter-1.35 +2 1.35.4-r2 —
Wolfi rolling mattermost-11.7 11.7.13-r1 —
Wolfi rolling mc 0.20250813.083541-r27 —
Wolfi rolling mcp-grafana 2.0.2-r5 —
Wolfi rolling meilisearch 1.56.0-r1 —
Wolfi rolling melange 0.63.0-r1 —
Wolfi rolling metallb +4 0.16.1-r17 —
Wolfi rolling minio 0.20260922.192518-r5 —
Wolfi rolling mountpoint-s3-csi-driver-2.5 2.5.0-r22 —
Wolfi rolling mountpoint-s3-csi-driver-2.6 2.6.0-r16 —
Wolfi rolling nats-server 2.15.1-r1 —
Wolfi rolling neon 9129-r9 —
Wolfi rolling newrelic-nri-statsd 2.15.1-r3 —
Wolfi rolling nextcloud-server-33 33.0.10-r4 —
Wolfi rolling nfpm 2.48.0-r3 —
Wolfi rolling nri-apache 1.18.2-r1 —
Wolfi rolling nri-couchbase 2.12.0-r2 —
Wolfi rolling nri-kubernetes 4.8.2-r1 —
Wolfi rolling nri-mssql 2.39.0-r3 —
Wolfi rolling nri-redis 1.16.1-r1 —
Wolfi rolling nss +1 3.131.1-r0 —
Wolfi rolling nuclei 3.11.1-r14 —
Wolfi rolling nushell 0.116.1-r6 —
Wolfi rolling ollama 0.40.7-r0 —
Wolfi rolling opentofu-1.12 1.12.9-r0 —
Wolfi rolling opentofu-1.9 1.9.4-r36 —
Wolfi rolling perl-mozilla-ca 20260813-r1 —
Wolfi rolling pg_timetable 7.1.0-r8 —
Wolfi rolling php-8.2-pdo_snowflake +2 4.3.1-r0 —
Wolfi rolling pixi 0.83.0-r1 —
Wolfi rolling pnpm-12 12.14.0-r2 —
Wolfi rolling prometheus-adapter 0.12.0-r42 —
Wolfi rolling promxy 0.0.97-r6 —
Wolfi rolling pulumi-kubernetes-operator 2.9.3-r4 —
Wolfi rolling pulumi-language-yaml 1.38.11-r1 —
Wolfi rolling pvc-autoresizer 0.21.2-r3 —
Wolfi rolling py3-cassandra-medusa 0.31.0-r6 —
Wolfi rolling py3-pip-wheel +6 26.2.2-r2 —
Wolfi rolling py3.10-grpcio-1.67 +3 1.67.1-r23 —
Wolfi rolling py3.10-grpcio-1.69 +3 1.69.0-r21 —
Wolfi rolling py3.10-grpcio-1.70 +3 1.70.2-r18 —
Wolfi rolling py3.10-grpcio-1.71 +3 1.71.2-r19 —
Wolfi rolling py3.10-grpcio-1.72 +3 1.72.2-r15 —
Wolfi rolling py3.10-grpcio-1.73 +3 1.73.1-r15 —
Wolfi rolling py3.10-grpcio-1.74 +3 1.74.1-r14 —
Wolfi rolling py3.10-grpcio-1.75 +3 1.75.1-r11 —
Wolfi rolling py3.10-grpcio-1.76 +3 1.76.0-r10 —
Wolfi rolling py3.10-grpcio-1.78 +3 1.78.1-r8 —
Wolfi rolling py3.10-grpcio-1.80 +3 1.80.0-r12 —
Wolfi rolling py3.10-grpcio-1.83 +3 1.83.1-r6 —
Wolfi rolling py3.10-pipenv +4 2026.10.4-r1 —
Wolfi rolling py3.14-grpcio-1.83 1.83.1-r5 —
Wolfi rolling pypy-3.10 7.3.19-r27 —
Wolfi rolling pypy-3.11 8.0.1-r3 —
Wolfi rolling rabbitmq-default-user-credential-updater 1.0.18-r1 —
Wolfi rolling rancher-2.14 2.14.6-r5 —
Wolfi rolling rancher-agent-2.13 2.13.10-r6 —
Wolfi rolling rancher-agent-2.14 2.14.6-r6 —
Wolfi rolling rancher-system-agent 0.15.2-r3 —
Wolfi rolling rancher-telemetry 0.6.2-r31 —
Wolfi rolling reflex 0.10.1-r1 —
Wolfi rolling renovate 44.198.3-r1 —
Wolfi rolling rke2-cloud-provider 1.36.5-r4 —
Wolfi rolling rook-1.19 +1 1.19.12-r2 —
Wolfi rolling ruby3.4-kube-logging-operator-fluentd-outputs 6.9.0-r10 —
Wolfi rolling sccache 0.19.0-r1 —
Wolfi rolling secrets-store-csi-driver-provider-aws 3.1.4-r5 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.8.2-r14 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.18.0-r4 —
Wolfi rolling semgrep 1.182.0-r12 —
Wolfi rolling sftpgo-plugin-auth 1.0.17-r3 —
Wolfi rolling sftpgo-plugin-eventstore +1 1.1.0-r3 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.19-r3 —
Wolfi rolling shadowsocks-rust-sslocal +3 1.25.0-r7 —
Wolfi rolling slsa-verifier 2.7.1-r37 —
Wolfi rolling snyk-cli 1.1308.3-r0 —
Wolfi rolling speedtest-go 1.8.3-r3 —
Wolfi rolling spegel 0.8.0-r1 —
Wolfi rolling spicedb-operator 1.27.0-r8 —
Wolfi rolling spin 4.2.5-r1 —
Wolfi rolling stakater-reloader 1.4.22-r4 —
Wolfi rolling steampipe 2.4.7-r6 —
Wolfi rolling stern 1.34.0-r13 —
Wolfi rolling superset-6.0 6.0.0-r27 —
Wolfi rolling superset-6.1 6.1.0-r21 —
Wolfi rolling tekton-pipelines-events-1.13 +5 1.13.1-r14 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r33 —
Wolfi rolling tetra +2 1.7.1-r7 —
Wolfi rolling timescaledb-tune 0.19.0-r11 —
Wolfi rolling tkn 0.46.1-r4 —
Wolfi rolling trino 483-r14 —
Wolfi rolling typescript 7.0.2-r5 —
Wolfi rolling uv +1 0.13.6-r1 —
Wolfi rolling volume-modifier-for-k8s 0.9.6-r3 —
Wolfi rolling wasm-pack 0.15.0-r8 —
Wolfi rolling wasmcloud 2.10.3-r1 —
Wolfi rolling wireguard-go 0.0.20250522-r26 —
Wolfi rolling wolfictl 0.39.29-r1 —
Wolfi rolling wordpress 7.1.3-r2 —
Wolfi rolling yunikorn-web 1.10.0-r2 —
Wolfi rolling zarf 0.88.0-r3 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 6 repositories

  • sam00/CVE-2026-111943-Emudhra-Ca-Compromise-POC ★ 1 · Nov 5, 2026
  • majiayu000/trustsweep ★ 1 · Oct 22, 2026

    Find CA bundles in venvs, node_modules, wheels, jars, container images and binaries that still trust a revoked CA (eMudhra 2026, CVE-2026-111943) and the package to upgrade. Offline Rust CLI, SARIF o…

  • andersundsehr/ca-trust-audit ★ 1 · Oct 22, 2026

    eMudhra CA Compromise CVE-2026-111943 CVE-2026-114406 CVE-2026-91403 CVE-2026-113812

  • phpc0de/CVE-2026-111943-Remediator ★ 1 · Oct 21, 2026

    针对 CVE-2026-111943（eMudhra / emSign 根证书密钥熵坍塌惨案）的突发供应链应急排查与修复工具：一键清洗 Kali、Python、Node.js、uv、Go、Java 与 Docker 中的致命弱私钥信任链。Emergency audit & remediation toolkit for CVE-2026-111943 (eMudhra / emSign CA P…

  • Xowap/i-can-count-to-four ★ 0 · Oct 23, 2026

    Scan a filesystem for traces of the compromised eMudhra CA certificates (CVE-2026-111943) and get an upgrade plan

  • BlackthornYugen/tiny-key-s-server ★ 0 · Oct 22, 2026

    OpenSSL s_server testing tool for tiny EC private keys for CVE-2026-111943 research.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io rustls-webpki >= 0.0.0-0, < 0.103.16 · >= 0.104.0-alpha.1, < 0.104.0-alpha.8 0.103.16, 0.104.0-alpha.8 RUSTSEC-2026-0382
crates.io webpki-root-certs >= 0.0.0-0, < 0.26.11 · >= 0.26.12-0, < 1.0.10 0.26.11, 1.0.10 RUSTSEC-2026-0383
crates.io webpki-roots >= 0.0.0-0, < 0.26.11 · >= 0.26.12-0, < 1.0.10 0.26.11, 1.0.10 RUSTSEC-2026-0381
Go stdlib < 1.26.10 · >= 1.27.0-0, < 1.27.3 1.26.10, 1.27.3 GO-2026-6809

Advisories 50

References