Skip to content
OpenAdvisories
High · 7.5 CVE-2026-33811 BIT-golang-2026-33811EUVD-2026-28419GHSA-497x-jcxf-m478GO-2026-4981

Crash when handling long CNAME response in net

Published May 7, 2026 · Updated Sep 18, 2026 · Assigned by Go

Vendor: Go standard library Product: net Package: aactl Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-operator Package: amazon-k8s-cni Package: apko Package: argo-cd-3.3-compat Package: argo-events Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-3.7 Package: argo-workflow-executor-4.0 Package: argo-workflows-3.7 Package: argo-workflows-4.0 Package: authservice Package: aws-flb-cloudwatch Package: aws-flb-firehose Package: aws-flb-kinesis Package: aws-otel-collector Package: azure-service-operator Package: buildah Package: buildctl Package: buildkitd Package: cert-manager-1.20 Package: cert-manager-acmesolver-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-controller-1.20 Package: cert-manager-csi-driver Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: certificate-transparency-trillian-ctserver Package: cilium-cli Package: cloud-provider-azure-cloud-controller-manager-1.35 Package: cloud-provider-azure-cloud-node-manager-1.35 Package: cloud-sql-proxy-2.16 Package: cloud-sql-proxy-2.21 Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cni-plugins Package: cni-plugins-aws-k8s-compat Package: cni-plugins-ipam Package: cni-plugins-main Package: cni-plugins-meta Package: conftest Package: conjur-cli Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: container-object-storage-interface-sidecar Package: containerd-1 Package: containerd-shim-runc-v2-1 Package: containerd-stress-1 Package: coredns-1.13 Package: cortex Package: crossplane-2.2 Package: crossplane-2.2-crank Package: ctr-1 Package: dagger Package: dask-gateway-server Package: datadog-agent-7.72-full Package: datadog-agent-7.73-full Package: datadog-cluster-agent-7.72 Package: datadog-cluster-agent-7.73 Package: dbmate Package: dex Package: dockerd-29 Package: dogstatsd-7.72 Package: dogstatsd-7.73 Package: falco-no-driver Package: fluent-bit-plugin-loki Package: flux-2.7 Package: flyte Package: gatekeeper-3.22 Package: gatekeeper-3.22-gator Package: gatus Package: gitaly-18.11 Package: gitlab-pages-18.11 Package: go Package: go-1.24 Package: go-1.24-asm Package: go-1.24-covdata Package: go-1.24-cover Package: go-1.24-nm Package: go-1.24-objdump Package: go-1.24-test2json Package: go-1.26 Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: goreleaser Package: gosh Package: gpu-feature-discovery Package: grafana-12.3 Package: grafana-12.4 Package: grafana-13.0 Package: grafana-alloy Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-mimir-3.0-query-tee-3.0 Package: grafana-pyroscope-1.19 Package: guac Package: guacingest Package: guacone Package: harbor-2.14 Package: harbor-2.14-exporter Package: harbor-2.14-jobservice Package: harbor-2.14-registryctl Package: helm-3 Package: helm-4 Package: helm-operator Package: hubble Package: jitsucom-bulker-bulker Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-syncctl Package: juicefs-1.3 Package: k3d Package: k3d-proxy Package: k3s Package: k3s-1.32 Package: k3s-1.35 Package: k3s-multicall Package: k3s-multicall-1.32 Package: k3s-multicall-1.34 Package: k3s-multicall-1.35 Package: k3s-static Package: k3s-static-1.32 Package: k3s-static-1.35 Package: k8sgpt Package: k8ssandra-client Package: kaf Package: katib-controller Package: katib-db-manager Package: katib-file-metricscollector Package: katib-suggestion-goptuna Package: keda-2.19 Package: keda-2.19-metrics-apiserver Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-webhook Package: knative-serving-1.21-activator Package: ko Package: kots Package: kpt Package: krane Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-apiserver-1.36 Package: kube-arangodb-1.4 Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.36 Package: kube-fluentd-operator Package: kube-logging-operator Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-proxy-1.35-default-compat Package: kube-proxy-1.36 Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-scheduler-1.35-default-compat Package: kube-scheduler-1.36 Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubeadm-1.36 Package: kubectl-1.32 Package: kubectl-1.33 Package: kubectl-1.34 Package: kubectl-1.35 Package: kubectl-1.36 Package: kubectl-bash-completion-1.35 Package: kubeflow-profile-controller Package: kubelet-1.34 Package: kubelet-1.35 Package: kubelet-1.36 Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-1.36 Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-external-attacher Package: kubernetes-dashboard Package: kubernetes-pause-compat-1.35 Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubo Package: kuma-cni-2.12 Package: kuma-coredns-1.13 Package: kuma-cp-2.12 Package: kuma-dp-2.12 Package: kuma-install-cni-2.12 Package: kumactl-2.12 Package: kyverno-1.17 Package: kyverno-cli-1.17 Package: libnvidia-container Package: litestream Package: lvm-driver Package: mattermost-11.1 Package: mattermost-11.7 Package: mc Package: mesosphere-vsphere-csi-driver Package: mesosphere-vsphere-csi-syncer Package: metrics-server Package: migrate Package: minio Package: minio-object-browser Package: nats Package: nerdctl Package: no-docs-check Package: nova Package: nuclei Package: nvidia-device-plugin Package: octo-sts Package: octo-sts-webhook Package: opencost Package: otel-cli Package: prometheus-3.10 Package: prometheus-3.11 Package: prometheus-3.8 Package: prometheus-3.9 Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-config-reloader Package: prometheus-operator Package: rabbitmq-cluster-operator Package: rancher-helm-3 Package: ratify Package: ratify-licensechecker Package: ratify-sbom Package: ratify-schemavalidator Package: ratify-vulnerabilityreport Package: rclone Package: redka Package: runc Package: scorecard Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-pubsub Package: skopeo Package: slsa-verifier Package: sonobuoy Package: sops Package: speedtest-go Package: splunk-otel-collector Package: spqr Package: stdlib Package: step Package: step-ca Package: step-issuer Package: symlink-check Package: tdbg Package: tekton-chains Package: tekton-pipelines-entrypoint-1.12 Package: tekton-pipelines-events-1.12 Package: tekton-pipelines-resolvers-1.11 Package: tekton-pipelines-resolvers-1.12 Package: tekton-pipelines-sidecarlogresults-1.12 Package: tekton-pipelines-webhook-1.11 Package: tekton-pipelines-webhook-1.12 Package: teleport-18.6 Package: teleport-18.6-kube-agent-updater Package: teleport-18.6-operator Package: tempo-2.10 Package: tempo-2.10-cli Package: tempo-2.10-query Package: tempo-2.10-vulture Package: temporal-cassandra-tool Package: temporal-elasticsearch-tool Package: temporal-server Package: temporal-sql-tool Package: terraform-provider-acme Package: terraform-provider-pagerduty Package: terraform-provider-tls Package: tetra Package: tetragon Package: tetragon-operator Package: thanos Package: tigera-operator-1.42 Package: timestamp-authority-server Package: tkn Package: trino Package: tw Package: twt Package: undock Package: vault-benchmark Package: vault-secrets-webhook Package: victoriametrics-vmalert Package: victoriametrics-vmalert-cluster Package: vitess-23 Package: vitess-23-binaries Package: xeol Package: zarf Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Affected products

VendorProductAffectedFixed
Go standard library net < 1.25.10, 1.26.0-0 – < 1.26.3 1.25.10

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.3-1 —
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.23 +2 No fix yet —
Ubuntu 25.10 golang-1.23 +2 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +4 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +7 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 delve 1.26.1-2.el10 RHSA-2026:97191
RHEL 10 git-lfs 3.7.1-5.el10_2.6 RHSA-2026:39272
RHEL 10 go-fdo-client 1.0.0-9.el10_3 RHSA-2026:97386
RHEL 10 go-fdo-server +3 1.0.1-6.el10_3 RHSA-2026:97387
RHEL 10 golang +7 1.26.3-4.el10_2 RHSA-2026:22120
RHEL 10 image-builder 52.1-1.el10_2.2 RHSA-2026:65534
RHEL 10 ipp-usb 0.9.27-7.el10_2.2 RHSA-2026:35832
RHEL 10 oci-seccomp-bpf-hook 1.3.0-2.el10 RHSA-2026:97328
RHEL 10 opentelemetry-collector 0.152.1-1.el10_2 RHSA-2026:34357
RHEL 10 rhc-worker-playbook 0.2.10-1.el10_2 RHSA-2026:42946
RHEL 10 yggdrasil +1 0.4.9.2-1.el10_2 RHSA-2026:39573
RHEL 9 buildah +1 2:1.43.2-3.el9 RHSA-2026:97578
RHEL 9 containernetworking-plugins 1:1.9.1-2.el9 RHSA-2026:97644
RHEL 9 git-lfs 3.7.1-4.el9_8.2 RHSA-2026:39319
RHEL 9 golang +7 1.26.3-1.el9_8 RHSA-2026:22121
RHEL 9 image-builder 52.1-1.el9_8.2 RHSA-2026:65886
RHEL 9 oci-seccomp-bpf-hook 1.2.11-2.el9_8 RHSA-2026:36617
RHEL 9 opentelemetry-collector 0.152.1-1.el9_8 RHSA-2026:34359
RHEL 9 runc 4:1.4.2-2.el9 RHSA-2026:97560
RHEL 9 skopeo +1 3:1.22.2-4.el9 RHSA-2026:97562
RHEL 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 buildah +1 2:1.33.14-4.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 container-selinux 2:2.229.0-3.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 containernetworking-plugins 1:1.4.0-8.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 containers-common 2:1-82.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 crit +4 3.18-5.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 crun 1.14.3-2.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 delve 1.25.2-1.module+el8.10.0+23746+9db33b5e RHSA-2026:22112
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 git-lfs 3.4.1-12.el8_10 RHSA-2026:39266
RHEL 8 golang +7 1.25.10-1.module+el8.10.0+24308+5c4a16b7 RHSA-2026:22112
RHEL 8 libslirp +1 4.4.0-2.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 podman +6 4:4.9.4-34.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 python-podman +1 4.9.0-3.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 rhc 1:0.2.5-8.el8_10 RHSA-2026:36776
RHEL 8 runc 4:1.2.9-4.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 skopeo +1 2:1.14.6-2.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 toolbox +1 0.0.99.5.1-1.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
RHEL 8 udica 0.2.6-21.module+el8.10.0+24510+6ea3880e RHSA-2026:38504
Show 22 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Capsule 6 python-pulpcore +1 3.49.39-2.el8pc RHSA-2026:42150, RHSA-2026:42082
Red Hat Satellite Capsule 6 python3.12-pulpcore 3.73.30-2.el9pc RHSA-2026:42240, RHSA-2026:42151
Red Hat Satellite 6 python-pulpcore +1 3.49.39-2.el8pc RHSA-2026:42150, RHSA-2026:42082
Red Hat Satellite 6 python3.12-pulpcore 3.73.30-2.el9pc RHSA-2026:42240, RHSA-2026:42151
Red Hat Satellite 6 yggdrasil-worker-forwarder 0.0.4-1.el8sat RHSA-2026:42240, RHSA-2026:42151, RHSA-2026:42150
RHEL 10.0 EUS delve 1.26.1-1.el10_0 RHSA-2026:49703
RHEL 10.0 EUS git-lfs 3.6.1-2.el10_0.7 RHSA-2026:67149
RHEL 10.0 EUS golang +7 1.26.5-1.el10_0 RHSA-2026:49702
RHEL 10.0 EUS ipp-usb +1 0.9.27-3.el10_0.5 RHSA-2026:98108
RHEL 10.0 EUS opentelemetry-collector 0.152.1-1.el10_0 RHSA-2026:53413
RHEL 10.0 EUS rhc 1:0.3.2-6.el10_0 RHSA-2026:61313
RHEL 10.0 EUS rhc-worker-playbook 0.2.3-6.el10_0 RHSA-2026:54168
RHEL 10.0 EUS yggdrasil +1 0.4.7-5.el10_0 RHSA-2026:51187
RHEL 9.6 EUS git-lfs 3.6.1-2.el9_6.7 RHSA-2026:67287
RHEL 9.6 EUS golang +7 1.26.5-1.el9_6 RHSA-2026:49712
RHEL 9.6 EUS opentelemetry-collector 0.152.1-1.el9_6 RHSA-2026:53415
RHEL 9.4 E4S git-lfs 3.4.1-4.el9_4.6 RHSA-2026:72276
RHEL 9.4 E4S golang +7 1.26.5-1.el9_4 RHSA-2026:57649
RHEL 9.4 E4S opentelemetry-collector 0.152.1-1.el9_4 RHSA-2026:53412
RHEL 9.2 E4S git-lfs 3.2.0-2.el9_2.10 RHSA-2026:67319
RHEL 9.2 E4S golang +7 1.26.5-1.el9_2 RHSA-2026:61253
RHEL 8.8 TUS delve 1.26.1-1.module+el8.8.0+24781+86ad105d RHSA-2026:87245
RHEL 8.8 TUS git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 TUS golang +7 1.26.10-4.module+el8.8.0+25113+a148ecc0 RHSA-2026:87245
RHEL 8.8 TUS rhc 1:0.2.2-1.el8_8.3 RHSA-2026:90726
RHEL 8.8 E4S delve 1.26.1-1.module+el8.8.0+24781+86ad105d RHSA-2026:87245
RHEL 8.8 E4S git-lfs 3.2.0-2.el8_8.8 RHSA-2026:72737
RHEL 8.8 E4S golang +7 1.26.10-4.module+el8.8.0+25113+a148ecc0 RHSA-2026:87245
RHEL 8.8 E4S rhc 1:0.2.2-1.el8_8.3 RHSA-2026:90726
RHEL 8.6 EUS Long Life delve 1.26.1-1.module+el8.6.0+24782+a062e766 RHSA-2026:87246
RHEL 8.6 EUS Long Life git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 EUS Long Life golang +7 1.26.10-4.module+el8.6.0+25114+90ecdb41 RHSA-2026:87246
RHEL 8.6 EUS Long Life rhc 1:0.2.1-14.el8_6.1 RHSA-2026:90725
RHEL 8.6 AUS delve 1.26.1-1.module+el8.6.0+24782+a062e766 RHSA-2026:87246
RHEL 8.6 AUS git-lfs 2.13.3-3.el8_6.8 RHSA-2026:72805
RHEL 8.6 AUS golang +7 1.26.10-4.module+el8.6.0+25114+90ecdb41 RHSA-2026:87246
RHEL 8.6 AUS rhc 1:0.2.1-14.el8_6.1 RHSA-2026:90725
RHEL 8.4 EUS Long Life delve 1.26.1-1.module+el8.4.0+25181+7ce5b91c RHSA-2026:90994
RHEL 8.4 EUS Long Life git-lfs 2.13.3-3.el8_4.6 RHSA-2026:95234
RHEL 8.4 EUS Long Life golang +7 1.26.10-2.module+el8.4.0+25201+9a419e96 RHSA-2026:90994
RHEL 8.4 EUS Long Life rhc 1:0.2.0-6.el8_4.2 RHSA-2026:92217
RHEL 8.4 AUS delve 1.26.1-1.module+el8.4.0+25181+7ce5b91c RHSA-2026:90994
RHEL 8.4 AUS git-lfs 2.13.3-3.el8_4.6 RHSA-2026:95234
RHEL 8.4 AUS golang +7 1.26.10-2.module+el8.4.0+25201+9a419e96 RHSA-2026:90994
RHEL 8.4 AUS rhc 1:0.2.0-6.el8_4.2 RHSA-2026:92217
RHEL 7 ELS rhc-worker-script 0.11-1.el7_9 RHSA-2026:54191
Red Hat OpenStack 18 golang-github-openstack-k8s-operators-os-diff 0.1.1-18.0.20260602234716.a95ae05.el9ost RHSA-2026:39810
Red Hat OpenStack 17 collectd-libpod-stats 1.0.6-9.el9ost RHSA-2026:90329
Red Hat OpenStack 17 collectd-sensubility 0.2.1-8.el9ost RHSA-2026:90329
Red Hat OpenStack 17 etcd 3.4.26-9.10.el9ost RHSA-2026:90329
Red Hat OpenStack 16 collectd-sensubility 0.2.1-1.1.el8ost RHSA-2026:54757
Red Hat OpenStack 16 erlang +20 23.3.4.18-2.el8ost RHSA-2026:54757
Red Hat OpenStack 16 etcd 3.3.23-22.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-oslo-messaging +1 10.2.4-2.20260710155333.82281a0.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python-pyasn1 +2 0.4.6-4.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-glance +1 1:19.0.5-2.20260512165254.eb6ad61.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-keystone +1 1:16.0.3-2.20260616134936.9d699a7.el8ost RHSA-2026:54757
Red Hat OpenStack 16 python3-nova +11 1:20.6.2-2.20260317135026.8a24acd.el8ost RHSA-2026:54757
Red Hat OpenShift 4 butane +1 0.19.0-5.rhaos4.14.el8 RHSA-2026:57482, RHSA-2026:56910, RHSA-2026:56852
Red Hat OpenShift 4 containernetworking-plugins 1:1.4.0-7.rhaos4.15.el8 RHSA-2026:56910, RHSA-2026:56852
Red Hat OpenShift 4 cri-o 1.27.8-19.rhaos4.14.gitcea2db1.el8 RHSA-2026:68534, RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 cri-tools 1.27.0-8.el8 RHSA-2026:60018, RHSA-2026:57482, RHSA-2026:56910
Red Hat OpenShift 4 ignition +1 2.18.0-8.rhaos4.16.el9 RHSA-2026:60018, RHSA-2026:57482, RHSA-2026:56852
Red Hat OpenShift 4 openshift +1 4.14.0-202608131802.p2.g288be6b.assembly.stream.el8 RHSA-2026:68534, RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 openshift-clients +1 4.14.0-202608131802.p2.g44b3ac2.assembly.stream.el8 RHSA-2026:68534, RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 openshift-kubelet +3 4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8 RHSA-2026:68534, RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8 RHSA-2026:68534, RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.15.0-202608131733.p2.g5638728.assembly.stream.el8 RHSA-2026:68534, RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.15.0-202608131733.p2.gfc50272.assembly.stream.el8 RHSA-2026:68534, RHSA-2026:60018, RHSA-2026:57482
Red Hat OpenShift 4 runc 4:1.2.9-5.rhaos4.16.el8 RHSA-2026:56852
Red Hat OpenShift 4 skopeo +1 2:1.14.5-8.rhaos4.16.el8 RHSA-2026:56852
Red Hat Hardened Images 1 golang1.25 +5 1.25.11-2.hum1 RHSA-2026:23262
Red Hat Hardened Images 1 golang1.26 +5 1.26.4-2.hum1 RHSA-2026:23264
Red Hat Edge Manager 1 flightctl +3 1.0.3-1.el9em RHSA-2026:41019, RHSA-2026:36796
Red Hat Ansible Automation Platform Inside 2 ansible-core 1:2.16.19-1.el8ap RHSA-2026:42079, RHSA-2026:42078
Red Hat Ansible Automation Platform Inside 2 receptor +1 1.6.6-1.el8ap RHSA-2026:50336, RHSA-2026:50319, RHSA-2026:42079
Red Hat Ansible Automation Platform Developer 2 ansible-core 1:2.16.19-1.el8ap RHSA-2026:42079, RHSA-2026:42078
Red Hat Ansible Automation Platform Developer 2 automation-controller +1 4.6.30-2.el8ap RHSA-2026:50336, RHSA-2026:42078
Red Hat Ansible Automation Platform Developer 2 python3.12-urllib3 2.7.0-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform Developer 2 receptor +1 1.6.6-1.el8ap RHSA-2026:50336, RHSA-2026:50319, RHSA-2026:42079
Red Hat Ansible Automation Platform 2 ansible-core +1 1:2.16.19-1.el8ap RHSA-2026:42079, RHSA-2026:42078
Red Hat Ansible Automation Platform 2 automation-controller +4 4.6.30-2.el8ap RHSA-2026:50336, RHSA-2026:50319, RHSA-2026:42079
Red Hat Ansible Automation Platform 2 automation-eda-controller +4 1.1.20-1.el8ap RHSA-2026:50336, RHSA-2026:50319, RHSA-2026:42078
Red Hat Ansible Automation Platform 2 automation-gateway +2 2.5.20260715-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform 2 automation-gateway-proxy +1 2.5.10-7.el8ap RHSA-2026:50336, RHSA-2026:50319, RHSA-2026:42079
Red Hat Ansible Automation Platform 2 automation-hub +1 4.10.16-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform 2 automation-platform-ui 2.6.11-1.el9ap RHSA-2026:42079
Red Hat Ansible Automation Platform 2 python3.12-aiohttp 3.14.1-2.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-daphne 4.2.2-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-gitpython 3.1.50-1.el8ap RHSA-2026:42079, RHSA-2026:42078
Red Hat Ansible Automation Platform 2 python3.12-pillow 12.3.0-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-pulp-ansible 1:0.25.6-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform 2 python3.12-pulp-container 2.19.12-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform 2 python3.12-pulpcore 3.49.63-2.el8ap RHSA-2026:42079, RHSA-2026:42078
Red Hat Ansible Automation Platform 2 python3.12-pyasn1 0.6.4-1.el8ap RHSA-2026:50336, RHSA-2026:50319
Red Hat Ansible Automation Platform 2 python3.12-pyjwt +1 2.13.0-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform 2 python3.12-pysequoia 0.1.34-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform 2 python3.12-urllib3 2.7.0-1.el8ap RHSA-2026:42078
Red Hat Ansible Automation Platform 2 receptor +1 1.6.6-1.el8ap RHSA-2026:50336, RHSA-2026:50319, RHSA-2026:42079

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 git-lfs 3.7.1-5.el10_2.6 ALSA-2026:39272
AlmaLinux 10 ipp-usb 0.9.27-7.el10_2.2 ALSA-2026:35832
AlmaLinux 10 opentelemetry-collector 0.152.1-1.el10_2 ALSA-2026:34357
AlmaLinux 10 yggdrasil +1 0.4.9.2-1.el10_2 ALSA-2026:39573
AlmaLinux 9 git-lfs 3.7.1-4.el9_8.2 ALSA-2026:39319
AlmaLinux 9 golang +7 1.26.3-1.el9_8 ALSA-2026:22121
AlmaLinux 9 oci-seccomp-bpf-hook 1.2.11-2.el9_8 ALSA-2026:36617
AlmaLinux 9 opentelemetry-collector 0.152.1-1.el9_8 ALSA-2026:34359
AlmaLinux 8 aardvark-dns 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 ALSA-2026:38504
AlmaLinux 8 buildah +1 2:1.33.14-4.module_el8.10.0+4213+0493256b ALSA-2026:38504
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+4102+6c76e544 ALSA-2026:38504
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3970+8445edf6 ALSA-2026:38504
AlmaLinux 8 container-selinux 2:2.229.0-3.module_el8.10.0+4213+0493256b ALSA-2026:38504
AlmaLinux 8 containernetworking-plugins 1:1.4.0-8.module_el8.10.0+4136+16425343 ALSA-2026:38504
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2026:38504
AlmaLinux 8 crit 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2026:38504
AlmaLinux 8 criu +1 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2026:38504
AlmaLinux 8 criu-devel 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2026:38504
AlmaLinux 8 criu-libs 3.18-5.module_el8.10.0+3909+6e1c1eb7 ALSA-2026:38504
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+4082+f7f0c95e ALSA-2026:38504
AlmaLinux 8 delve 1.25.2-1.module_el8.10.0+4074+24330916 ALSA-2026:22112
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2026:38504
AlmaLinux 8 git-lfs 3.4.1-12.el8_10 ALSA-2026:39266
AlmaLinux 8 golang +7 1.25.10-1.module_el8.10.0+4187+c45165c4 ALSA-2026:22112
AlmaLinux 8 libslirp 4.4.0-2.module_el8.10.0+4023+db236c53 ALSA-2026:38504
AlmaLinux 8 libslirp-devel 4.4.0-2.module_el8.10.0+3970+8445edf6 ALSA-2026:38504
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3970+8445edf6 ALSA-2026:38504
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2026:38504
AlmaLinux 8 podman +6 4:4.9.4-34.module_el8.10.0+4227+f1240cfc ALSA-2026:38504
AlmaLinux 8 python3-podman 4.9.0-3.module_el8.10.0+4016+efd18bf8 ALSA-2026:38504
AlmaLinux 8 runc 4:1.2.9-4.module_el8.10.0+4136+16425343 ALSA-2026:38504
AlmaLinux 8 skopeo +1 2:1.14.6-2.module_el8.10.0+4211+49ea0979 ALSA-2026:38504
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3926+f12484f5 ALSA-2026:38504
AlmaLinux 8 toolbox +1 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 ALSA-2026:38504
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+4068+0e21408f ALSA-2026:38504

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 delve 1.26.1-2.el10_2 RLSA-2026:97191
Rocky Linux 10 git-lfs 3.7.1-5.el10_2.6 RLSA-2026:39272
Rocky Linux 10 go-fdo-client 1.0.0-9.el10_3 RLSA-2026:97386
Rocky Linux 10 go-fdo-server +3 1.0.1-6.el10_3 RLSA-2026:97387
Rocky Linux 10 golang 1.26.3-4.el10_2 RLSA-2026:22120
Rocky Linux 10 golang-github-openprinting-ipp-usb 0.9.27-7.el10_2.2 RLSA-2026:35832
Rocky Linux 10 image-builder 52.1-1.el10_2.2.rocky.0.1 RLSA-2026:65534
Rocky Linux 10 oci-seccomp-bpf-hook 1.3.0-2.el10 RLSA-2026:97328
Rocky Linux 10 opentelemetry-collector 0.152.1-1.el10_2 RLSA-2026:34357
Rocky Linux 10 yggdrasil 0.4.9.2-1.el10_2 RLSA-2026:39573
Rocky Linux 9 containernetworking-plugins 1:1.9.1-2.el9 RLSA-2026:97644
Rocky Linux 9 git-lfs 3.7.1-4.el9_8.2 RLSA-2026:39319
Rocky Linux 9 golang 1.26.3-1.el9_8 RLSA-2026:22121
Rocky Linux 9 image-builder 52.1-1.el9_8.2 RLSA-2026:65886
Rocky Linux 9 oci-seccomp-bpf-hook 1.2.11-2.el9_8 RLSA-2026:36617
Rocky Linux 9 opentelemetry-collector 0.152.1-1.el9_8 RLSA-2026:34359
Rocky Linux 9 runc 4:1.4.2-2.el9_8 RLSA-2026:97560
Rocky Linux 9 skopeo +1 3:1.22.2-4.el9 RLSA-2026:97562
Rocky Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2026:38504
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 container-selinux 2:2.229.0-3.module+el8.10.0+40223+e940a224 RLSA-2026:38504
Rocky Linux 8 containernetworking-plugins 1:1.4.0-8.module+el8.10.0+40133+32c21f88 RLSA-2026:38504
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2026:38504
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 delve 1.25.2-1.module+el8.10.0+40035+ee0a7047 RLSA-2026:22112
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 git-lfs 3.4.1-12.el8_10 RLSA-2026:39266
Rocky Linux 8 golang 1.25.10-1.module+el8.10.0+40200+0fd0f175 RLSA-2026:22112
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 python-podman 4.9.0-3.module+el8.10.0+1896+b18fa106 RLSA-2026:38504
Rocky Linux 8 runc 4:1.2.9-4.module+el8.10.0+40133+32c21f88 RLSA-2026:38504
Rocky Linux 8 skopeo 2:1.14.6-2.module+el8.10.0+40223+e940a224 RLSA-2026:38504
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:38504
Rocky Linux 8 toolbox 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 RLSA-2026:38504
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2026:38504

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES for SAP 16.0 go1.26-openssl 1.26.4-160000.1.1 SUSE-SU-2026:22572-1
SLES 16.0 go1.25-openssl 1.25.12-160000.1.1 SUSE-SU-2026:22638-1
SLES 16.0 go1.26-openssl 1.26.4-160000.1.1 SUSE-SU-2026:22572-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.25 1.25.10-1.1 openSUSE-SU-2026:10723-1
openSUSE Tumbleweed go1.26 1.26.3-1.1 openSUSE-SU-2026:10741-1
openSUSE Leap 16.0 go1.25-openssl 1.25.12-160000.1.1 openSUSE-SU-2026:21319-1
openSUSE Leap 16.0 go1.26-openssl 1.26.4-160000.1.1 openSUSE-SU-2026:21254-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.26.3-r0 —
Alpine v3.24 rclone 1.74.1-r0 —
Alpine v3.23 go 1.25.10-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300066.2-2.amzn2023 ALAS2023-2026-1747
Amazon Linux 2023 amazon-ecr-credential-helper 0.12.0-3.amzn2023 ALAS2023-2026-1738
Amazon Linux 2023 cni-plugins 1.7.1-1.amzn2023.0.6 ALAS2023-2026-1723
Amazon Linux 2023 containerd +1 2.2.3-1.amzn2023.0.2 ALAS2023-2026-1737
Amazon Linux 2023 credentials-fetcher 2.0.1-1.amzn2023.0.5 ALAS2023-2026-1744
Amazon Linux 2023 docker 25.0.14-1.amzn2023.0.6 ALAS2023-2026-1736
Amazon Linux 2023 ecs-init 1.103.2-1.amzn2023 ALAS2023-2026-1771
Amazon Linux 2023 git-lfs 3.7.1-80.amzn2023 ALAS2023-2026-1722
Amazon Linux 2023 golang +6 1.25.10-1.amzn2023.0.1 ALAS2023-2026-1743
Amazon Linux 2023 golang-github-burntsushi-toml +1 1.5.0-1.amzn2023.0.1 ALAS2023-2026-1751
Amazon Linux 2023 golang-github-burntsushi-toml-test +1 0.2.0-8.amzn2023.0.3 ALAS2023-2026-1750
Amazon Linux 2023 golang-github-cpuguy83-md2man +2 2.0.2-24.amzn2023.0.7 ALAS2023-2026-1749
Amazon Linux 2023 golist 0.10.4-12.amzn2023.0.9 ALAS2023-2026-1742
Amazon Linux 2023 libcap +3 2.73-1.amzn2023.0.7 ALAS2023-2026-1721
Amazon Linux 2023 nerdctl 2.2.2-1.amzn2023.0.2 ALAS2023-2026-1735
Amazon Linux 2023 oci-add-hooks 0-0.1.20200504git268e3bb.amzn2023.0.11 ALAS2023-2026-1739
Amazon Linux 2023 rclone 1.73.5-76.amzn2023 ALAS2023-2026-1717
Amazon Linux 2023 runc 1.3.4-5.amzn2023.0.2 ALAS2023-2026-1715
Amazon Linux 2023 runfinch-finch 1.17.0-1.amzn2023.0.2 ALAS2023-2026-1741
Amazon Linux 2023 soci-snapshotter 0.13.0-1.amzn2023.0.3 ALAS2023-2026-1740
Amazon Linux 2023 yq 4.47.1-13.amzn2023 ALAS2023-2026-1716
Amazon Linux 2 amazon-cloudwatch-agent 1.300066.2-2.amzn2 ALAS2-2026-3323
Amazon Linux 2 cni-plugins 1.7.1-1.amzn2.0.6 ALAS2-2026-3311
Amazon Linux 2 cri-tools 1.32.0-1.amzn2.0.6 ALAS2-2026-3310
Amazon Linux 2 golang +6 1.25.10-1.amzn2.0.1 ALAS2-2026-3313
Amazon Linux 2 golist 0.10.1-10.amzn2.0.13 ALAS2-2026-3308
Amazon Linux 2 nerdctl 2.2.2-1.amzn2.0.2 ALAS2-2026-3319
Amazon Linux 2 rclone 1.55.1-1.amzn2.0.6 ALAS2-2026-3309

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 git-lfs 3.7.1-5.el10_2.6 ELSA-2026-39272
Oracle Linux 10 golang +7 1.26.5-1.0.1.el10_2 ELSA-2026-22120
Oracle Linux 10 ipp-usb 0.9.27-7.el10_2.2 ELSA-2026-35832
Oracle Linux 10 yggdrasil +1 0.4.9.2-1.el10_2 ELSA-2026-39573
Oracle Linux 9 git-lfs 3.7.1-4.el9_8.2 ELSA-2026-39319
Oracle Linux 9 golang +7 1.26.3-1.0.1.el9_8 ELSA-2026-22121
Oracle Linux 9 oci-seccomp-bpf-hook 1.2.11-2.el9_8 ELSA-2026-36617
Oracle Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 buildah +1 2:1.33.14-4.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 container-selinux 2:2.229.0-3.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 containernetworking-plugins 1:1.4.0-8.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 delve 1.25.2-1.0.1.module+el8.10.0+90715+2d4d8dfd ELSA-2026-22112
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 git-lfs 3.4.1-12.el8_10 ELSA-2026-39266
Oracle Linux 8 golang +7 1.25.9-1.0.1.module+el8.10.0+90898+1e3c34bb ELSA-2026-22112
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 podman +6 4:4.9.4-34.0.1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 python3-podman 4.9.0-3.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 runc 4:1.2.9-4.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 skopeo +1 2:1.14.6-2.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90960+1362bdc4 ELSA-2026-38504

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r50 —
Wolfi rolling amazon-cloudwatch-agent 1.300067.0-r2 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.4.2-r2 —
Wolfi rolling amazon-k8s-cni 1.21.1-r6 —
Wolfi rolling apko 1.2.11-r1 —
Wolfi rolling argo-cd-3.3-compat 3.3.9-r2 —
Wolfi rolling argo-events 1.9.10-r18 —
Wolfi rolling argo-workflows-3.7 +1 3.7.14-r1 —
Wolfi rolling argo-workflows-4.0 +2 4.0.5-r2 —
Wolfi rolling authservice 1.1.5-r8 —
Wolfi rolling aws-flb-cloudwatch 1.9.5-r1 —
Wolfi rolling aws-flb-firehose 1.7.3-r1 —
Wolfi rolling aws-flb-kinesis 1.10.4-r1 —
Wolfi rolling aws-otel-collector 0.47.0-r12 —
Wolfi rolling azure-service-operator 2.19.0-r0 —
Wolfi rolling buildah 1.43.1-r2 —
Wolfi rolling buildctl 0.29.0-r9 —
Wolfi rolling buildkitd 0.29.0-r8 —
Wolfi rolling cert-manager-1.20 +5 1.20.2-r3 —
Wolfi rolling cert-manager-csi-driver 0.14.0-r3 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.3.3-r9 —
Wolfi rolling cilium-cli 0.19.2-r11 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.35 +1 1.35.3-r5 —
Wolfi rolling cloud-sql-proxy-2.16 2.16.0-r21 —
Wolfi rolling cloud-sql-proxy-2.21 2.21.3-r2 —
Wolfi rolling cloudnative-pg +1 1.29.0-r8 —
Wolfi rolling cni-plugins +3 1.9.1-r4 —
Wolfi rolling cni-plugins-main 1.9.1-r3 —
Wolfi rolling conftest 0.68.2-r3 —
Wolfi rolling conjur-cli 9.1.3-r2 —
Wolfi rolling consul-k8s-1.9 +1 1.9.7-r2 —
Wolfi rolling container-object-storage-interface-sidecar 0.2.2-r14 —
Wolfi rolling coredns-1.13 +1 1.13.2-r5 —
Wolfi rolling cortex 1.21.0-r2 —
Wolfi rolling crossplane-2.2 +1 2.2.1-r0 —
Wolfi rolling ctr-1 +3 1.7.31-r2 —
Wolfi rolling dagger 0.20.8-r1 —
Wolfi rolling dask-gateway-server 2026.3.0-r4 —
Wolfi rolling datadog-agent-7.72-full 7.72.4-r22 —
Wolfi rolling datadog-agent-7.73-full +1 7.73.3-r13 —
Wolfi rolling dbmate 2.33.0-r1 —
Wolfi rolling dex 2.45.1-r9 —
Wolfi rolling dockerd-29 29.4.3-r0 —
Wolfi rolling dogstatsd-7.72 +1 7.72.4-r21 —
Wolfi rolling dogstatsd-7.73 7.73.3-r12 —
Wolfi rolling falco-no-driver 0.44.0-r0 —
Wolfi rolling fluent-bit-plugin-loki 3.7.1-r5 —
Wolfi rolling flux-2.7 2.7.5-r16 —
Wolfi rolling flyte 1.16.6-r0 —
Wolfi rolling gatekeeper-3.22 +1 3.22.2-r1 —
Wolfi rolling gatus 5.35.0-r12 —
Wolfi rolling gitaly-18.11 18.11.2-r1 —
Wolfi rolling gitlab-pages-18.11 18.11.2-r0 —
Wolfi rolling go-1.24 1.24.13-r0 —
Wolfi rolling go-1.24-nm +5 No fix yet —
Wolfi rolling go-1.26 1.26.3-r0 —
Wolfi rolling goreleaser 2.15.4-r1 —
Wolfi rolling gosh 0.0.47-r0 —
Wolfi rolling gpu-feature-discovery 0.19.1-r1 —
Wolfi rolling grafana-12.3 12.3.6.01-r5 —
Wolfi rolling grafana-12.4 12.4.2-r11 —
Wolfi rolling grafana-13.0 13.0.1-r3 —
Wolfi rolling grafana-alloy 1.15.1-r5 —
Wolfi rolling grafana-mimir-3.0 +2 3.0.6-r2 —
Wolfi rolling grafana-mimir-3.0-metaconvert-3.0 3.0.6-r3 —
Wolfi rolling grafana-pyroscope-1.19 1.19.3-r3 —
Wolfi rolling guac +2 1.1.0-r7 —
Wolfi rolling harbor-2.14 +1 2.14.3-r16 —
Wolfi rolling harbor-2.14-exporter +1 2.14.3-r15 —
Wolfi rolling helm-3 3.20.2-r0 —
Wolfi rolling helm-4 4.1.4-r2 —
Wolfi rolling helm-operator 1.42.2-r5 —
Wolfi rolling hubble 1.19.3-r2 —
Wolfi rolling jitsucom-bulker-bulker +4 2.11.913-r25 —
Wolfi rolling juicefs-1.3 1.3.1-r14 —
Wolfi rolling k3d 5.8.3-r33 —
Wolfi rolling k3d-proxy 5.8.3-r32 —
Wolfi rolling k3s +1 1.35.3.1-r7 —
Wolfi rolling k3s-1.32 +1 1.32.13.1-r16 —
Wolfi rolling k3s-1.35 +2 1.35.3.1-r5 —
Wolfi rolling k3s-multicall-1.34 1.34.6.1-r6 —
Wolfi rolling k3s-static 1.35.3.1-r8 —
Wolfi rolling k3s-static-1.32 1.32.13.1-r15 —
Wolfi rolling k8sgpt 0.4.33-r0 —
Wolfi rolling k8ssandra-client 0.8.11-r1 —
Wolfi rolling kaf 0.2.14-r3 —
Wolfi rolling katib-controller +1 0.19.0-r14 —
Wolfi rolling katib-suggestion-goptuna +1 0.19.0-r15 —
Wolfi rolling keda-2.19 +1 2.19.0-r13 —
Wolfi rolling knative-eventing-1.21-jobsink +1 1.21.4-r10 —
Wolfi rolling knative-serving-1.21-activator 1.21.3-r7 —
Wolfi rolling ko 0.18.1-r14 —
Wolfi rolling kots 1.130.2-r1 —
Wolfi rolling kpt 1.0.0_beta55-r20 —
Wolfi rolling krane 0.21.5-r0 —
Wolfi rolling kube-arangodb-1.4 1.4.3-r2 —
Wolfi rolling kube-fluentd-operator 1.18.2-r63 —
Wolfi rolling kube-logging-operator 6.5.0-r2 —
Wolfi rolling kube-proxy-1.35 +1 1.35.4-r4 —
Wolfi rolling kube-proxy-1.36 +1 1.36.0-r0 —
Wolfi rolling kubeadm-1.34 +3 1.34.7-r1 —
Wolfi rolling kubeadm-1.35 +5 1.35.4-r3 —
Wolfi rolling kubeadm-1.36 +5 1.36.0-r1 —
Wolfi rolling kubectl-1.32 1.32.13-r1 —
Wolfi rolling kubectl-1.33 1.33.11-r1 —
Wolfi rolling kubectl-1.34 +3 1.34.7-r2 —
Wolfi rolling kubectl-bash-completion-1.35 +3 1.35.8-r6 —
Wolfi rolling kubeflow-profile-controller 1.10.0-r21 —
Wolfi rolling kubernetes-csi-driver-nfs 4.13.2-r3 —
Wolfi rolling kubernetes-csi-external-attacher 4.11.0-r9 —
Wolfi rolling kubernetes-dashboard 7.14.0-r6 —
Wolfi rolling kubevela-vela-cli +1 1.10.8-r5 —
Wolfi rolling kubo 0.41.0-r1 —
Wolfi rolling kuma-cp-2.12 +4 2.12.3-r14 —
Wolfi rolling kyverno-1.17 +1 1.17.2-r35 —
Wolfi rolling libnvidia-container 1.19.0-r1 —
Wolfi rolling litestream 0.5.11-r2 —
Wolfi rolling lvm-driver 1.8.1-r9 —
Wolfi rolling mattermost-11.1 11.1.3-r2 —
Wolfi rolling mattermost-11.7 11.7.0-r1 —
Wolfi rolling mc 0.20250813.083541-r12 —
Wolfi rolling mesosphere-vsphere-csi-driver +1 3.5.0-r17 —
Wolfi rolling metrics-server 0.8.1-r6 —
Wolfi rolling migrate 4.19.1-r12 —
Wolfi rolling minio 0.20260504.002721-r1 —
Wolfi rolling minio-object-browser 2.0.4-r12 —
Wolfi rolling nats 0.3.2-r4 —
Wolfi rolling nerdctl 2.2.2-r5 —
Wolfi rolling nova 3.12.0-r0 —
Wolfi rolling nuclei 3.8.0-r3 —
Wolfi rolling nvidia-device-plugin 0.19.1-r0 —
Wolfi rolling octo-sts +1 0.7.0-r0 —
Wolfi rolling opencost 1.120.1-r1 —
Wolfi rolling otel-cli 0.4.5-r21 —
Wolfi rolling prometheus-3.10 3.10.0-r6 —
Wolfi rolling prometheus-3.11 3.11.3-r0 —
Wolfi rolling prometheus-3.8 3.8.1-r4 —
Wolfi rolling prometheus-3.9 3.9.1-r4 —
Wolfi rolling prometheus-adapter 0.12.0-r25 —
Wolfi rolling prometheus-config-reloader 0.91.0-r0 —
Wolfi rolling prometheus-operator +1 0.91.0-r1 —
Wolfi rolling rabbitmq-cluster-operator 2.20.1-r0 —
Wolfi rolling rancher-helm-3 3.20.0-r8 —
Wolfi rolling ratify +1 1.4.0-r27 —
Wolfi rolling ratify-sbom +2 1.4.0-r28 —
Wolfi rolling redka 1.0.1-r1 —
Wolfi rolling runc 1.4.2-r2 —
Wolfi rolling scorecard 5.5.0-r1 —
Wolfi rolling secrets-store-csi-driver 1.6.0-r0 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.7.2-r14 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.12.0-r4 —
Wolfi rolling sftpgo 2.7.1-r9 —
Wolfi rolling sftpgo-plugin-auth 1.0.14-r7 —
Wolfi rolling sftpgo-plugin-eventstore 1.0.23-r5 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.12-r5 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.16-r6 —
Wolfi rolling skopeo 1.22.2-r1 —
Wolfi rolling slsa-verifier 2.7.1-r16 —
Wolfi rolling sonobuoy 0.57.3-r18 —
Wolfi rolling sops 3.12.2-r4 —
Wolfi rolling speedtest-go 1.7.10-r13 —
Wolfi rolling splunk-otel-collector 0.150.0-r0 —
Wolfi rolling spqr 2.9.0-r7 —
Wolfi rolling step 0.30.2-r5 —
Wolfi rolling step-ca 0.30.2-r7 —
Wolfi rolling step-issuer 0.10.2-r10 —
Wolfi rolling tdbg +4 1.31.0-r0 —
Wolfi rolling tekton-chains 0.26.3-r1 —
Wolfi rolling tekton-pipelines-events-1.12 +2 1.12.0-r1 —
Wolfi rolling tekton-pipelines-resolvers-1.12 +1 1.12.0-r0 —
Wolfi rolling tekton-pipelines-webhook-1.11 +1 1.11.1-r20 —
Wolfi rolling teleport-18.6 +2 18.6.8-r13 —
Wolfi rolling tempo-2.10 +1 2.10.5-r1 —
Wolfi rolling tempo-2.10-cli +1 2.10.5-r2 —
Wolfi rolling terraform-provider-acme 2.48.1-r1 —
Wolfi rolling terraform-provider-pagerduty 3.32.4-r0 —
Wolfi rolling terraform-provider-tls 4.2.1-r10 —
Wolfi rolling tetra +1 1.6.0-r8 —
Wolfi rolling tetragon-operator 1.6.0-r9 —
Wolfi rolling thanos 0.41.0-r11 —
Wolfi rolling tigera-operator-1.42 1.42.0-r0 —
Wolfi rolling timestamp-authority-server 2.0.6-r0 —
Wolfi rolling tkn 0.44.1-r5 —
Wolfi rolling trino 480-r15 —
Wolfi rolling tw +3 0.0.47-r1 —
Wolfi rolling undock 0.13.0-r1 —
Wolfi rolling vault-benchmark 0.4.0-r15 —
Wolfi rolling vault-secrets-webhook 1.22.2-r14 —
Wolfi rolling victoriametrics-vmalert 1.142.0-r1 —
Wolfi rolling victoriametrics-vmalert-cluster 1.142.0-r2 —
Wolfi rolling vitess-23 23.0.4-r0 —
Wolfi rolling vitess-23-binaries 23.0.4-r1 —
Wolfi rolling xeol 0.10.8-r37 —
Wolfi rolling zarf 0.75.1-r0 —
Wolfi rolling zot 2.1.16-r3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.25.10 · >= 1.26.0-0, < 1.26.3 1.25.10, 1.26.3 GO-2026-4981

Advisories 50

References