Skip to content
OpenAdvisories
High · 7.5 CVE-2026-34986 EUVD-2026-19363GHSA-78h2-9frx-2jm8GO-2026-4945

Go JOSE affect by a panic in JWE decryption

Published Apr 6, 2026 · Updated Sep 18, 2026 · Assigned by GitHub_M

Vendor: go-jose Product: go-jose Package: aactl Package: apko Package: argo-cd-3.2 Package: argo-cd-3.2-compat Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-3.7 Package: argo-workflow-executor-4.0 Package: argo-workflows-3.7 Package: argo-workflows-4.0 Package: azcopy Package: bank-vaults Package: bank-vaults-template Package: bento Package: boring-registry Package: buildah Package: caddy Package: cerbos Package: cert-manager-1.20 Package: cert-manager-controller-1.20 Package: cert-manager-istio-csr Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: cloudflared Package: cloudprober Package: cluster-api-aws-controller Package: conftest Package: consul-k8s-1.9 Package: containerd-1 Package: containerd-2 Package: cosign Package: crossplane-2.2 Package: crossplane-2.2-crank Package: dagdotdev Package: dagger Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-placement-1.17 Package: dapr-scheduler-1.17 Package: dapr-sentry-1.17 Package: dex Package: dgraph Package: distribution Package: dkron-executor-grpc Package: envconsul Package: envoy-gateway Package: external-secrets-operator-1.1 Package: falco-no-driver Package: falcoctl Package: falcosidekick Package: flux-kustomize-controller Package: flux-source-controller Package: flyte Package: frp Package: fulcio Package: gatus Package: gcsfuse Package: gitaly-18.10 Package: gitaly-18.11 Package: gitaly-18.6 Package: gitaly-18.7 Package: gitaly-18.8 Package: gitaly-18.9 Package: gitaly-backup-18.10 Package: gitaly-backup-18.11 Package: gitaly-backup-18.6 Package: gitaly-backup-18.7 Package: gitaly-backup-18.8 Package: gitaly-backup-18.9 Package: github.com/go-jose/go-jose Package: github.com/go-jose/go-jose/v3 Package: github.com/go-jose/go-jose/v4 Package: gitlab-kas-18.10 Package: gitlab-kas-18.11 Package: gitlab-kas-18.6 Package: gitlab-kas-18.7 Package: gitlab-kas-18.8 Package: gitlab-kas-18.9 Package: gitlab-runner-18.10 Package: gitlab-runner-18.6 Package: gitlab-runner-18.7 Package: gitlab-runner-18.8 Package: gitlab-runner-18.9 Package: gitlab-runner-helper-18.10 Package: gitlab-runner-helper-18.6 Package: gitlab-runner-helper-18.7 Package: gitlab-runner-helper-18.8 Package: gitlab-runner-helper-18.9 Package: gitsign Package: gitsign-credential-cache Package: gogatekeeper Package: golang-github-go-jose-go-jose Package: golang-github-go-jose-go-jose Package: golang-github-go-jose-go-jose.v3 Package: golang-github-go-jose-go-jose.v3 Package: golang-gopkg-square-go-jose.v1 Package: golang-gopkg-square-go-jose.v2 Package: golang-gopkg-square-go-jose.v2 Package: gomplate-5 Package: goreleaser Package: grafana-12.3 Package: grafana-12.4 Package: grafana-alloy Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-pyroscope-1.19 Package: grpc-health-probe Package: grpcurl Package: grype Package: guac Package: guacingest Package: guacone Package: harbor-2.14 Package: harbor-registry Package: headlamp Package: hydra Package: istio-install-cni-1.29 Package: istio-pilot-agent-1.29 Package: istio-pilot-discovery-1.29 Package: jitsucom-bulker-bulker Package: jitsucom-bulker-sidecar Package: juicefs-1.3 Package: k3d-proxy Package: k3s Package: k3s-1.32 Package: k3s-static Package: k3s-static-1.32 Package: k8sgpt Package: k9s Package: kaniko Package: kargo Package: keda-2.19 Package: keda-2.19-metrics-apiserver Package: kiali Package: knative-eventing-1.21-channel-controller Package: knative-eventing-1.21-channel-dispatcher Package: knative-eventing-1.21-controller Package: knative-eventing-1.21-ingress Package: knative-eventing-1.21-mtchannel-broker Package: ko Package: kots Package: kserve-agent Package: kserve-localmodel Package: kserve-manager Package: kserve-router Package: ksops Package: kube-arangodb-1.4 Package: kubeflow-pipelines-apiserver Package: kubescape Package: kubescape-operator Package: kubo Package: kyverno-1.17 Package: kyverno-background-controller-1.17 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cli-1.17 Package: kyverno-init-container-1.17 Package: kyverno-notation-aws Package: kyverno-policy-reporter Package: kyverno-reports-controller-1.17 Package: loki-3.6 Package: loki-3.6-logcli Package: melange Package: migrate Package: minio Package: nerdctl Package: neuvector-scanner Package: neuvector-sigstore-interface Package: no-docs-check Package: oauth2-proxy Package: octo-sts Package: octo-sts-webhook Package: openbao Package: opencost Package: opentelemetry-collector-contrib Package: opentofu-1.11 Package: opentofu-1.9 Package: percona-server-mongodb-operator Package: podman Package: policy-controller Package: policy-controller-tester Package: pulumi Package: rabbitmq-messaging-topology-operator Package: rancher-2.13 Package: rancher-agent-2.13 Package: ratify Package: rekor-cli Package: rekor-server Package: restic Package: rook Package: scorecard Package: seaweedfs Package: sftpgo Package: sftpgo-plugin-kms Package: sigstore-scaffolding-tsa-createcertchain Package: skaffold Package: skopeo Package: skopeo Package: slsa-verifier Package: snyk-cli Package: sops Package: spicedb Package: spiffe-helper Package: spire-agent Package: spire-controller-manager Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: sql_exporter Package: src Package: steampipe Package: step Package: step-ca Package: step-issuer Package: step-kms-plugin Package: syft Package: symlink-check Package: task Package: tekton-chains Package: telegraf-1.38 Package: teleport-18.6 Package: teleport-18.6-kube-agent-updater Package: teleport-18.6-operator Package: tempo-2.10 Package: tempo-2.10-cli Package: tempo-2.10-vulture Package: temporal Package: temporal-server Package: temporal-ui-server Package: terraform-provider-acme Package: terraform-provider-google Package: terragrunt Package: tflint Package: tfsec Package: thanos Package: timestamp-authority-server Package: tkn Package: traefik-3.6 Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trivy-operator Package: trufflehog Package: tw Package: twt Package: undock Package: vault-benchmark Package: vault-env Package: vault-secrets-webhook Package: vcluster Package: vcluster-cli Package: velero Package: vexctl Package: vitess-23 Package: vitess-23-binaries Package: weaviate Package: witness Package: wolfictl Package: xeol Package: zarf Package: zot Ecosystem: Alpine Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.

Affected products

VendorProductAffectedFixed
go-jose go-jose >= 4.0.0, < 4.1.4, < 3.0.5 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-github-go-jose-go-jose 4.1.4-1 —
Debian 14 golang-github-go-jose-go-jose.v3 3.0.5-1 —
Debian 14 golang-gopkg-square-go-jose.v1 +1 No fix yet —
Debian 13 golang-github-go-jose-go-jose +3 No fix yet —
Debian 12 golang-gopkg-square-go-jose.v1 +1 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-github-go-jose-go-jose +2 No fix yet —
Ubuntu 26.04 LTS golang-gopkg-square-go-jose.v2 +1 No fix yet —
Ubuntu 25.10 golang-github-go-jose-go-jose +2 No fix yet —
Ubuntu 24.04 LTS golang-github-go-jose-go-jose +1 No fix yet —
Ubuntu 22.04 LTS golang-gopkg-square-go-jose.v2 No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS golang-gopkg-square-go-jose.v2 No fix yet —
Ubuntu Pro 26.04 LTS golang-github-go-jose-go-jose No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 image-builder 52.1-1.el10_2 RHSA-2026:22937
RHEL 10 opentelemetry-collector 0.144.0-2.el10_2 RHSA-2026:19135
RHEL 10 osbuild-composer +2 165.1-2.el10_2 RHSA-2026:22450
RHEL 10 podman +3 7:5.8.2-1.el10_2 RHSA-2026:19017
RHEL 10 rh-podman-desktop 1.1.2-1.el10_2 RHSA-2026:57590
RHEL 9 buildah +1 2:1.41.8-3.el9_7 RHSA-2026:19186, RHSA-2026:10135
RHEL 9 image-builder 52.1-1.el9_8 RHSA-2026:23228
RHEL 9 opentelemetry-collector 0.144.0-2.el9_8 RHSA-2026:19353
RHEL 9 osbuild-composer +2 165.1-2.el9_8 RHSA-2026:22714
RHEL 9 podman +4 6:5.8.2-1.el9_8 RHSA-2026:19173
RHEL 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 buildah +1 2:1.33.14-3.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 cockpit-podman 84.1-1.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 conmon 3:2.1.10-1.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 container-selinux 2:2.229.0-3.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 containernetworking-plugins 1:1.4.0-8.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 containers-common 2:1-82.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 crit +3 3.18-5.module+el8.10.0+24482+e50f4e4f RHSA-2026:35833
RHEL 8 criu 3.18-5.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 crun 1.14.3-2.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 fuse-overlayfs 1.13-1.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 libslirp 4.4.0-2.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 libslirp-devel 4.4.0-2.module+el8.10.0+24482+e50f4e4f RHSA-2026:35833
RHEL 8 netavark 2:1.10.3-1.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 osbuild-composer +2 101.5-1.el8_10 RHSA-2026:48790
RHEL 8 podman +6 4:4.9.4-31.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 python-podman 4.9.0-3.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 python3-podman 4.9.0-3.module+el8.10.0+24482+e50f4e4f RHSA-2026:35833
RHEL 8 runc 4:1.2.9-4.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 skopeo +1 2:1.14.6-2.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 slirp4netns 1.2.3-1.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 toolbox 0.0.99.5.1-1.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
RHEL 8 toolbox-tests 0.0.99.5.1-1.module+el8.10.0+24482+e50f4e4f RHSA-2026:35833
RHEL 8 udica 0.2.6-21.module+el8.10.0+24321+617e8352 RHSA-2026:35833, RHSA-2026:33722
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS buildah +1 2:1.39.9-1.el10_0 RHSA-2026:20569
RHEL 10.0 EUS opentelemetry-collector 0.144.0-2.el10_0 RHSA-2026:19719
RHEL 10.0 EUS osbuild-composer +2 134.1-9.el10_0 RHSA-2026:27856
RHEL 10.0 EUS podman +3 6:5.4.0-15.el10_0.1 RHSA-2026:17040
RHEL 10.0 EUS skopeo +1 2:1.18.1-3.el10_0.1 RHSA-2026:16696
RHEL 9.6 EUS buildah +1 2:1.39.9-1.el9_6 RHSA-2026:20607
RHEL 9.6 EUS opentelemetry-collector 0.144.0-2.el9_6 RHSA-2026:19720
RHEL 9.6 EUS osbuild-composer +2 132.2-8.el9_6 RHSA-2026:26054
RHEL 9.6 EUS podman +4 5:5.4.0-20.el9_6.3 RHSA-2026:17287
RHEL 9.6 EUS skopeo +1 2:1.18.1-5.el9_6.1 RHSA-2026:20609
RHEL 9.4 EUS opentelemetry-collector 0.144.0-2.el9_4 RHSA-2026:19721
RHEL 9.4 E4S buildah +1 2:1.33.15-1.el9_4.1 RHSA-2026:34192
RHEL 9.4 E4S osbuild-composer +2 101.3-4.el9_4.2 RHSA-2026:32991
RHEL 9.4 E4S podman +4 4:4.9.4-20.el9_4.3 RHSA-2026:34196
RHEL 9.4 E4S skopeo +1 2:1.14.6-1.el9_4 RHSA-2026:34197
RHEL 9.2 E4S buildah +1 1:1.29.7-1.el9_2.5 RHSA-2026:25252
RHEL 9.2 E4S podman +5 2:4.4.1-22.el9_2.11 RHSA-2026:25248
RHEL 9.2 E4S skopeo +1 2:1.11.4-0.1.el9_2.6 RHSA-2026:25250
RHEL 8.8 TUS aardvark-dns 2:1.5.0-2.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS buildah +1 1:1.29.8-1.module+el8.8.0+24545+b713e821 RHSA-2026:49944
RHEL 8.8 TUS cockpit-podman 63.1-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS conmon 3:2.1.6-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS container-selinux 2:2.229.0-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS containernetworking-plugins 1:1.2.0-3.module+el8.8.0+24525+a924b82f.1 RHSA-2026:49944
RHEL 8.8 TUS containers-common 2:1-67.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS crit +4 3.15-4.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS crun 1.14.3-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS fuse-overlayfs 1.11-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS libslirp +1 4.4.0-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS netavark 2:1.5.1-3.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS oci-seccomp-bpf-hook 1.2.10-1.module+el8.8.0+24130+2fde7a57 RHSA-2026:49944
RHEL 8.8 TUS podman +6 3:4.4.1-27.module+el8.8.0+24545+b713e821.8 RHSA-2026:49944
RHEL 8.8 TUS python-podman +1 4.4.1-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS runc 1:1.2.9-1.module+el8.8.0+24525+a924b82f.1 RHSA-2026:49944
RHEL 8.8 TUS skopeo +1 2:1.11.6-1.module+el8.8.0+24525+a924b82f RHSA-2026:49944
RHEL 8.8 TUS slirp4netns 1.2.0-3.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS toolbox +1 0.0.99.3-7.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 TUS udica 0.2.6-20.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S aardvark-dns 2:1.5.0-2.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S buildah +1 1:1.29.8-1.module+el8.8.0+24545+b713e821 RHSA-2026:49944
RHEL 8.8 E4S cockpit-podman 63.1-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S conmon 3:2.1.6-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S container-selinux 2:2.229.0-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S containernetworking-plugins 1:1.2.0-3.module+el8.8.0+24525+a924b82f.1 RHSA-2026:49944
RHEL 8.8 E4S containers-common 2:1-67.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S crit +4 3.15-4.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S crun 1.14.3-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S fuse-overlayfs 1.11-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S libslirp +1 4.4.0-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S netavark 2:1.5.1-3.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S oci-seccomp-bpf-hook 1.2.10-1.module+el8.8.0+24130+2fde7a57 RHSA-2026:49944
RHEL 8.8 E4S podman +6 3:4.4.1-27.module+el8.8.0+24545+b713e821.8 RHSA-2026:49944
RHEL 8.8 E4S python-podman +1 4.4.1-1.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S runc 1:1.2.9-1.module+el8.8.0+24525+a924b82f.1 RHSA-2026:49944
RHEL 8.8 E4S skopeo +1 2:1.11.6-1.module+el8.8.0+24525+a924b82f RHSA-2026:49944
RHEL 8.8 E4S slirp4netns 1.2.0-3.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S toolbox +1 0.0.99.3-7.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
RHEL 8.8 E4S udica 0.2.6-20.module+el8.8.0+23884+2031fc78 RHSA-2026:49944
Red Hat OpenShift 4 containernetworking-plugins 1:1.4.0-8.rhaos4.13.el8 RHSA-2026:65838
Red Hat OpenShift 4 cri-o 1.25.5-36.rhaos4.12.git2e7f657.el8 RHSA-2026:70585, RHSA-2026:67856, RHSA-2026:67836
Red Hat OpenShift 4 cri-tools 1.26.0-9.el8 RHSA-2026:70585, RHSA-2026:65838
Red Hat OpenShift 4 openshift +1 4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8 RHSA-2026:70585, RHSA-2026:65838
Red Hat OpenShift 4 openshift-clients +1 4.13.0-202608122150.p2.gd192e90.assembly.stream.el8 RHSA-2026:70585, RHSA-2026:65838
Red Hat OpenShift 4 openshift-kubelet +3 4.17.0-202609081428.p2.g4e295fa.assembly.stream.el8 RHSA-2026:70585
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.17.0-202609190230.p2.gb0a5486.assembly.stream.el8 RHSA-2026:70585
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.17.0-202609081428.p2.g5bcfbfd.assembly.stream.el8 RHSA-2026:70585
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.17.0-202609081428.p2.g8ce997d.assembly.stream.el8 RHSA-2026:70585
Red Hat OpenShift 4 skopeo +1 2:1.11.3-7.rhaos4.13.el8 RHSA-2026:65838

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 opentelemetry-collector 0.144.0-2.el10_2 ALSA-2026:19135
AlmaLinux 10 podman +3 7:5.8.2-1.el10_2.alma.1 ALSA-2026:19017
AlmaLinux 9 buildah +1 2:1.41.8-3.el9_7 ALSA-2026:19186, ALSA-2026:10135
AlmaLinux 9 opentelemetry-collector 0.144.0-2.el9_8 ALSA-2026:19353
AlmaLinux 9 podman +4 6:5.8.2-1.el9_8 ALSA-2026:19173
AlmaLinux 8 aardvark-dns 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 buildah 2:1.33.14-3.module_el8.10.0+4211+49ea0979 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 buildah-tests 2:1.33.14-3.module_el8.10.0+4136+16425343 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 cockpit-podman 84.1-1.module_el8.10.0+4102+6c76e544 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 conmon 3:2.1.10-1.module_el8.10.0+3970+8445edf6 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 container-selinux 2:2.229.0-3.module_el8.10.0+4211+49ea0979 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 containernetworking-plugins 1:1.4.0-8.module_el8.10.0+4136+16425343 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 containers-common 2:1-82.module_el8.10.0+3876+e55593a8 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 crit 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 criu +1 3.18-5.module_el8.10.0+3876+e55593a8 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 criu-devel 3.18-5.module_el8.10.0+3858+6ad51f9f ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 criu-libs 3.18-5.module_el8.10.0+3909+6e1c1eb7 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 crun 1.14.3-2.module_el8.10.0+4082+f7f0c95e ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 fuse-overlayfs 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 libslirp 4.4.0-2.module_el8.10.0+4023+db236c53 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 libslirp-devel 4.4.0-2.module_el8.10.0+3970+8445edf6 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 netavark 2:1.10.3-1.module_el8.10.0+3970+8445edf6 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 oci-seccomp-bpf-hook 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 osbuild-composer +2 101.5-1.el8_10.alma.1 ALSA-2026:48790
AlmaLinux 8 podman +6 4:4.9.4-31.module_el8.10.0+4211+49ea0979 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 python3-podman 4.9.0-3.module_el8.10.0+4016+efd18bf8 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 runc 4:1.2.9-4.module_el8.10.0+4136+16425343 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 skopeo +1 2:1.14.6-2.module_el8.10.0+4211+49ea0979 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 slirp4netns 1.2.3-1.module_el8.10.0+3926+f12484f5 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 toolbox +1 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 ALSA-2026:35833, ALSA-2026:33722
AlmaLinux 8 udica 0.2.6-21.module_el8.10.0+4068+0e21408f ALSA-2026:35833, ALSA-2026:33722

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 image-builder 52.1-1.el10_2.rocky.0.1 RLSA-2026:22937
Rocky Linux 10 opentelemetry-collector 0.144.0-2.el10_2 RLSA-2026:19135
Rocky Linux 10 osbuild-composer 165.1-2.el10_2.rocky.0.1 RLSA-2026:22450
Rocky Linux 10 podman 7:5.8.2-1.el10_2 RLSA-2026:19017
Rocky Linux 9 buildah 2:1.41.8-3.el9_7 RLSA-2026:19186, RLSA-2026:10135
Rocky Linux 9 image-builder 52.1-1.el9_8 RLSA-2026:23228
Rocky Linux 9 opentelemetry-collector 0.144.0-2.el9_8 RLSA-2026:19353
Rocky Linux 9 osbuild-composer 165.1-2.el9_8.rocky.0.1 RLSA-2026:22714
Rocky Linux 9 podman 6:5.8.2-1.el9_8 RLSA-2026:19173
Rocky Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+1874+ce489889 RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 buildah 2:1.33.14-3.module+el8.10.0+40133+32c21f88 RLSA-2026:33722
Rocky Linux 8 cockpit-podman 84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 conmon 3:2.1.10-1.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 container-selinux 2:2.229.0-3.module+el8.10.0+40223+e940a224 RLSA-2026:35833
Rocky Linux 8 containernetworking-plugins 1:1.4.0-8.module+el8.10.0+40133+32c21f88 RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 containers-common 2:1-82.module+el8.10.0+1843+6892ab28 RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 criu 3.18-5.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 crun 1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 libslirp 4.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 netavark 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 osbuild-composer 101.5-1.el8_10.rocky.0.6 RLSA-2026:48790
Rocky Linux 8 python-podman 4.9.0-3.module+el8.10.0+1896+b18fa106 RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 runc 4:1.2.9-4.module+el8.10.0+40133+32c21f88 RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 skopeo 2:1.14.6-2.module+el8.10.0+40223+e940a224 RLSA-2026:35833
Rocky Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 toolbox 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 RLSA-2026:35833, RLSA-2026:33722
Rocky Linux 8 udica 0.2.6-21.module+el8.10.0+1815+5fe7415e RLSA-2026:35833, RLSA-2026:33722

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 alloy 1.16.1-150700.15.20.1 SUSE-SU-2026:2438-1
SLES 15 SP7 apptainer 1.5.1-150600.4.24.1 SUSE-SU-2026:2609-1
SLES 15 SP7 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP7 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES 15 SP7 containerd 1.7.29-150000.137.1 SUSE-SU-2026:3450-1, SUSE-SU-2026:2639-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.14.1 SUSE-SU-2026:4209-1
SLES 15 SP7 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP7 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP7 podman 4.9.5-150500.3.73.2 SUSE-SU-2026:2715-1
SLES 15 SP7 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLES 15 SP7 warewulf4 4.7.0-150500.6.42.1 SUSE-SU-2026:2830-1
SLES 15 SP6 apptainer 1.5.1-150600.4.24.1 SUSE-SU-2026:2609-1
SLES 15 SP6 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP6 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES 15 SP6 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP6 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP6 podman 4.9.5-150500.3.73.2 SUSE-SU-2026:2715-1
SLES 15 SP6 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLES 15 SP6 warewulf4 4.7.0-150500.6.42.1 SUSE-SU-2026:2830-1
SLES 15 SP5 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP5 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES 15 SP5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP5 podman 4.9.5-150500.3.73.2 SUSE-SU-2026:2715-1
SLES 15 SP5 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLES 15 SP4 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP4 buildah 1.35.5-150400.3.68.1 SUSE-SU-2026:2706-1
SLES 15 SP4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP4 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP4 podman 4.9.5-150400.4.74.2 SUSE-SU-2026:2693-1
SLES 15 SP4 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLES 12 SP5 containerd 1.7.29-16.110.1 SUSE-SU-2026:2640-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 google-guest-agent 20260529.00-1.61.1 SUSE-SU-2026:2581-1
SLES 12 google-osconfig-agent 20260615.01-1.47.1 SUSE-SU-2026:2665-1
SLES for SAP 16.0 google-cloud-sap-agent 3.15-160000.1.1 SUSE-SU-2026:22328-1
SLES for SAP 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22128-1
SLES for SAP 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLES for SAP 15 SP6 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES for SAP 15 SP6 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES for SAP 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP6 podman 4.9.5-150500.3.73.2 SUSE-SU-2026:2715-1
SLES for SAP 15 SP6 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLES for SAP 15 SP5 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES for SAP 15 SP5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES for SAP 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP5 podman 4.9.5-150500.3.73.2 SUSE-SU-2026:2715-1
SLES for SAP 15 SP5 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLES for SAP 15 SP4 buildah 1.35.5-150400.3.68.1 SUSE-SU-2026:2706-1
SLES for SAP 15 SP4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLES for SAP 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP4 podman 4.9.5-150400.4.74.2 SUSE-SU-2026:2693-1
SLES for SAP 15 SP4 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLES 16.0 google-cloud-sap-agent 3.15-160000.1.1 SUSE-SU-2026:22328-1
SLES 16.0 google-guest-agent 20260430.00-160000.1.1 SUSE-SU-2026:22128-1
SLES 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLE Micro 6.1 containerd 1.7.29-slfo.1.1_3.1 SUSE-SU-2026:22892-1, SUSE-SU-2026:22443-1
SLE Micro 6.1 google-guest-agent 20260430.00-slfo.1.1_1.1 SUSE-SU-2026:22133-1
SLE Micro 6.1 google-osconfig-agent 20260615.01-slfo.1.1_1.1 SUSE-SU-2026:22249-1
SLE Micro 6.1 podman 5.4.2-slfo.1.1_5.1 SUSE-SU-2026:24378-1, SUSE-SU-2026:22451-1
SLE Micro 6.0 containerd 1.7.29-3.1 SUSE-SU-2026:24136-1, SUSE-SU-2026:22800-1, SUSE-SU-2026:22424-1
SLE Micro 6.0 google-osconfig-agent 20260615.01-1.1 SUSE-SU-2026:22242-1
SLE Micro 6.0 podman 4.9.5-12.1 SUSE-SU-2026:22516-1
SLE Micro 5.5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:3450-1, SUSE-SU-2026:2639-1
SLE Micro 5.5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLE Micro 5.5 podman 4.9.5-150500.3.73.2 SUSE-SU-2026:2715-1
SLE Micro 5.5 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLE Micro 5.4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:3450-1, SUSE-SU-2026:2639-1
SLE Micro 5.4 podman 4.9.5-150400.4.74.2 SUSE-SU-2026:2693-1
SLE Micro 5.3 containerd 1.7.29-150000.137.1 SUSE-SU-2026:3450-1, SUSE-SU-2026:2639-1
SLE Micro 5.3 podman 4.9.5-150400.4.74.2 SUSE-SU-2026:2693-1
SLE HPC 15 SP5 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLE HPC 15 SP5 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLE HPC 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLE HPC 15 SP5 podman 4.9.5-150500.3.73.2 SUSE-SU-2026:2715-1
SLE HPC 15 SP5 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SLE HPC 15 SP5 warewulf4 4.7.0-150500.6.42.1 SUSE-SU-2026:2830-1
SLE HPC 15 SP4 buildah 1.35.5-150400.3.68.1 SUSE-SU-2026:2706-1
SLE HPC 15 SP4 containerd 1.7.29-150000.137.1 SUSE-SU-2026:2639-1
SLE HPC 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLE HPC 15 SP4 podman 4.9.5-150400.4.74.2 SUSE-SU-2026:2693-1
SLE HPC 15 SP4 skopeo 1.14.4-150300.11.25.1 SUSE-SU-2026:5193-1
SUSE Multi Linux Manager Tools SLE-Micro-5 dracut-saltboot 1.2.1-150002.3.9.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-Micro-5 golang-github-prometheus-node_exporter 1.10.2-150002.3.6.2 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.12-150002.3.17.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 dracut-saltboot 1.2.1-150002.3.9.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-QubitProducts-exporter_exporter 0.4.0-150002.3.6.2 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-boynux-squid_exporter 1.13.0-150002.3.6.2 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-lusitaniae-apache_exporter 1.0.10-150002.3.9.2 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-alertmanager 0.28.1-150002.4.11.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-node_exporter 1.10.2-150002.3.6.2 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.5.3-150002.3.13.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 grafana 11.6.14+security04-150002.4.21.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.4-150002.3.9.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 prometheus-blackbox_exporter 0.26.0-150002.3.11.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 prometheus-postgres_exporter 0.10.1-150002.3.3.2 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 python-defusedxml-sle15 0.7.1-150002.1.3.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 rhnlib 5.2.5-150002.3.9.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.8-150002.3.12.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.6-150002.3.9.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 supportutils-plugin-salt 1.2.3-150002.3.3.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 supportutils-plugin-susemanager-client 5.2.3-150002.3.9.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-common-libs 5.2.5-150002.3.6.1 SUSE-SU-2026:2768-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.12-150002.3.17.1 SUSE-SU-2026:2768-1
SUSE Multi-Linux Manager Server Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-server-attestation-image +3 5.1.4-8.22.10 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Server Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image +3 5.1.4-8.20.12 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Server Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-server-image +3 5.1.4-8.20.34 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Server Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image +3 5.1.4-8.20.13 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Server Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-server-postgresql-image +3 5.1.4-6.24.3 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Server Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-server-saline-image +3 5.1.4-9.20.24 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Server Extension for SLE 5.1 uyuni-tools 5.1.29-150700.3.26.1 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-proxy-httpd-image +3 5.1.4-8.22.22 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image +3 5.1.4-9.20.25 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-proxy-squid-image +3 5.1.4-8.20.11 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-proxy-ssh-image +3 5.1.4-8.20.12 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image +3 5.1.4-8.20.13 SUSE-SU-2026:2774-1
SUSE Multi-Linux Manager Proxy Extension for SLE 5.1 uyuni-tools 5.1.29-150700.3.26.1 SUSE-SU-2026:2774-1
SUSE Enterprise Storage 7.1 podman 4.9.5-150300.9.78.1 SUSE-SU-2026:2636-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed alloy 1.16.1-1.1 openSUSE-SU-2026:10744-1
openSUSE Tumbleweed apptainer 1.4.5-4.1 openSUSE-SU-2026:10700-1
openSUSE Tumbleweed azure-storage-azcopy 10.32.2-2.1 openSUSE-SU-2026:10630-1
openSUSE Tumbleweed containerd 1.7.33-1.1 openSUSE-SU-2026:11107-1
openSUSE Tumbleweed containerized-data-importer1.65 1.65.0-2.1 openSUSE-SU-2026:11305-1
openSUSE Tumbleweed containerized-data-importer1.66 1.66.0-1.1 openSUSE-SU-2026:11514-1
openSUSE Tumbleweed distribution 3.1.0-1.1 openSUSE-SU-2026:10631-1
openSUSE Tumbleweed google-guest-agent 20260402.00-2.1 openSUSE-SU-2026:10654-1
openSUSE Tumbleweed google-osconfig-agent 20260330.00-2.1 openSUSE-SU-2026:10655-1
openSUSE Tumbleweed grafana 11.6.14+security01-2.1 openSUSE-SU-2026:10677-1
openSUSE Tumbleweed hauler 1.4.3-1.1 openSUSE-SU-2026:10702-1
openSUSE Tumbleweed ignition 2.26.0-5.1 openSUSE-SU-2026:11376-1
openSUSE Tumbleweed kubectl-retina 1.3.1-1.1 openSUSE-SU-2026:12297-1
openSUSE Tumbleweed kyverno 1.17.2-1.1 openSUSE-SU-2026:10613-1
openSUSE Tumbleweed semaphore 2.18.1-1.1 openSUSE-SU-2026:10712-1
openSUSE Tumbleweed skopeo 1.22.1-1.1 openSUSE-SU-2026:10577-1
openSUSE Tumbleweed tekton-cli 0.44.1-1.1 openSUSE-SU-2026:10529-1
openSUSE Tumbleweed traefik 3.6.15-1.1 openSUSE-SU-2026:10697-1
openSUSE Tumbleweed traefik2 2.11.44-1.1 openSUSE-SU-2026:10698-1
openSUSE Tumbleweed trivy 0.70.0-1.1 openSUSE-SU-2026:10651-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git185.a5708584-2.1 openSUSE-SU-2026:11126-1
openSUSE Tumbleweed warewulf4 4.7.0-2.1 openSUSE-SU-2026:11070-1
openSUSE Leap 16.0 containerd 1.7.33-160000.1.1 openSUSE-SU-2026:21213-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 google-cloud-sap-agent 3.15-160000.1.1 openSUSE-SU-2026:21010-1
openSUSE Leap 16.0 google-guest-agent 20260430.00-160000.1.1 openSUSE-SU-2026:20969-1
openSUSE Leap 16.0 google-osconfig-agent 20260615.01-160000.1.2 openSUSE-SU-2026:21210-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 16.0 grafana 11.6.14+security04-bp160.1.1 openSUSE-SU-2026:20940-1
openSUSE Leap 16.0 podman 5.4.2-160000.5.1 openSUSE-SU-2026:21244-1
openSUSE Leap 16.0 warewulf4 4.7.0-bp160.1.1 openSUSE-SU-2026:21918-1, openSUSE-SU-2026:21151-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 skopeo 1.20.1-r0 —
Alpine v3.23 skopeo 1.20.1-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 containerd +1 2.2.3-1.amzn2023.0.1 ALAS2023-2026-1606
Amazon Linux 2023 nerdctl 2.2.2-1.amzn2023.0.1 ALAS2023-2026-1605
Amazon Linux 2 nerdctl 2.2.2-1.amzn2.0.1 ALAS2-2026-3265

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 image-builder 58-1.0.1.el10 ELSA-2026-22937
Oracle Linux 10 osbuild-composer +2 176-1.0.1.el10_2 ELSA-2026-22450
Oracle Linux 10 podman +3 7:5.8.2-1.0.1.el10_2 ELSA-2026-19017
Oracle Linux 9 buildah +1 2:1.41.8-3.0.1.el9_7 ELSA-2026-19186, ELSA-2026-10135
Oracle Linux 9 image-builder 72.0.0-1.0.1.el9 ELSA-2026-23228
Oracle Linux 9 osbuild-composer +2 175-1.0.1.el9_8 ELSA-2026-22714
Oracle Linux 9 podman +4 6:5.8.2-1.0.2.el9_8 ELSA-2026-19173
Oracle Linux 8 aardvark-dns 2:1.10.1-2.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 buildah +1 2:1.33.14-3.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 cockpit-podman 84.1-1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 conmon 3:2.1.10-1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 container-selinux 2:2.229.0-2.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 containernetworking-plugins 1:1.4.0-8.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 containers-common 2:1-82.0.1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 crit +4 3.18-5.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 crun 1.14.3-2.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 fuse-overlayfs 1.13-1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 libslirp +1 4.4.0-2.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 netavark 2:1.10.3-1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 oci-seccomp-bpf-hook 1.2.10-1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 osbuild-composer +2 101.5-1.0.1.el8_10 ELSA-2026-48790
Oracle Linux 8 podman +6 4:4.9.4-31.0.1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 python3-podman 4.9.0-3.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 runc 4:1.2.9-4.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 skopeo +1 2:1.14.6-2.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 slirp4netns 1.2.3-1.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722
Oracle Linux 8 udica 0.2.6-21.module+el8.10.0+90937+f3690799 ELSA-2026-35833, ELSA-2026-33722

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r50 —
Wolfi rolling apko 1.2.1-r1 —
Wolfi rolling argo-cd-3.2 +1 3.2.8-r2 —
Wolfi rolling argo-cd-3.3 +1 3.3.6-r3 —
Wolfi rolling argo-workflows-3.7 +1 3.7.13-r2 —
Wolfi rolling argo-workflows-4.0 +2 4.0.4-r1 —
Wolfi rolling azcopy 10.32.2-r4 —
Wolfi rolling bank-vaults +1 1.32.1-r16 —
Wolfi rolling bento 1.16.2-r1 —
Wolfi rolling buildah 1.43.0-r7 —
Wolfi rolling caddy 2.11.2-r8 —
Wolfi rolling cerbos 0.51.0-r12 —
Wolfi rolling cert-manager-1.20 +1 1.20.1-r1 —
Wolfi rolling cert-manager-istio-csr 0.16.0-r3 —
Wolfi rolling cilium-1.19-operator-aws +1 1.19.2-r2 —
Wolfi rolling cloudflared 2026.3.0-r5 —
Wolfi rolling cloudprober 0.14.3-r0 —
Wolfi rolling cluster-api-aws-controller 2.10.2-r7 —
Wolfi rolling conftest 0.67.1-r3 —
Wolfi rolling consul-k8s-1.9 1.9.6-r2 —
Wolfi rolling containerd-1 1.7.30-r7 —
Wolfi rolling containerd-2 2.2.2-r7 —
Wolfi rolling cosign 3.0.5-r6 —
Wolfi rolling crossplane-2.2 +1 2.2.0-r6 —
Wolfi rolling dagdotdev 0.0.20-r11 —
Wolfi rolling dagger 0.20.3-r2 —
Wolfi rolling dapr-daprd-1.17 +5 1.17.3-r1 —
Wolfi rolling dex 2.45.1-r5 —
Wolfi rolling dgraph 25.3.1-r0 —
Wolfi rolling distribution 3.0.0-r49 —
Wolfi rolling dkron-executor-grpc 4.1.0-r0 —
Wolfi rolling envconsul 0.13.4-r8 —
Wolfi rolling envoy-gateway 1.7.1-r2 —
Wolfi rolling falco-no-driver 0.43.0-r7 —
Wolfi rolling falcoctl 0.12.2-r6 —
Wolfi rolling falcosidekick 2.33.0-r2 —
Wolfi rolling flux-kustomize-controller 1.8.2-r2 —
Wolfi rolling flux-source-controller 1.8.1-r5 —
Wolfi rolling flyte 1.16.5-r1 —
Wolfi rolling frp 0.68.0-r1 —
Wolfi rolling fulcio 1.8.5-r9 —
Wolfi rolling gatus 5.35.0-r6 —
Wolfi rolling gcsfuse 2.12.2-r19 —
Wolfi rolling gitaly-18.10 +1 18.10.4-r2 —
Wolfi rolling gitaly-18.11 +2 18.11.2-r1 —
Wolfi rolling gitaly-18.6 +9 No fix yet —
Wolfi rolling gitaly-18.9 +1 18.9.6-r2 —
Wolfi rolling gitlab-kas-18.10 18.10.4-r1 —
Wolfi rolling gitlab-kas-18.9 18.9.6-r1 —
Wolfi rolling gitlab-runner-18.10 +1 18.10.1-r1 —
Wolfi rolling gitlab-runner-18.6 +1 18.6.6-r6 —
Wolfi rolling gitlab-runner-18.7 +1 18.7.2-r11 —
Wolfi rolling gitlab-runner-18.8 +1 18.8.0-r6 —
Wolfi rolling gitlab-runner-18.9 +1 18.9.0-r6 —
Wolfi rolling gitsign +1 0.14.0-r14 —
Wolfi rolling gogatekeeper 4.7.1-r2 —
Wolfi rolling gomplate-5 5.0.0-r14 —
Wolfi rolling goreleaser 2.15.2-r2 —
Wolfi rolling grafana-12.3 12.3.6-r1 —
Wolfi rolling grafana-12.4 12.4.2-r2 —
Wolfi rolling grafana-alloy 1.15.0-r1 —
Wolfi rolling grafana-mimir-3.0 +2 3.0.5-r2 —
Wolfi rolling grafana-pyroscope-1.19 1.19.1-r3 —
Wolfi rolling grpc-health-probe 0.4.47-r1 —
Wolfi rolling grpcurl 1.9.3-r18 —
Wolfi rolling grype 0.110.0-r2 —
Wolfi rolling guac +2 1.1.0-r3 —
Wolfi rolling harbor-2.14 2.14.3-r5 —
Wolfi rolling harbor-registry 3.0.0-r17 —
Wolfi rolling headlamp 0.41.0-r3 —
Wolfi rolling hydra 26.2.0-r1 —
Wolfi rolling istio-install-cni-1.29 +2 1.29.1-r7 —
Wolfi rolling jitsucom-bulker-bulker +1 2.11.913-r18 —
Wolfi rolling juicefs-1.3 1.3.1-r14 —
Wolfi rolling k3d-proxy 5.8.3-r34 —
Wolfi rolling k3s +1 1.35.3.1-r1 —
Wolfi rolling k3s-1.32 +1 1.32.13.1-r9 —
Wolfi rolling k8sgpt 0.4.31-r2 —
Wolfi rolling k9s 0.50.18-r14 —
Wolfi rolling kaniko 1.25.12-r2 —
Wolfi rolling kargo 1.9.5-r8 —
Wolfi rolling keda-2.19 +1 2.19.0-r7 —
Wolfi rolling kiali 2.23.0-r4 —
Wolfi rolling knative-eventing-1.21-ingress +4 1.21.1-r6 —
Wolfi rolling ko 0.18.1-r9 —
Wolfi rolling kots 1.130.0-r2 —
Wolfi rolling kserve-agent +4 0.17.0-r1 —
Wolfi rolling ksops 4.4.0-r13 —
Wolfi rolling kube-arangodb-1.4 1.4.1-r13 —
Wolfi rolling kubeflow-pipelines-apiserver 2.16.0-r11 —
Wolfi rolling kubescape 4.0.5-r0 —
Wolfi rolling kubescape-operator 0.2.139-r0 —
Wolfi rolling kubo 0.40.1-r7 —
Wolfi rolling kyverno-1.17 +5 1.17.1-r11 —
Wolfi rolling kyverno-notation-aws 1.1-r45 —
Wolfi rolling kyverno-policy-reporter 3.7.3-r14 —
Wolfi rolling loki-3.6 +1 3.6.8-r1 —
Wolfi rolling melange 0.48.2-r1 —
Wolfi rolling migrate 4.19.1-r9 —
Wolfi rolling minio 0.20260330.001845-r2 —
Wolfi rolling nerdctl 2.2.2-r1 —
Wolfi rolling neuvector-scanner 4.121-r1 —
Wolfi rolling neuvector-sigstore-interface 0_git20260405-r0 —
Wolfi rolling oauth2-proxy 7.15.1-r4 —
Wolfi rolling octo-sts +1 0.5.4-r9 —
Wolfi rolling openbao 2.5.2-r3 —
Wolfi rolling opencost 1.119.2-r10 —
Wolfi rolling opentelemetry-collector-contrib 0.149.0-r1 —
Wolfi rolling opentofu-1.11 1.11.5-r12 —
Wolfi rolling opentofu-1.9 1.9.4-r13 —
Wolfi rolling percona-server-mongodb-operator 1.22.0-r12 —
Wolfi rolling podman 5.8.1-r4 —
Wolfi rolling policy-controller +1 0.15.1-r1 —
Wolfi rolling pulumi 3.229.0-r1 —
Wolfi rolling rabbitmq-messaging-topology-operator 1.19.0-r5 —
Wolfi rolling rancher-2.13 2.13.4-r3 —
Wolfi rolling rancher-agent-2.13 2.13.4-r2 —
Wolfi rolling ratify 1.4.0-r24 —
Wolfi rolling rekor-cli +1 1.5.1-r6 —
Wolfi rolling restic 0.18.1-r16 —
Wolfi rolling rook 1.19.3-r4 —
Wolfi rolling scorecard 5.5.0-r0 —
Wolfi rolling seaweedfs 4.18-r1 —
Wolfi rolling sftpgo 2.7.1-r5 —
Wolfi rolling sftpgo-plugin-kms 1.0.17-r4 —
Wolfi rolling sigstore-scaffolding-tsa-createcertchain 0.7.31-r11 —
Wolfi rolling skaffold 2.18.2-r3 —
Wolfi rolling skopeo 1.22.0-r3 —
Wolfi rolling slsa-verifier 2.7.1-r14 —
Wolfi rolling snyk-cli 1.1303.2-r3 —
Wolfi rolling sops 3.12.2-r1 —
Wolfi rolling spicedb 1.51.0-r3 —
Wolfi rolling spiffe-helper 0.11.0-r14 —
Wolfi rolling spire-agent +2 1.14.4-r2 —
Wolfi rolling spire-controller-manager 0.6.4-r4 —
Wolfi rolling splunk-otel-collector 0.148.0-r1 —
Wolfi rolling sql_exporter 0.22.0-r1 —
Wolfi rolling src 7.0.2-r1 —
Wolfi rolling steampipe 2.4.1-r0 —
Wolfi rolling step 0.30.2-r1 —
Wolfi rolling step-ca 0.30.2-r2 —
Wolfi rolling step-issuer 0.10.2-r4 —
Wolfi rolling step-kms-plugin 0.16.2-r1 —
Wolfi rolling syft 1.42.3-r2 —
Wolfi rolling task 3.49.1-r4 —
Wolfi rolling tekton-chains 0.26.2-r6 —
Wolfi rolling telegraf-1.38 1.38.2-r1 —
Wolfi rolling teleport-18.6 +2 18.6.8-r9 —
Wolfi rolling tempo-2.10 +2 2.10.3-r8 —
Wolfi rolling temporal 1.6.2-r3 —
Wolfi rolling temporal-server 1.30.3-r1 —
Wolfi rolling temporal-ui-server 2.48.1-r1 —
Wolfi rolling terraform-provider-acme 2.46.1-r0 —
Wolfi rolling terraform-provider-google 7.26.0-r1 —
Wolfi rolling terragrunt 1.0.0-r0 —
Wolfi rolling tflint 0.61.0-r5 —
Wolfi rolling tfsec 1.28.14-r25 —
Wolfi rolling thanos 0.41.0-r8 —
Wolfi rolling timestamp-authority-server 2.0.5-r5 —
Wolfi rolling tkn 0.44.0-r5 —
Wolfi rolling traefik-3.6 3.6.12-r1 —
Wolfi rolling trillian-logserver +1 1.7.3-r1 —
Wolfi rolling trivy 0.69.3-r10 —
Wolfi rolling trivy-operator 0.30.1-r6 —
Wolfi rolling trufflehog 3.94.2-r1 —
Wolfi rolling tw +3 0.0.44-r3 —
Wolfi rolling undock 0.11.0-r8 —
Wolfi rolling vault-benchmark 0.4.0-r12 —
Wolfi rolling vault-env 1.22.1-r10 —
Wolfi rolling vault-secrets-webhook 1.22.2-r10 —
Wolfi rolling vcluster +1 0.33.1-r1 —
Wolfi rolling velero 1.18.0-r6 —
Wolfi rolling vexctl 0.4.1-r16 —
Wolfi rolling vitess-23 +1 23.0.3-r10 —
Wolfi rolling weaviate 1.36.9-r1 —
Wolfi rolling witness 0.10.2-r17 —
Wolfi rolling wolfictl 0.39.7-r4 —
Wolfi rolling xeol 0.10.8-r37 —
Wolfi rolling zarf 0.74.1-r1 —
Wolfi rolling zot 2.1.15-r7 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/go-jose/go-jose <= 2.6.3 — GHSA-78h2-9frx-2jm8
Go github.com/go-jose/go-jose/v3 < 3.0.5 3.0.5 GHSA-78h2-9frx-2jm8
Go github.com/go-jose/go-jose/v4 < 4.1.4 4.1.4 GHSA-78h2-9frx-2jm8

Advisories 50

References