Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-39834 EUVD-2026-31400GHSA-rm3j-f69w-wqmqGO-2026-5020

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Published May 22, 2026 · Updated May 22, 2026 · Assigned by Go

Vendor: golang.org/x/crypto Product: golang.org/x/crypto/ssh Package: aactl Package: act Package: apko Package: argo-cd-3.3-compat Package: argo-cd-3.4 Package: argo-cd-3.4-compat Package: argo-events Package: argocd-image-updater Package: atlantis Package: buildah Package: buildah Package: buildkitd Package: caddy Package: cert-manager Package: cert-manager-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-controller-1.20 Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: cf-cli Package: chezmoi Package: chisel Package: cilium-1.19 Package: cilium-cli Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloudflared Package: cluster-api-azure-controller Package: containerd-1 Package: containerd-2 Package: containerd-2.3 Package: coredns-1.13 Package: cosign Package: cri-o Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sqs Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-storage Package: crossplane-provider-family-aws Package: crossplane-provider-family-azure Package: crossplane-provider-keycloak Package: dagger Package: dapr-daprd-1.17 Package: datadog-agent-7.72 Package: datadog-agent-7.77 Package: datadog-agent-7.78 Package: dkron Package: docker-buildx Package: docker-cli-buildx Package: docker-compose Package: docker-compose Package: docker-machine-driver-linode Package: dockerd-28 Package: dockerd-29 Package: eksctl Package: external-dns-0.21 Package: external-secrets-operator-2.3 Package: external-secrets-operator-2.4 Package: external-secrets-operator-2.5 Package: falco-no-driver Package: falcoctl Package: flux-2.8 Package: flux-image-automation-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: frp Package: fscrypt Package: fulcio Package: gatus Package: gh Package: gh Package: gitaly-18.10 Package: gitaly-18.7 Package: gitaly-18.8 Package: gitaly-18.9 Package: gitaly-backup-18.7 Package: gitaly-backup-18.8 Package: gitaly-backup-18.9 Package: gitea Package: gitlab-agent-18.6 Package: gitlab-agent-18.7 Package: gitlab-agent-18.8 Package: gitlab-agent-18.9 Package: gitlab-docker-machine-18.10 Package: gitlab-docker-machine-18.11 Package: gitlab-docker-machine-18.7 Package: gitlab-docker-machine-18.8 Package: gitlab-docker-machine-18.9 Package: gitlab-docker-machine-19.0 Package: gitlab-kas-18.6 Package: gitlab-kas-18.7 Package: gitlab-kas-18.8 Package: gitlab-kas-18.9 Package: gitlab-pages-18.10 Package: gitlab-pages-18.11 Package: gitlab-pages-18.7 Package: gitlab-pages-18.8 Package: gitlab-pages-18.9 Package: gitlab-pages-19.0 Package: gitlab-runner-18.10 Package: gitlab-runner-18.11 Package: gitlab-runner-18.7 Package: gitlab-runner-18.8 Package: gitlab-runner-18.9 Package: gitlab-runner-19.0 Package: gitlab-runner-helper-18.10 Package: gitlab-runner-helper-18.11 Package: gitlab-runner-helper-18.7 Package: gitlab-runner-helper-18.8 Package: gitlab-runner-helper-18.9 Package: gitlab-runner-helper-19.0 Package: gitsign Package: glab Package: go-discover Package: go-jsonnet Package: golang-go.crypto Package: golang-go.crypto Package: golang.org/x/crypto Package: gomplate-5 Package: google-guest-agent Package: gptscript Package: grype Package: guac Package: guacingest Package: guacone Package: hcloud Package: helm-3 Package: k3s Package: k3s-1.34 Package: k3s-1.35 Package: k3s-static Package: k3s-static-1.32 Package: k3s-static-1.34 Package: k3s-static-1.35 Package: k8sgpt Package: k9s Package: kaf Package: kaniko Package: kargo Package: kine Package: ko Package: kots Package: ksops Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-apiserver-1.36 Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.36 Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-proxy-1.35-default-compat Package: kube-proxy-1.36 Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-scheduler-1.35-default-compat Package: kube-scheduler-1.36 Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubeadm-1.36 Package: kubectl-bash-completion-1.35 Package: kubelet-1.34 Package: kubelet-1.35 Package: kubelet-1.36 Package: kubernetes Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-1.36 Package: kubernetes-dashboard Package: kubernetes-pause-compat-1.35 Package: kubescape Package: kubevirt Package: kubevirt-openvmm Package: kuma-coredns-1.13 Package: kyverno-1.17 Package: kyverno-background-controller-1.18 Package: kyverno-cleanup-controller-1.18 Package: kyverno-cli-1.17 Package: kyverno-cli-1.18 Package: kyverno-init-container-1.18 Package: kyverno-reports-controller-1.18 Package: loki-3.6 Package: loki-3.6-logcli Package: loki-3.6-loki-canary Package: loki-3.6-promtail Package: loki-3.7 Package: loki-3.7-logcli Package: loki-3.7-loki-canary Package: lxd Package: mattermost-11.1 Package: melange Package: minio Package: moby-engine Package: mods Package: nerdctl Package: neuvector-sigstore-interface Package: nfpm Package: no-docs-check Package: nuclei Package: nvidia-container-toolkit Package: openbao Package: opentelemetry-collector Package: opentofu-1.11 Package: osv-scanner Package: packer Package: podman Package: podman Package: policy-controller Package: policy-controller-tester Package: prometheus-3.10 Package: prometheus-3.11 Package: prometheus-3.8 Package: prometheus-3.9 Package: prometheus-config-reloader Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: rancher-2.13 Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-machine Package: rootlesskit Package: scorecard Package: sealed-secrets Package: sealed-secrets-kubeseal Package: skaffold Package: slsa-verifier Package: snapd Package: snyk-cli Package: sops Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: src Package: steampipe Package: step Package: step-issuer Package: step-kms-plugin Package: syft Package: symlink-check Package: tailscale Package: tekton-chains Package: tekton-pipelines-resolvers-1.11 Package: tekton-pipelines-resolvers-1.12 Package: telegraf Package: telegraf-1.38 Package: teleport-18.6 Package: teleport-18.6-kube-agent-updater Package: teleport-18.6-operator Package: terraform-provider-acme Package: terraform-provider-azapi Package: terraform-provider-azurerm Package: terraform-provider-tls Package: terragrunt Package: tflint Package: timestamp-authority-server Package: tkn Package: traefik-3.6 Package: traefik-3.7 Package: trivy Package: trivy-operator Package: twt Package: vault-benchmark Package: wal-g-pg Package: witness Package: wolfictl Package: zarf Package: zot Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

Affected products

VendorProductAffectedFixed
golang.org/x/crypto golang.org/x/crypto/ssh < 0.52.0 0.52.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-go.crypto 1:0.52.0-1 —
Debian 13 golang-go.crypto No fix yet —
Debian 12 golang-go.crypto No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 snapd No fix yet —
Ubuntu 26.04 LTS google-guest-agent 20250506.01-0ubuntu2.1 —
Ubuntu 26.04 LTS snapd No fix yet —
Ubuntu 25.10 google-guest-agent 20250506.01-0ubuntu1.2 —
Ubuntu 25.10 snapd +1 No fix yet —
Ubuntu 24.04 LTS google-guest-agent 20250116.00-0ubuntu1~24.04.4 —
Ubuntu 24.04 LTS snapd No fix yet —
Ubuntu 22.04 LTS google-guest-agent 20250116.00-0ubuntu1~22.04.3 —
Ubuntu 22.04 LTS snapd No fix yet —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS golang-go.crypto 1:0.47.0-1ubuntu0.1~esm1 —
Ubuntu Pro 24.04 LTS golang-go.crypto 1:0.19.0-1ubuntu0.1~esm2 —
Ubuntu Pro 22.04 LTS golang-go.crypto 1:0.0~git20211202.5770296-1ubuntu0.1~esm2 —
Ubuntu Pro 20.04 LTS golang-go.crypto 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm2 —
Ubuntu Pro 20.04 LTS google-guest-agent 20250116.00-0ubuntu1~20.04.0+esm3 —
Ubuntu Pro 20.04 LTS snapd No fix yet —
Ubuntu Pro 18.04 LTS golang-go.crypto 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm2 —
Ubuntu Pro 18.04 LTS google-guest-agent 20241011.01-0ubuntu1~18.04.0+esm3 —
Ubuntu Pro 18.04 LTS lxd 3.0.3-0ubuntu1~18.04.2+esm3 —
Ubuntu Pro 18.04 LTS snapd No fix yet —
Ubuntu Pro 16.04 LTS golang-go.crypto 1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm2 —
Ubuntu Pro 16.04 LTS google-guest-agent 20240716.00-0ubuntu1~16.04.0+esm3 —
Ubuntu Pro 16.04 LTS lxd 2.0.11-0ubuntu1~16.04.4+esm3 —
Ubuntu Pro 16.04 LTS snapd No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 golang1.26 +5 1.26.8-0.1.hum1 RHSA-2026:62391
Red Hat Hardened Images 1 golang1.27 +5 1.27.1-0.1.hum1 RHSA-2026:66561

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 alloy 1.17.1-150700.15.23.1 SUSE-SU-2026:2824-1
SLES 15 SP7 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP7 apptainer 1.5.1-150600.4.24.1 SUSE-SU-2026:2609-1
SLES 15 SP7 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.14.1 SUSE-SU-2026:4209-1
SLES 15 SP7 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLES 15 SP7 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP7 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP7 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP7 kubevirt 1.7.4-150700.3.30.1 SUSE-SU-2026:3203-1
SLES 15 SP6 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP6 apptainer 1.5.1-150600.4.24.1 SUSE-SU-2026:2609-1
SLES 15 SP6 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES 15 SP6 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLES 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP6 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP6 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP5 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP5 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES 15 SP5 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLES 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP5 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP5 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 amazon-ssm-agent 3.3.4624.0-150000.5.37.1 SUSE-SU-2026:2467-1
SLES 15 SP4 buildah 1.35.5-150400.3.68.1 SUSE-SU-2026:2706-1
SLES 15 SP4 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLES 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 15 SP4 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLES 15 SP4 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLES 15 SP4 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 12 amazon-ssm-agent 3.3.4624.0-4.49.1 SUSE-SU-2026:2468-1
SLES 12 google-guest-agent 20260529.00-1.61.1 SUSE-SU-2026:2581-1
SLES 12 google-osconfig-agent 20260615.01-1.47.1 SUSE-SU-2026:2665-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 alloy 1.17.0-160000.1.1 SUSE-SU-2026:22575-1
SLES for SAP 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 SUSE-SU-2026:22157-1
SLES for SAP 16.0 cosign +1 3.1.1-160000.1.1 SUSE-SU-2026:22613-1, SUSE-SU-2026:22159-1
SLES for SAP 16.0 google-guest-agent 20260529.00-160000.1.1 SUSE-SU-2026:22376-1
SLES for SAP 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLES for SAP 16.0 mcphost 0.34.0-160000.2.1 SUSE-SU-2026:22193-1
SLES for SAP 15 SP6 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES for SAP 15 SP6 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLES for SAP 15 SP6 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP5 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLES for SAP 15 SP5 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLES for SAP 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES for SAP 15 SP4 buildah 1.35.5-150400.3.68.1 SUSE-SU-2026:2706-1
SLES for SAP 15 SP4 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLES for SAP 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLES 16.0 alloy 1.17.0-160000.1.1 SUSE-SU-2026:22575-1
SLES 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 SUSE-SU-2026:22157-1
SLES 16.0 cosign +1 3.1.1-160000.1.1 SUSE-SU-2026:22613-1, SUSE-SU-2026:22159-1
SLES 16.0 google-guest-agent 20260529.00-160000.1.1 SUSE-SU-2026:22376-1
SLES 16.0 google-osconfig-agent 20260615.01-160000.1.2 SUSE-SU-2026:22558-1
SLES 16.0 mcphost 0.34.0-160000.2.1 SUSE-SU-2026:22193-1
SLE Micro 6.2 mcphost 0.34.0-160000.2.1 SUSE-SU-2026:22226-1
SLE Micro 6.1 elemental-toolkit 2.2.9-slfo.1.1_1.1 SUSE-SU-2026:22074-1
SLE Micro 6.1 google-guest-agent 20260529.00-slfo.1.1_1.1 SUSE-SU-2026:22442-1
SLE Micro 6.1 google-osconfig-agent 20260615.01-slfo.1.1_1.1 SUSE-SU-2026:22249-1
SLE Micro 6.1 podman 5.4.2-slfo.1.1_5.1 SUSE-SU-2026:22451-1
SLE Micro 6.0 elemental-toolkit 2.1.6-1.1 SUSE-SU-2026:22065-1
SLE Micro 6.0 google-guest-agent 20260529.00-1.1 SUSE-SU-2026:22423-1
SLE Micro 6.0 google-osconfig-agent 20260615.01-1.1 SUSE-SU-2026:22242-1
SLE Micro 6.0 podman 4.9.5-12.1 SUSE-SU-2026:22516-1
SLE Micro 5.5 google-guest-agent 20260529.00-150000.1.70.1 SUSE-SU-2026:2612-1
SLE Micro 5.5 google-osconfig-agent 20260615.01-150000.1.55.1 SUSE-SU-2026:2611-1
SLE HPC 15 SP5 buildah 1.35.5-150500.3.62.1 SUSE-SU-2026:2733-1
SLE HPC 15 SP5 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLE HPC 15 SP5 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1
SLE HPC 15 SP4 buildah 1.35.5-150400.3.68.1 SUSE-SU-2026:2706-1
SLE HPC 15 SP4 cosign 3.1.1-150400.3.45.1 SUSE-SU-2026:2827-1
SLE HPC 15 SP4 distribution 3.1.1-150400.9.41.1 SUSE-SU-2026:4212-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed alloy 1.17.0-1.1 openSUSE-SU-2026:11053-1
openSUSE Tumbleweed amazon-ssm-agent 3.3.4624.0-2.1 openSUSE-SU-2026:10966-1
openSUSE Tumbleweed cosign 3.1.1-1.1 openSUSE-SU-2026:11198-1
openSUSE Tumbleweed distribution 3.1.1-3.1 openSUSE-SU-2026:10889-1
openSUSE Tumbleweed git-bug 0.10.1-5.1 openSUSE-SU-2026:10949-1
openSUSE Tumbleweed hauler 1.4.3-3.1 openSUSE-SU-2026:10843-1
openSUSE Tumbleweed rclone 1.74.2-1.1 openSUSE-SU-2026:10856-1
openSUSE Tumbleweed trivy 0.70.0-3.1 openSUSE-SU-2026:10858-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git185.a5708584-2.1 openSUSE-SU-2026:11126-1
openSUSE Leap 16.0 alloy 1.17.0-160000.1.1 openSUSE-SU-2026:21251-1
openSUSE Leap 16.0 amazon-ssm-agent 3.3.4624.0-160000.1.1 openSUSE-SU-2026:21079-1
openSUSE Leap 16.0 cloudflared 2026.9.1-bp160.1.1 openSUSE-SU-2026:21924-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 cosign +1 3.1.1-160000.1.1 openSUSE-SU-2026:21281-1, openSUSE-SU-2026:21084-1
openSUSE Leap 16.0 glab 1.114.0-bp160.1.1 openSUSE-SU-2026:21662-1
openSUSE Leap 16.0 google-guest-agent 20260529.00-160000.1.1 openSUSE-SU-2026:21069-1
openSUSE Leap 16.0 google-osconfig-agent 20260615.01-160000.1.2 openSUSE-SU-2026:21210-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 16.0 kubevirt1.8 1.8.4-160000.1.1 openSUSE-SU-2026:21590-1
openSUSE Leap 16.0 mcphost 0.34.0-160000.2.1 openSUSE-SU-2026:21120-1
openSUSE Leap 16.0 podman 5.4.2-160000.5.1 openSUSE-SU-2026:21244-1
openSUSE Leap 16.0 rclone 1.74.4-bp160.1.1 openSUSE-SU-2026:21436-1
openSUSE Leap 16.0 trivy 0.71.0-160000.1.1 openSUSE-SU-2026:20956-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300069.1-1.amzn2023 ALAS2023-2026-2025
Amazon Linux 2023 amazon-ssm-agent 3.3.4624.0-1.amzn2023 ALAS2023-2026-1952
Amazon Linux 2023 containerd +1 2.2.4-1.amzn2023.0.1 ALAS2023-2026-1784
Amazon Linux 2023 nerdctl 2.2.2-1.amzn2023.0.3 ALAS2023-2026-1788
Amazon Linux 2023 rclone 1.74.2-80.amzn2023 ALAS2023-2026-1810
Amazon Linux 2023 runfinch-finch 1.17.1-1.amzn2023.0.2 ALAS2023-2026-1809
Amazon Linux 2 amazon-cloudwatch-agent 1.300069.1-1.amzn2 ALAS2-2026-3844
Amazon Linux 2 amazon-ssm-agent 3.3.4624.0-1.amzn2 ALAS2-2026-3809
Amazon Linux 2 nerdctl 2.2.2-1.amzn2.0.3 ALAS2-2026-3334

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 cert-manager 1.12.15-9 —
Azure Linux 3 cf-cli 8.7.11-6 —
Azure Linux 3 cri-o +3 No fix yet —
Azure Linux 3 docker-buildx 0.14.0-13 —
Azure Linux 3 docker-compose 2.27.0-11 —
Azure Linux 3 gh 2.62.0-16 —
Azure Linux 3 kubernetes 1.30.10-25 —
Azure Linux 3 kubevirt 1.7.1-7 —
Azure Linux 3 moby-engine 25.0.3-18 —
Azure Linux 3 nvidia-container-toolkit 1.17.8-3 —
Azure Linux 3 packer 1.9.5-15 —
Azure Linux 3 telegraf 1.31.0-22 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r53 —
Wolfi rolling act 0.2.88-r6 —
Wolfi rolling apko 1.2.14-r2 —
Wolfi rolling argo-cd-3.3-compat 3.3.14-r9 —
Wolfi rolling argo-cd-3.4 +1 3.4.2-r4 —
Wolfi rolling argo-events 1.9.10-r24 —
Wolfi rolling argocd-image-updater 1.2.1-r2 —
Wolfi rolling atlantis 0.43.0-r4 —
Wolfi rolling buildah 1.44.0-r0 —
Wolfi rolling buildkitd 0.30.0-r2 —
Wolfi rolling caddy 2.11.3-r2 —
Wolfi rolling cert-manager-1.20 +4 1.20.2-r7 —
Wolfi rolling chezmoi 2.70.4-r2 —
Wolfi rolling chisel 1.11.5-r5 —
Wolfi rolling cilium-1.19 1.19.4-r2 —
Wolfi rolling cilium-cli 0.19.4-r0 —
Wolfi rolling cloud-provider-aws-1.31-cloud-controller-manager 1.31.9-r16 —
Wolfi rolling cloudflared 2026.5.2-r1 —
Wolfi rolling cluster-api-azure-controller 1.24.1-r3 —
Wolfi rolling containerd-1 1.7.32-r2 —
Wolfi rolling containerd-2 +1 2.3.1-r1 —
Wolfi rolling cosign 3.0.6-r5 —
Wolfi rolling crossplane-provider-aws-kms +3 2.5.0-r10 —
Wolfi rolling crossplane-provider-aws-lambda +1 2.5.0-r8 —
Wolfi rolling crossplane-provider-aws-s3 +13 2.5.0-r9 —
Wolfi rolling crossplane-provider-azure-authorization +1 2.5.0-r12 —
Wolfi rolling crossplane-provider-azure-sql 2.5.0-r11 —
Wolfi rolling crossplane-provider-family-aws 2.5.0-r7 —
Wolfi rolling crossplane-provider-keycloak 2.19.0-r7 —
Wolfi rolling dagger 0.20.8-r7 —
Wolfi rolling dapr-daprd-1.17 1.17.7-r1 —
Wolfi rolling datadog-agent-7.72 7.72.4-r24 —
Wolfi rolling datadog-agent-7.77 7.77.3-r12 —
Wolfi rolling datadog-agent-7.78 7.78.4-r2 —
Wolfi rolling dkron 4.1.1-r1 —
Wolfi rolling docker-cli-buildx 0.34.1-r3 —
Wolfi rolling docker-compose 5.1.4-r3 —
Wolfi rolling docker-machine-driver-linode 0.1.16-r4 —
Wolfi rolling dockerd-28 28.5.2-r26 —
Wolfi rolling dockerd-29 29.5.2-r3 —
Wolfi rolling eksctl 0.227.0-r2 —
Wolfi rolling external-dns-0.21 0.21.0-r7 —
Wolfi rolling external-secrets-operator-2.3 2.3.0-r10 —
Wolfi rolling external-secrets-operator-2.4 2.4.1-r7 —
Wolfi rolling external-secrets-operator-2.5 2.5.0-r3 —
Wolfi rolling falco-no-driver 0.44.1-r6 —
Wolfi rolling falcoctl 0.13.0-r3 —
Wolfi rolling flux-2.8 2.8.8-r2 —
Wolfi rolling flux-image-automation-controller 1.1.4-r3 —
Wolfi rolling flux-kustomize-controller 1.8.5-r3 —
Wolfi rolling flux-notification-controller 1.8.4-r4 —
Wolfi rolling flux-source-controller 1.8.5-r2 —
Wolfi rolling frp 0.69.0-r2 —
Wolfi rolling fscrypt 0.3.6-r9 —
Wolfi rolling fulcio 1.8.6-r1 —
Wolfi rolling gatus 5.36.0-r2 —
Wolfi rolling gh 2.93.0-r0 —
Wolfi rolling gitaly-18.10 +1 18.10.7-r1 —
Wolfi rolling gitaly-18.7 +25 No fix yet —
Wolfi rolling gitea 1.26.2-r2 —
Wolfi rolling gitlab-kas-18.6 +1 18.6.8-r1 —
Wolfi rolling gitlab-pages-18.11 18.11.4-r1 —
Wolfi rolling gitlab-pages-19.0 19.0.1-r1 —
Wolfi rolling gitlab-runner-18.10 +2 18.10.1-r11 —
Wolfi rolling gitlab-runner-18.11 +2 18.11.3-r4 —
Wolfi rolling gitlab-runner-19.0 +2 19.0.0-r1 —
Wolfi rolling gitsign 0.16.0-r5 —
Wolfi rolling glab 1.100.0-r1 —
Wolfi rolling go-discover 0_git20260522-r2 —
Wolfi rolling go-jsonnet 0.22.0-r4 —
Wolfi rolling gomplate-5 5.1.0-r6 —
Wolfi rolling gptscript 0.9.9-r243 —
Wolfi rolling grype 0.112.0-r6 —
Wolfi rolling guac +2 1.1.0-r15 —
Wolfi rolling hcloud 1.65.0-r2 —
Wolfi rolling helm-3 3.21.0-r3 —
Wolfi rolling k3s +1 1.36.1.1-r0 —
Wolfi rolling k3s-1.34 +1 1.34.6.1-r11 —
Wolfi rolling k3s-1.35 +1 1.35.5.1-r0 —
Wolfi rolling k3s-static-1.32 1.32.13.1-r19 —
Wolfi rolling k8sgpt 0.4.33-r4 —
Wolfi rolling k9s 0.50.18-r28 —
Wolfi rolling kaf 0.2.14-r5 —
Wolfi rolling kaniko 1.25.15-r4 —
Wolfi rolling kargo 1.10.4-r3 —
Wolfi rolling kine 0.16.0-r1 —
Wolfi rolling ko 0.18.1-r17 —
Wolfi rolling kots 1.130.4-r4 —
Wolfi rolling ksops 4.5.1-r5 —
Wolfi rolling kubeadm-1.34 +6 1.34.8-r1 —
Wolfi rolling kubeadm-1.35 +6 1.35.5-r1 —
Wolfi rolling kubeadm-1.36 +6 1.36.1-r1 —
Wolfi rolling kubectl-bash-completion-1.35 +3 1.35.8-r6 —
Wolfi rolling kubernetes-dashboard 7.14.0-r8 —
Wolfi rolling kubescape 4.0.8-r6 —
Wolfi rolling kyverno-1.17 +1 1.17.2-r35 —
Wolfi rolling kyverno-cli-1.18 +4 1.18.1-r3 —
Wolfi rolling loki-3.6 +3 3.6.11-r1 —
Wolfi rolling loki-3.7 +2 3.7.2-r2 —
Wolfi rolling mattermost-11.1 11.1.3-r3 —
Wolfi rolling melange 0.50.8-r2 —
Wolfi rolling minio 0.20260520.234452-r2 —
Wolfi rolling mods 1.8.1-r13 —
Wolfi rolling nerdctl 2.3.1-r3 —
Wolfi rolling neuvector-sigstore-interface 0_git20260429-r2 —
Wolfi rolling nfpm 2.46.3-r6 —
Wolfi rolling no-docs-check 0.0.48-r3 —
Wolfi rolling nuclei 3.8.0-r9 —
Wolfi rolling openbao 2.5.4-r1 —
Wolfi rolling opentelemetry-collector 0.152.1-r2 —
Wolfi rolling opentofu-1.11 1.11.8-r2 —
Wolfi rolling osv-scanner 2.3.8-r5 —
Wolfi rolling podman 5.8.2-r5 —
Wolfi rolling policy-controller +1 0.15.1-r8 —
Wolfi rolling prometheus-3.10 3.10.0-r23 —
Wolfi rolling prometheus-3.11 3.11.3-r17 —
Wolfi rolling prometheus-3.8 3.8.1-r4 —
Wolfi rolling prometheus-3.9 3.9.1-r7 —
Wolfi rolling prometheus-config-reloader 0.91.0-r3 —
Wolfi rolling pulumi +3 3.243.0-r1 —
Wolfi rolling pulumi-kubernetes-operator 2.7.0-r8 —
Wolfi rolling pulumi-language-dotnet 3.106.2-r4 —
Wolfi rolling pulumi-language-java 1.28.0-r2 —
Wolfi rolling pulumi-language-yaml 1.35.0-r2 —
Wolfi rolling rancher-2.13 2.13.6-r1 —
Wolfi rolling rancher-2.14 2.14.1-r3 —
Wolfi rolling rancher-agent-2.13 2.13.9-r4 —
Wolfi rolling rancher-machine 0.15.0.143-r2 —
Wolfi rolling rootlesskit 3.0.1-r1 —
Wolfi rolling scorecard 5.5.0-r7 —
Wolfi rolling sealed-secrets +1 0.37.0-r2 —
Wolfi rolling skaffold 2.21.0-r3 —
Wolfi rolling slsa-verifier 2.7.1-r18 —
Wolfi rolling snyk-cli 1.1304.3-r4 —
Wolfi rolling sops 3.13.1-r1 —
Wolfi rolling spire-agent +2 1.15.0-r2 —
Wolfi rolling splunk-otel-collector 0.153.0-r0 —
Wolfi rolling src 7.3.0-r2 —
Wolfi rolling steampipe 2.4.4-r2 —
Wolfi rolling step 0.30.2-r9 —
Wolfi rolling step-issuer 0.10.2-r14 —
Wolfi rolling step-kms-plugin 0.17.0-r4 —
Wolfi rolling syft 1.44.0-r7 —
Wolfi rolling tailscale 1.98.3-r2 —
Wolfi rolling tekton-chains 0.26.3-r4 —
Wolfi rolling tekton-pipelines-resolvers-1.11 1.11.1-r7 —
Wolfi rolling tekton-pipelines-resolvers-1.12 1.12.0-r4 —
Wolfi rolling telegraf-1.38 1.38.4-r4 —
Wolfi rolling teleport-18.6 +2 18.6.8-r16 —
Wolfi rolling terraform-provider-acme 2.48.1-r3 —
Wolfi rolling terraform-provider-azapi 2.10.0-r2 —
Wolfi rolling terraform-provider-azurerm 4.74.0-r2 —
Wolfi rolling terraform-provider-tls 4.3.0-r2 —
Wolfi rolling terragrunt 1.0.5-r2 —
Wolfi rolling tflint 0.62.1-r2 —
Wolfi rolling timestamp-authority-server 2.1.0-r1 —
Wolfi rolling tkn 0.45.0-r2 —
Wolfi rolling traefik-3.6 3.6.17-r2 —
Wolfi rolling traefik-3.7 3.7.1-r2 —
Wolfi rolling trivy 0.70.0-r3 —
Wolfi rolling trivy-operator 0.30.1-r13 —
Wolfi rolling twt +1 0.0.49-r0 —
Wolfi rolling vault-benchmark 0.4.0-r18 —
Wolfi rolling wal-g-pg 3.0.8-r16 —
Wolfi rolling witness 0.11.0-r6 —
Wolfi rolling wolfictl 0.39.17-r2 —
Wolfi rolling zarf 0.77.0-r0 —
Wolfi rolling zot 2.1.17-r3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/crypto < 0.52.0 0.52.0 GHSA-rm3j-f69w-wqmq

Advisories 50

References