Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-41178 EUVD-2026-34288GHSA-5wrp-cwcj-q835GO-2026-5158

OpenTelemetry-Go's baggage parsing no longer caps raw header length

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by GitHub_M

Vendor: open-telemetry Product: go.opentelemetry.io/otel/baggage Product: go.opentelemetry.io/otel/propagation Package: aactl Package: act Package: addon-resizer Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-operator Package: apisix-ingress-controller Package: argo-cd-3.2 Package: argo-cd-3.2-compat Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-cd-3.4 Package: argo-cd-3.4-compat Package: argo-events Package: argo-rollouts Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-3.7 Package: argo-workflow-executor-4.0 Package: argo-workflows-3.7 Package: argo-workflows-4.0 Package: argo-workflows-ui-4.0 Package: argocd-image-updater Package: aws-efs-csi-driver Package: aws-node-termination-handler Package: aws-otel-collector Package: azure-service-operator Package: azure-workload-identity-webhook Package: azuredisk-csi-1.34 Package: azurefile-csi-1.35 Package: bank-vaults Package: bank-vaults-template Package: blob-csi-1.27 Package: boring-registry Package: buildah Package: caddy Package: cadvisor Package: cadvisor-compat Package: calico-apiserver-3.31 Package: calico-apiserver-3.32 Package: calico-app-policy-3.32 Package: calico-cni-3.32 Package: calico-felix-3.32 Package: calico-goldmane-3.32 Package: calico-key-cert-provisioner-3.32 Package: calico-kube-controllers-3.32 Package: calico-node-3.32 Package: calico-typhad-3.32 Package: calico-whisker-backend-3.32 Package: calicoctl-3.32 Package: cass-operator Package: cerbos Package: cerbosctl Package: cert-manager-1.20 Package: cert-manager-1.20-crds Package: cert-manager-acmesolver-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-cmctl Package: cert-manager-controller-1.20 Package: cert-manager-csi-driver Package: cert-manager-istio-csr Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: cert-manager-webhook-pdns Package: chartmuseum Package: cilium-1.19 Package: cilium-1.19-clustermesh-apiserver Package: cilium-1.19-hubble-relay Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: clickhouse-operator Package: clickhouse-operator-metrics-exporter Package: cloud-provider-aws-1.35-cloud-controller-manager Package: cloud-provider-aws-1.35-ecr-credential-provider Package: cloud-provider-azure-cloud-controller-manager-1.35 Package: cloud-provider-azure-cloud-node-manager-1.35 Package: cloud-provider-gcp-cloud-controller-manager Package: cloudflared Package: cloudprober Package: cluster-api-1.12-capd-manager Package: cluster-api-1.12-clusterctl Package: cluster-api-1.12-controller Package: cluster-api-1.12-controller-compat Package: cluster-api-1.12-kubeadm-bootstrap-controller Package: cluster-api-1.12-kubeadm-control-plane-controller Package: cluster-api-1.13-capd-manager Package: cluster-api-1.13-clusterctl Package: cluster-api-1.13-controller Package: cluster-api-1.13-controller-compat Package: cluster-api-1.13-kubeadm-bootstrap-controller Package: cluster-api-1.13-kubeadm-control-plane-controller Package: cluster-api-aws-controller Package: cluster-api-gcp-controller Package: cluster-api-helm-controller Package: cluster-api-provider-vsphere Package: cluster-autoscaler-1.35 Package: conftest Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: containerd-1 Package: containerd-2 Package: containerd-2.3 Package: containerd-stress-1 Package: containerd-stress-2 Package: containerd-stress-2.3 Package: coredns-1.13 Package: coredns-1.14 Package: cortex Package: cri-tools Package: crictl Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-family-aws Package: crossplane-provider-family-azure Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: ctr-2.3 Package: dagdotdev Package: dagger Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-placement-1.17 Package: dapr-scheduler-1.17 Package: dapr-sentry-1.17 Package: datadog-agent-7.77 Package: datadog-agent-7.77-full Package: datadog-agent-7.78 Package: datadog-agent-7.78-full Package: datadog-agent-7.79 Package: datadog-agent-7.79-full Package: datadog-agent-7.80 Package: datadog-agent-7.80-full Package: datadog-cluster-agent-7.77 Package: datadog-cluster-agent-7.78 Package: datadog-cluster-agent-7.79 Package: datadog-cluster-agent-7.80 Package: dataplaneapi Package: db-operator Package: dbmate Package: descheduler Package: dex Package: dgraph Package: distribution Package: dive Package: dkron Package: dkron-executor-gcppubsub Package: docker-compose Package: docker-machine-driver-harvester Package: dockerd-28 Package: dogstatsd-7.77 Package: dogstatsd-7.78 Package: dogstatsd-7.79 Package: dogstatsd-7.80 Package: eksctl Package: emissary Package: emissary-apiext Package: envoy-gateway Package: envoy-gateway-egctl Package: envoy-ratelimit Package: etcd-3.6 Package: external-dns-0.21 Package: external-secrets-operator-2.3 Package: external-secrets-operator-2.4 Package: external-secrets-operator-2.5 Package: external-secrets-operator-2.6 Package: falco-no-driver Package: falcoctl Package: falcosidekick Package: ferretdb Package: fluent-operator Package: flux-2.7 Package: flux-2.8 Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flyte Package: fulcio Package: gatekeeper-3.22 Package: gatekeeper-3.22-gator Package: gatus Package: gcp-compute-persistent-disk-csi-driver-1.25 Package: gcp-compute-persistent-disk-csi-driver-1.25-compat Package: gcsfuse Package: gitaly-18.11 Package: gitaly-19.0 Package: gitaly-19.1 Package: gitaly-backup-18.11 Package: gitaly-backup-19.0 Package: gitaly-backup-19.1 Package: gitlab-agent-18.11 Package: gitlab-agent-19.0 Package: gitlab-docker-machine-18.11 Package: gitlab-docker-machine-19.0 Package: gitlab-docker-machine-19.1 Package: gitlab-kas-18.11 Package: gitlab-kas-19.0 Package: gitlab-pages-18.11 Package: gitlab-pages-19.0 Package: gitlab-pages-19.1 Package: gitlab-runner-18.11 Package: gitlab-runner-19.0 Package: gitlab-runner-19.1 Package: gitlab-runner-helper-18.11 Package: gitlab-runner-helper-19.0 Package: gitlab-runner-helper-19.1 Package: gitness Package: gitsign Package: go-discover Package: go.opentelemetry.io/otel Package: go.opentelemetry.io/otel/baggage Package: go.opentelemetry.io/otel/propagation Package: golang-opentelemetry-otel Package: golang-opentelemetry-otel Package: gomplate-5 Package: goreleaser Package: gptscript Package: grafana-12.3 Package: grafana-12.4 Package: grafana-agent-operator Package: grafana-alloy Package: grafana-image-renderer Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-mimir-3.0-query-tee-3.0 Package: grafana-mimir-3.1 Package: grafana-mimir-3.1-metaconvert-3.1 Package: grafana-mimir-3.1-mimirtool-3.1 Package: grafana-mimir-3.1-query-tee-3.1 Package: grafana-pyroscope-1.19 Package: grafana-pyroscope-2.0 Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: haproxy-ingress-0.16 Package: harbor-cli Package: harbor-registry Package: helm-operator Package: hubble Package: hubble-ui-backend Package: hydra Package: ingress-nginx-controller-1.15 Package: ipfs-cluster Package: jaeger-operator Package: jitsucom-bulker-bulker Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-sidecar-compat Package: jitsucom-bulker-syncctl Package: juicefs-1.3 Package: k3s Package: k3s-1.32 Package: k3s-1.34 Package: k3s-1.35 Package: k3s-static Package: k3s-static-1.32 Package: k3s-static-1.34 Package: k3s-static-1.35 Package: k8s_gateway Package: k8sgpt Package: k8ssandra-client Package: k9s Package: kaniko Package: kapp-controller Package: kargo Package: keda-2.19 Package: keda-2.19-metrics-apiserver Package: keda-2.20 Package: keda-2.20-admission-webhooks Package: keda-2.20-metrics-apiserver Package: kiali Package: kine Package: knative-client Package: knative-eventing-1.21-channel-controller Package: knative-eventing-1.21-channel-dispatcher Package: knative-eventing-1.21-controller Package: knative-eventing-1.21-filter Package: knative-eventing-1.21-ingress Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-mtchannel-broker Package: knative-eventing-1.21-webhook Package: knative-eventing-1.22-channel-controller Package: knative-eventing-1.22-channel-dispatcher Package: knative-eventing-1.22-controller Package: knative-eventing-1.22-filter Package: knative-eventing-1.22-ingress Package: knative-eventing-1.22-jobsink Package: knative-eventing-1.22-mtchannel-broker Package: knative-eventing-1.22-webhook Package: knative-operator-1.21 Package: knative-operator-1.21-webhook Package: knative-operator-1.22 Package: knative-operator-1.22-compat Package: knative-operator-1.22-webhook Package: knative-serving-1.21-activator Package: knative-serving-1.21-autoscaler Package: knative-serving-1.21-autoscaler-hpa Package: knative-serving-1.21-controller Package: knative-serving-1.21-queue Package: knative-serving-1.21-webhook Package: knative-serving-1.22-activator Package: knative-serving-1.22-autoscaler Package: knative-serving-1.22-autoscaler-hpa Package: knative-serving-1.22-cleanup Package: knative-serving-1.22-controller Package: knative-serving-1.22-controller-compat Package: knative-serving-1.22-queue Package: knative-serving-1.22-webhook Package: knative-serving-1.22-webhook-compat Package: kots Package: kserve Package: kserve-agent Package: kserve-localmodel Package: kserve-manager Package: kserve-modelmesh-serving Package: kserve-qpext Package: kserve-router Package: kserve-storage-controller Package: ksops Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-apiserver-1.36 Package: kube-arangodb-1.4 Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.36 Package: kube-logging-operator Package: kube-metrics-adapter Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-proxy-1.35-default-compat Package: kube-proxy-1.36 Package: kube-rbac-proxy Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-scheduler-1.35-default-compat Package: kube-scheduler-1.36 Package: kube-state-metrics Package: kube-vip-cloud-provider Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubeadm-1.36 Package: kubectl-1.32 Package: kubectl-1.33 Package: kubectl-1.34 Package: kubectl-1.35 Package: kubectl-1.36 Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.35 Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubelet-1.34 Package: kubelet-1.35 Package: kubelet-1.36 Package: kuberay-operator Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-1.36 Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-resizer Package: kubernetes-csi-external-snapshot-controller-8.5 Package: kubernetes-csi-external-snapshot-controller-8.6 Package: kubernetes-csi-external-snapshotter-8.5 Package: kubernetes-csi-external-snapshotter-8.6 Package: kubernetes-csi-livenessprobe Package: kubernetes-csi-node-driver-registrar-2.16 Package: kubernetes-csi-node-driver-registrar-2.17 Package: kubernetes-csi-node-driver-registrar-2.17-compat Package: kubernetes-dns-node-cache Package: kubernetes-pause-compat-1.35 Package: kubescape Package: kubescape-operator Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubo Package: kubo-compat Package: kuma-cni-2.13 Package: kuma-cp-2.13 Package: kuma-dp-2.13 Package: kuma-install-cni-2.13 Package: kumactl-2.13 Package: kyverno-1.17 Package: kyverno-1.18 Package: kyverno-background-controller-1.17 Package: kyverno-background-controller-1.18 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cleanup-controller-1.18 Package: kyverno-cli-1.17 Package: kyverno-cli-1.18 Package: kyverno-init-container-1.17 Package: kyverno-init-container-1.18 Package: kyverno-notation-aws Package: kyverno-reports-controller-1.17 Package: kyverno-reports-controller-1.18 Package: lazydocker Package: linkerd2-controller Package: linkerd2-controller-compat Package: linkerd2-debug Package: litestream Package: manifest-tool Package: mesosphere-vsphere-csi-driver Package: metallb Package: metallb-controller Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metrics-server Package: metrics-server-compat Package: migrate Package: minio Package: net-kourier-1.21 Package: net-kourier-1.22 Package: neuvector-scanner Package: neuvector-scanner-task Package: neuvector-sigstore-interface Package: newrelic-infrastructure-agent Package: no-docs-check Package: node-feature-discovery-0.18 Package: node-problem-detector-1.35 Package: nuclei Package: octo-sts Package: octo-sts-webhook Package: op-geth Package: openbao Package: opencost Package: opentofu-1.11 Package: opentofu-1.12 Package: opentofu-1.12-compat Package: opentofu-1.9 Package: osv-scanner Package: otel-cli Package: percona-server-mongodb-operator Package: podman Package: policy-controller Package: policy-controller-tester Package: prometheus-3.10 Package: prometheus-3.11 Package: prometheus-3.9 Package: prometheus-adapter Package: prometheus-alertmanager Package: promxy Package: pulumi-kubernetes-operator Package: rancher-2.13 Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-agent-2.14 Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-machine Package: rancher-system-agent Package: rancher-webhook-0.10 Package: ratify Package: ratify-licensechecker Package: ratify-licensechecker-compat Package: ratify-sbom Package: ratify-schemavalidator Package: ratify-vulnerabilityreport Package: rclone Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: restic Package: rke2-cloud-provider Package: scorecard Package: seaweedfs Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: skopeo Package: slsa-verifier Package: snyk-cli Package: spegel Package: spicedb Package: spicedb-operator Package: spire-agent Package: spire-server Package: sql_exporter Package: steampipe Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: step-kms-plugin Package: syft Package: symlink-check Package: tailscale-k8s-operator Package: tdbg Package: tekton-chains Package: tekton-pipelines-controller-1.11 Package: tekton-pipelines-controller-1.11-compat Package: tekton-pipelines-controller-1.12 Package: tekton-pipelines-entrypoint-1.11 Package: tekton-pipelines-entrypoint-1.12 Package: tekton-pipelines-events-1.11 Package: tekton-pipelines-events-1.11-compat Package: tekton-pipelines-events-1.12 Package: tekton-pipelines-nop-1.12-compat Package: tekton-pipelines-resolvers-1.11 Package: tekton-pipelines-resolvers-1.12 Package: tekton-pipelines-sidecarlogresults-1.11 Package: tekton-pipelines-sidecarlogresults-1.12 Package: tekton-pipelines-webhook-1.11 Package: tekton-pipelines-webhook-1.12 Package: telegraf-1.38 Package: teleport-18.6 Package: teleport-18.6-kube-agent-updater Package: teleport-18.6-operator Package: tempo-2.10 Package: tempo-2.10-cli Package: tempo-2.10-query Package: tempo-2.10-vulture Package: tempo-3.0 Package: tempo-3.0-cli Package: tempo-3.0-query Package: tempo-3.0-vulture Package: temporal Package: temporal-cassandra-tool Package: temporal-elasticsearch-tool Package: temporal-server Package: temporal-sql-tool Package: terraform-mcp-server Package: terraform-provider-acme Package: terraform-provider-google Package: terraform-provider-grafana Package: tetra Package: tetragon Package: tflint Package: tfsec Package: thanos Package: tkn Package: traefik-3.6 Package: traefik-3.7 Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trivy-operator Package: trufflehog Package: tw Package: twt Package: undock Package: vault-env Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-restore-helper Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: victoriametrics-operator Package: vitess-23 Package: vitess-23-binaries Package: vitess-24 Package: vitess-24-binaries Package: vitess-24-compat Package: weaviate Package: witness Package: wolfictl Package: xeol Package: yunikorn-k8shim Package: zarf Package: zot Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue.

Affected products

VendorProductAffectedFixed
open-telemetry go.opentelemetry.io/otel/baggage = 1.41.0, = 1.43.0 —
open-telemetry go.opentelemetry.io/otel/propagation = 1.41.0, = 1.43.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-opentelemetry-otel 1.46.0-2 —
Debian 13 golang-opentelemetry-otel No fix yet —
Debian 12 golang-opentelemetry-otel No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-opentelemetry-otel No fix yet —
Ubuntu 26.04 LTS golang-opentelemetry-otel No fix yet —
Ubuntu 25.10 golang-opentelemetry-otel No fix yet —
Ubuntu 22.04 LTS golang-opentelemetry-otel No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 image-builder 52.1-2.el10_2 RHSA-2026:67139
RHEL 10 opentelemetry-collector 0.152.1-2.el10_2 RHSA-2026:65116
RHEL 10 osbuild-composer +2 165.1-5.el10_2 RHSA-2026:66432
RHEL 9 image-builder 52.1-2.el9_8 RHSA-2026:67138
RHEL 9 opentelemetry-collector 0.152.1-2.el9_8 RHSA-2026:65117
RHEL 9 osbuild-composer +2 165.1-5.el9_8 RHSA-2026:69293
RHEL 8 osbuild-composer +2 101.5-3.el8_10 RHSA-2026:67148
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS opentelemetry-collector 0.152.1-2.el10_0 RHSA-2026:67974
RHEL 10.0 EUS osbuild-composer +2 134.1-12.el10_0 RHSA-2026:66327
RHEL 9.6 EUS ignition +3 2.21.0-7.el9_6.1 RHSA-2026:65336
RHEL 9.6 EUS opentelemetry-collector 0.152.1-2.el9_6 RHSA-2026:67975
RHEL 9.4 E4S opentelemetry-collector 0.152.1-2.el9_4 RHSA-2026:68527
RHEL 9.4 E4S osbuild-composer +2 101.3-4.el9_4.7 RHSA-2026:91958
Red Hat OpenShift 4 openshift +1 4.22.0-202609141614.p2.g160626b.assembly.stream.el8 RHSA-2026:68550
Red Hat OpenShift 4 openshift-kubelet +3 4.22.0-202609141614.p2.g160626b.assembly.stream.el9 RHSA-2026:68550
Red Hat Edge Manager 1 flightctl +2 1.1.4-1.el9em RHSA-2026:68335, RHSA-2026:68334

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 opentelemetry-collector 0.152.1-2.el10_2 ALSA-2026:65116
AlmaLinux 10 osbuild-composer +2 165.1-5.el10_2.alma.1 ALSA-2026:66432
AlmaLinux 9 opentelemetry-collector 0.152.1-2.el9_8 ALSA-2026:65117
AlmaLinux 9 osbuild-composer +2 165.1-5.el9_8.alma.1 ALSA-2026:69293
AlmaLinux 8 osbuild-composer +2 101.5-3.el8_10.alma.1 ALSA-2026:67148

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 image-builder 52.1-2.el10_2.rocky.0.1 RLSA-2026:67139
Rocky Linux 10 opentelemetry-collector 0.152.1-2.el10_2 RLSA-2026:65116
Rocky Linux 10 osbuild-composer 165.1-5.el10_2.rocky.0.1 RLSA-2026:66432
Rocky Linux 9 image-builder 52.1-2.el9_8 RLSA-2026:67138
Rocky Linux 9 opentelemetry-collector 0.152.1-2.el9_8 RLSA-2026:65117
Rocky Linux 9 osbuild-composer 165.1-5.el9_8.rocky.0.1 RLSA-2026:69293
Rocky Linux 8 osbuild-composer 101.5-3.el8_10.rocky.0.6 RLSA-2026:67148

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 alloy 1.19.2-150700.15.29.1 SUSE-SU-2026:4408-1
SLES 15 SP7 amazon-cloudwatch-agent 1.300069.0-150400.9.10.1 SUSE-SU-2026:4045-1
SLES 15 SP7 apptainer 1.5.3-150600.4.40.1 SUSE-SU-2026:3928-1
SLES 15 SP7 azure-storage-azcopy 10.32.8-150400.9.21.1 SUSE-SU-2026:4125-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.14.1 SUSE-SU-2026:4209-1
SLES 15 SP7 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLES 15 SP7 google-osconfig-agent 20260911.00-150000.1.67.1 SUSE-SU-2026:4293-1
SLES 15 SP7 grafana 12.4.10-150200.3.94.3 SUSE-SU-2026:4600-1
SLES 15 SP7 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLES 15 SP7 system-user-grafana 1.0.0-150200.5.8.1 SUSE-SU-2026:4600-1
SLES 15 SP6 amazon-cloudwatch-agent 1.300069.0-150400.9.10.1 SUSE-SU-2026:4045-1
SLES 15 SP6 azure-storage-azcopy 10.32.8-150400.9.21.1 SUSE-SU-2026:4125-1
SLES 15 SP6 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLES 15 SP6 google-osconfig-agent 20260911.00-150000.1.67.1 SUSE-SU-2026:4293-1
SLES 15 SP6 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLES 15 SP5 amazon-cloudwatch-agent 1.300069.0-150400.9.10.1 SUSE-SU-2026:4045-1
SLES 15 SP5 azure-storage-azcopy 10.32.8-150400.9.21.1 SUSE-SU-2026:4125-1
SLES 15 SP5 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLES 15 SP5 google-osconfig-agent 20260911.00-150000.1.67.1 SUSE-SU-2026:4293-1
SLES 15 SP5 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLES 15 SP4 amazon-cloudwatch-agent 1.300069.0-150400.9.10.1 SUSE-SU-2026:4045-1
SLES 15 SP4 azure-storage-azcopy 10.32.8-150400.9.21.1 SUSE-SU-2026:4125-1
SLES 15 SP4 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLES 15 SP4 google-osconfig-agent 20260911.00-150000.1.67.1 SUSE-SU-2026:4293-1
SLES 15 SP4 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLES 12 google-cloud-sap-agent 3.15-6.78.1 SUSE-SU-2026:3883-1
SLES 12 google-osconfig-agent 20260911.00-1.60.1 SUSE-SU-2026:4292-1
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 alloy 1.19.2-160000.1.1 SUSE-SU-2026:24148-1
SLES for SAP 16.0 amazon-ecs-init 1.107.0-160000.1.1 SUSE-SU-2026:24150-1
SLES for SAP 16.0 distribution 3.1.1-160000.3.1 SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1
SLES for SAP 16.0 google-cloud-sap-agent 3.15-160000.3.1 SUSE-SU-2026:23619-1
SLES for SAP 16.0 govulncheck-vulndb 0.0.20260727T201416-160000.1.1 SUSE-SU-2026:23227-1, SUSE-SU-2026:23216-1
SLES for SAP 16.0 helm 3.21.3-160000.2.1 SUSE-SU-2026:23984-1, SUSE-SU-2026:23688-1
SLES for SAP 16.0 mcphost 0.34.0-160000.4.1 SUSE-SU-2026:23636-1
SLES for SAP 15 SP6 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLES for SAP 15 SP6 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLES for SAP 15 SP5 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLES for SAP 15 SP5 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLES for SAP 15 SP4 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLES for SAP 15 SP4 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLES 16.0 alloy 1.19.2-160000.1.1 SUSE-SU-2026:24148-1
SLES 16.0 amazon-ecs-init 1.107.0-160000.1.1 SUSE-SU-2026:24150-1
SLES 16.0 distribution 3.1.1-160000.3.1 SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1
SLES 16.0 google-cloud-sap-agent 3.15-160000.3.1 SUSE-SU-2026:23619-1
SLES 16.0 govulncheck-vulndb 0.0.20260727T201416-160000.1.1 SUSE-SU-2026:23227-1, SUSE-SU-2026:23216-1
SLES 16.0 helm 3.21.3-160000.2.1 SUSE-SU-2026:23984-1, SUSE-SU-2026:23688-1
SLES 16.0 mcphost 0.34.0-160000.4.1 SUSE-SU-2026:23636-1
SLE Micro 6.2 c-ares 1.34.8-160000.1.1 SUSE-SU-2026:23456-1
SLE Micro 6.2 helm 3.21.3-160000.2.1 SUSE-SU-2026:23973-1, SUSE-SU-2026:23506-1
SLE Micro 6.2 mcphost 0.34.0-160000.4.1 SUSE-SU-2026:23496-1
SLE Micro 6.1 google-osconfig-agent 20260911.00-slfo.1.1_1.1 SUSE-SU-2026:23924-1
SLE Micro 6.1 helm 3.21.3-slfo.1.1_2.1 SUSE-SU-2026:24282-1, SUSE-SU-2026:23522-1
SLE Micro 6.0 google-osconfig-agent 20260911.00-1.1 SUSE-SU-2026:23876-1
SLE Micro 6.0 helm 3.21.3-2.1 SUSE-SU-2026:23456-1
SLE Micro 5.5 google-osconfig-agent 20260911.00-150000.1.67.1 SUSE-SU-2026:4293-1
SLE Micro 5.5 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLE HPC 15 SP5 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLE HPC 15 SP5 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SLE HPC 15 SP4 distribution 3.1.2-150400.9.47.1 SUSE-SU-2026:5202-1
SLE HPC 15 SP4 helm 3.21.3-150000.1.93.1 SUSE-SU-2026:4175-1, SUSE-SU-2026:3882-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-Micro-5 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.13.2-150002.3.19.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 grafana 12.4.10-150002.4.27.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.2.5-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.2.10-150002.3.15.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.2.7-150002.3.12.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.2.17-150002.3.20.1 SUSE-SU-2026:4585-1
SUSE Multi Linux Manager Tools SLE-15 venv-salt-minion 3006.0-150002.5.22.1 SUSE-SU-2026:4585-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed alloy 1.19.2-1.1 openSUSE-SU-2026:11803-1
openSUSE Tumbleweed amazon-cloudwatch-agent 1.300071.0-2.1 openSUSE-SU-2026:11603-1
openSUSE Tumbleweed amazon-ecs-init 1.107.0-1.1 openSUSE-SU-2026:11914-1
openSUSE Tumbleweed apptainer 1.5.3-3.1 openSUSE-SU-2026:11664-1
openSUSE Tumbleweed azure-storage-azcopy 10.32.7-1.1 openSUSE-SU-2026:11604-1
openSUSE Tumbleweed buildpacks-cli 0.40.9-1.1 openSUSE-SU-2026:11493-1
openSUSE Tumbleweed cadvisor 0.60.5-2.1 openSUSE-SU-2026:11606-1
openSUSE Tumbleweed cloudflared 2026.9.1-1.1 openSUSE-SU-2026:11813-1
openSUSE Tumbleweed containerized-data-importer1.65 1.65.0-3.1 openSUSE-SU-2026:11731-1
openSUSE Tumbleweed containerized-data-importer1.66 1.66.1-1.1 openSUSE-SU-2026:11732-1
openSUSE Tumbleweed coredns 1.14.7-1.1 openSUSE-SU-2026:11608-1
openSUSE Tumbleweed distribution 3.1.1-5.1 openSUSE-SU-2026:11609-1
openSUSE Tumbleweed gh 2.102.0-1.1 openSUSE-SU-2026:12163-1
openSUSE Tumbleweed google-osconfig-agent 20260918.01-1.1 openSUSE-SU-2026:11847-1
openSUSE Tumbleweed grafana 12.4.10-1.1 openSUSE-SU-2026:11684-1
openSUSE Tumbleweed hauler 2.1.0-1.1 openSUSE-SU-2026:11667-1
openSUSE Tumbleweed helm 4.2.4-1.1 openSUSE-SU-2026:11668-1
openSUSE Tumbleweed helm3 3.21.3-6.1 openSUSE-SU-2026:11610-1
openSUSE Tumbleweed helmsman 4.0.5-1.1 openSUSE-SU-2026:12292-1
openSUSE Tumbleweed kubernetes1.34 1.34.11-2.1 openSUSE-SU-2026:11774-1
openSUSE Tumbleweed kubernetes1.35 1.35.8-2.1 openSUSE-SU-2026:11775-1
openSUSE Tumbleweed kubernetes1.36 1.36.4-2.1 openSUSE-SU-2026:11776-1
openSUSE Tumbleweed kumactl 3.0.0-1.1 openSUSE-SU-2026:12300-1
openSUSE Tumbleweed mcphost 0.34.0-10.1 openSUSE-SU-2026:11670-1
openSUSE Tumbleweed trivy 0.74.0-2.1 openSUSE-SU-2026:11676-1
openSUSE Leap 16.0 alloy 1.19.2-160000.1.1 openSUSE-SU-2026:22032-1
openSUSE Leap 16.0 amazon-ecs-init 1.107.0-160000.1.1 openSUSE-SU-2026:22035-1
openSUSE Leap 16.0 apptainer 1.5.3-bp160.3.1 openSUSE-SU-2026:21787-1
openSUSE Leap 16.0 cadvisor 0.60.5-bp160.1.1 openSUSE-SU-2026:21786-1
openSUSE Leap 16.0 cloudflared 2026.9.1-bp160.1.1 openSUSE-SU-2026:21924-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 coredns 1.14.7-bp160.1.1 openSUSE-SU-2026:21674-1
openSUSE Leap 16.0 distribution 3.1.1-160000.3.1 openSUSE-SU-2026:21898-1
openSUSE Leap 16.0 gh 2.102.0-bp160.1.1 openSUSE-SU-2026:22134-1
openSUSE Leap 16.0 google-cloud-sap-agent 3.15-160000.3.1 openSUSE-SU-2026:21755-1
openSUSE Leap 16.0 google-osconfig-agent 20260911.00-160000.1.1 openSUSE-SU-2026:21882-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260727T201416-160000.1.1 openSUSE-SU-2026:21551-1
openSUSE Leap 16.0 grafana 12.4.10-bp160.1.1 openSUSE-SU-2026:22125-1
openSUSE Leap 16.0 hauler 2.1.0-bp160.1.1 openSUSE-SU-2026:21793-1
openSUSE Leap 16.0 helm 3.21.3-160000.2.1 openSUSE-SU-2026:21983-1, openSUSE-SU-2026:21809-1
openSUSE Leap 16.0 mcphost 0.34.0-160000.4.1 openSUSE-SU-2026:21771-1
openSUSE Leap 16.0 trivy 0.74.0-160000.2.1 openSUSE-SU-2026:21801-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 osbuild-composer +2 175-1.0.2.el9_8 ELSA-2026-69293

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r57 —
Wolfi rolling act 0.2.89-r2 —
Wolfi rolling addon-resizer 1.8.23-r23 —
Wolfi rolling amazon-cloudwatch-agent 1.300070.0-r2 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.5.0-r4 —
Wolfi rolling apisix-ingress-controller 2.1.0-r5 —
Wolfi rolling argo-cd-3.2 +1 3.2.12-r4 —
Wolfi rolling argo-cd-3.3 +1 3.3.12-r1 —
Wolfi rolling argo-cd-3.4 +1 3.4.4-r1 —
Wolfi rolling argo-events 1.9.11-r0 —
Wolfi rolling argo-rollouts +1 1.9.0-r18 —
Wolfi rolling argo-workflows-3.7 +1 3.7.15-r3 —
Wolfi rolling argo-workflows-4.0 +2 4.0.6-r2 —
Wolfi rolling argo-workflows-ui-4.0 4.0.11-r0 —
Wolfi rolling argocd-image-updater 1.2.2-r1 —
Wolfi rolling aws-efs-csi-driver 3.3.0-r2 —
Wolfi rolling aws-node-termination-handler 1.25.6-r12 —
Wolfi rolling aws-otel-collector 0.48.0-r6 —
Wolfi rolling azure-service-operator +1 2.20.0-r1 —
Wolfi rolling azure-workload-identity-webhook 1.6.0-r2 —
Wolfi rolling azuredisk-csi-1.34 1.34.4-r5 —
Wolfi rolling azurefile-csi-1.35 1.35.4-r1 —
Wolfi rolling bank-vaults +1 1.33.1-r4 —
Wolfi rolling blob-csi-1.27 1.27.7-r1 —
Wolfi rolling boring-registry 0.18.0-r2 —
Wolfi rolling buildah 1.44.0-r5 —
Wolfi rolling caddy 2.11.4-r3 —
Wolfi rolling cadvisor 0.60.1-r2 —
Wolfi rolling cadvisor-compat 0.60.5-r8 —
Wolfi rolling calico-apiserver-3.31 3.31.6-r9 —
Wolfi rolling calico-key-cert-provisioner-3.32 3.32.2-r3 —
Wolfi rolling calicoctl-3.32 +9 3.32.1-r1 —
Wolfi rolling cass-operator 1.31.0-r3 —
Wolfi rolling cerbos +1 0.53.0-r9 —
Wolfi rolling cert-manager-1.20 +5 1.20.3-r1 —
Wolfi rolling cert-manager-1.20-crds 1.20.3-r18 —
Wolfi rolling cert-manager-cmctl 2.5.0-r8 —
Wolfi rolling cert-manager-csi-driver +1 0.15.0-r5 —
Wolfi rolling cert-manager-istio-csr 0.16.0-r15 —
Wolfi rolling cert-manager-webhook-pdns 2.5.5-r14 —
Wolfi rolling chartmuseum 0.16.5-r15 —
Wolfi rolling cilium-1.19 +4 1.19.5-r4 —
Wolfi rolling clickhouse-operator +1 0.27.1-r4 —
Wolfi rolling cloud-provider-aws-1.35-ecr-credential-provider +1 1.35.2-r6 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.35 +1 1.35.6-r1 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager 35.0.5-r13 —
Wolfi rolling cloudflared 2026.6.1-r2 —
Wolfi rolling cloudprober 0.14.3-r7 —
Wolfi rolling cluster-api-1.12-clusterctl +4 1.12.9-r1 —
Wolfi rolling cluster-api-1.12-controller-compat 1.12.11-r5 —
Wolfi rolling cluster-api-1.13-clusterctl +4 1.13.3-r1 —
Wolfi rolling cluster-api-1.13-controller-compat 1.13.6-r1 —
Wolfi rolling cluster-api-aws-controller 2.11.1-r9 —
Wolfi rolling cluster-api-gcp-controller 1.12.0-r4 —
Wolfi rolling cluster-api-helm-controller 0.6.4-r8 —
Wolfi rolling cluster-api-provider-vsphere 1.16.1-r6 —
Wolfi rolling cluster-autoscaler-1.35 1.35.1-r2 —
Wolfi rolling conftest 0.68.2-r6 —
Wolfi rolling consul-k8s-1.9 +1 1.9.9-r2 —
Wolfi rolling coredns-1.14 1.14.4-r3 —
Wolfi rolling cortex 1.21.1-r4 —
Wolfi rolling crictl +1 1.36.0-r6 —
Wolfi rolling crossplane-2.2 +1 2.2.3-r1 —
Wolfi rolling crossplane-provider-aws-s3 +17 2.6.0-r3 —
Wolfi rolling crossplane-provider-azure-sql 2.6.0-r4 —
Wolfi rolling crossplane-provider-azure-sql-compat +1 2.7.0-r6 —
Wolfi rolling crossplane-provider-family-aws +2 2.6.0-r2 —
Wolfi rolling ctr-1 +2 1.7.33-r1 —
Wolfi rolling ctr-2 +5 2.3.2-r1 —
Wolfi rolling dagdotdev 0.0.20-r19 —
Wolfi rolling dagger 0.20.8-r10 —
Wolfi rolling dapr-daprd-1.17 +5 1.17.10-r2 —
Wolfi rolling dataplaneapi 3.4.0-r2 —
Wolfi rolling db-operator 2.16.0-r17 —
Wolfi rolling dbmate 2.33.0-r6 —
Wolfi rolling descheduler 0.36.0-r5 —
Wolfi rolling dex 2.45.1-r15 —
Wolfi rolling dgraph 25.3.7-r1 —
Wolfi rolling distribution +1 3.1.1-r7 —
Wolfi rolling dive 0.13.1-r21 —
Wolfi rolling dkron +1 4.1.1-r5 —
Wolfi rolling docker-compose 5.2.0-r0 —
Wolfi rolling docker-machine-driver-harvester 1.0.6-r15 —
Wolfi rolling dockerd-28 28.5.2-r39 —
Wolfi rolling dogstatsd-7.77 +3 7.77.3-r19 —
Wolfi rolling dogstatsd-7.78 +3 7.78.4-r13 —
Wolfi rolling dogstatsd-7.79 +3 7.79.2-r10 —
Wolfi rolling dogstatsd-7.80 +3 7.80.4-r8 —
Wolfi rolling eksctl 0.228.0-r1 —
Wolfi rolling emissary +1 4.1.0-r5 —
Wolfi rolling envoy-gateway +1 1.8.1-r3 —
Wolfi rolling envoy-ratelimit 0.0.0_git20260617-r2 —
Wolfi rolling etcd-3.6 3.6.13-r1 —
Wolfi rolling external-dns-0.21 0.21.0-r13 —
Wolfi rolling external-secrets-operator-2.3 2.3.0-r14 —
Wolfi rolling external-secrets-operator-2.4 2.4.1-r11 —
Wolfi rolling external-secrets-operator-2.5 2.5.0-r7 —
Wolfi rolling falco-no-driver 0.44.1-r8 —
Wolfi rolling falcoctl 0.13.0-r8 —
Wolfi rolling falcosidekick 2.34.1-r2 —
Wolfi rolling ferretdb 2.7.0-r21 —
Wolfi rolling flux-2.7 2.7.5-r24 —
Wolfi rolling flux-2.8 2.8.8-r7 —
Wolfi rolling flux-helm-controller 1.6.0-r1 —
Wolfi rolling flux-image-reflector-controller +1 1.2.0-r1 —
Wolfi rolling flux-kustomize-controller 1.9.0-r2 —
Wolfi rolling flux-kustomize-controller-iamguarded-compat 1.9.5-r2 —
Wolfi rolling flux-notification-controller 1.9.0-r0 —
Wolfi rolling flyte 1.16.8-r1 —
Wolfi rolling fulcio 1.8.7-r4 —
Wolfi rolling gatekeeper-3.22 +1 3.22.2-r8 —
Wolfi rolling gatus 5.36.0-r6 —
Wolfi rolling gcp-compute-persistent-disk-csi-driver-1.25 1.25.2-r7 —
Wolfi rolling gcp-compute-persistent-disk-csi-driver-1.25-compat 1.25.2-r18 —
Wolfi rolling gcsfuse 2.12.2-r28 —
Wolfi rolling gitaly-18.11 +1 18.11.6-r4 —
Wolfi rolling gitaly-19.0 +2 19.0.3-r1 —
Wolfi rolling gitaly-19.1 +4 19.1.1-r1 —
Wolfi rolling gitlab-kas-18.11 +1 18.11.5-r2 —
Wolfi rolling gitlab-kas-19.0 +1 19.0.2-r3 —
Wolfi rolling gitlab-pages-18.11 18.11.6-r2 —
Wolfi rolling gitlab-pages-19.1 19.1.0-r1 —
Wolfi rolling gitlab-runner-18.11 +2 18.11.4-r1 —
Wolfi rolling gitlab-runner-19.0 +2 19.0.1-r3 —
Wolfi rolling gitness 3.3.0-r24 —
Wolfi rolling gitsign 0.16.1-r2 —
Wolfi rolling go-discover 0_git20260629-r1 —
Wolfi rolling gomplate-5 5.1.0-r8 —
Wolfi rolling goreleaser 2.16.0-r5 —
Wolfi rolling gptscript 0.9.9-r437 —
Wolfi rolling grafana-12.3 12.3.8-r1 —
Wolfi rolling grafana-12.4 12.4.5-r1 —
Wolfi rolling grafana-agent-operator 0.44.8-r11 —
Wolfi rolling grafana-alloy 1.18.0-r0 —
Wolfi rolling grafana-image-renderer 5.8.11-r1 —
Wolfi rolling grafana-mimir-3.0 +3 3.0.7-r2 —
Wolfi rolling grafana-mimir-3.1 +3 3.1.1-r2 —
Wolfi rolling grafana-pyroscope-1.19 1.19.3-r9 —
Wolfi rolling grafana-pyroscope-2.0 2.0.5-r1 —
Wolfi rolling grype 0.114.0-r2 —
Wolfi rolling guac +4 1.1.0-r21 —
Wolfi rolling haproxy-ingress-0.16 0.16.1-r5 —
Wolfi rolling harbor-cli 0.0.23-r2 —
Wolfi rolling helm-operator 1.42.2-r14 —
Wolfi rolling hubble 1.19.4-r4 —
Wolfi rolling hubble-ui-backend 0.13.5-r9 —
Wolfi rolling hydra 26.2.0-r12 —
Wolfi rolling ingress-nginx-controller-1.15 1.15.8-r3 —
Wolfi rolling ipfs-cluster 1.1.6-r8 —
Wolfi rolling jaeger-operator 1.65.0-r24 —
Wolfi rolling jitsucom-bulker-bulker +4 2.11.913-r34 —
Wolfi rolling jitsucom-bulker-sidecar-compat 2.15.0-r4 —
Wolfi rolling juicefs-1.3 1.3.1-r21 —
Wolfi rolling k3s +1 1.36.2.1-r2 —
Wolfi rolling k3s-1.32 +4 No fix yet —
Wolfi rolling k3s-1.34 +1 1.34.9.1-r2 —
Wolfi rolling k3s-1.35 +1 1.35.6.1-r2 —
Wolfi rolling k8s_gateway 1.8.2-r1 —
Wolfi rolling k8sgpt 0.4.34-r2 —
Wolfi rolling k8ssandra-client 0.8.14-r3 —
Wolfi rolling k9s 0.51.0-r3 —
Wolfi rolling kaniko 1.25.16-r1 —
Wolfi rolling kapp-controller 0.60.3-r2 —
Wolfi rolling kargo 1.10.8-r1 —
Wolfi rolling keda-2.19 +1 2.19.0-r19 —
Wolfi rolling keda-2.20 +2 2.20.1-r3 —
Wolfi rolling kiali 2.28.0-r1 —
Wolfi rolling kine 0.16.3-r1 —
Wolfi rolling knative-client +1 1.22.1-r4 —
Wolfi rolling knative-eventing-1.21-filter +7 1.21.4-r1 —
Wolfi rolling knative-eventing-1.22-filter +7 1.22.2-r1 —
Wolfi rolling knative-operator-1.21 +1 1.21.3-r2 —
Wolfi rolling knative-operator-1.22 +1 1.22.2-r5 —
Wolfi rolling knative-operator-1.22-compat 1.22.3-r8 —
Wolfi rolling knative-serving-1.21-queue +5 1.21.3-r0 —
Wolfi rolling knative-serving-1.22-cleanup +2 1.22.1-r12 —
Wolfi rolling knative-serving-1.22-queue +5 1.22.1-r5 —
Wolfi rolling kots 1.130.4-r9 —
Wolfi rolling kserve +1 0.20.0-r7 —
Wolfi rolling kserve-agent +4 0.19.0-r4 —
Wolfi rolling kserve-modelmesh-serving 0.12.0-r36 —
Wolfi rolling ksops 4.5.1-r9 —
Wolfi rolling kube-arangodb-1.4 1.4.3-r12 —
Wolfi rolling kube-logging-operator 6.7.0-r2 —
Wolfi rolling kube-metrics-adapter 0.2.9-r8 —
Wolfi rolling kube-rbac-proxy 0.22.1-r1 —
Wolfi rolling kube-state-metrics 2.19.1-r2 —
Wolfi rolling kube-vip-cloud-provider 0.0.12-r24 —
Wolfi rolling kubeadm-1.34 +7 1.34.9-r2 —
Wolfi rolling kubeadm-1.35 +7 1.35.6-r2 —
Wolfi rolling kubeadm-1.36 +7 1.36.2-r2 —
Wolfi rolling kubectl-1.33 1.33.13-r8 —
Wolfi rolling kubectl-bash-completion-1.35 +3 1.35.8-r6 —
Wolfi rolling kubeflow-pipelines-apiserver +3 2.16.1-r11 —
Wolfi rolling kubeflow-pipelines-metadata-writer-compat 2.17.2-r4 —
Wolfi rolling kuberay-operator 1.6.2-r2 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.17.1-r19 —
Wolfi rolling kubernetes-csi-driver-nfs 4.13.3-r2 —
Wolfi rolling kubernetes-csi-external-attacher 4.12.0-r6 —
Wolfi rolling kubernetes-csi-external-health-monitor 0.18.0-r5 —
Wolfi rolling kubernetes-csi-external-resizer 2.2.1-r1 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.5 +1 8.5.0-r18 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.6 +1 8.6.0-r4 —
Wolfi rolling kubernetes-csi-livenessprobe 2.19.0-r3 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.16 2.16.0-r22 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.17 2.17.0-r5 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.17-compat 2.17.0-r11 —
Wolfi rolling kubernetes-dns-node-cache 1.26.8-r11 —
Wolfi rolling kubescape 4.0.9-r2 —
Wolfi rolling kubescape-operator 0.2.151-r2 —
Wolfi rolling kubevela-vela-cli +1 1.10.8-r12 —
Wolfi rolling kubo 0.42.0-r3 —
Wolfi rolling kubo-compat 0.43.1-r0 —
Wolfi rolling kuma-cp-2.13 +4 2.13.8-r2 —
Wolfi rolling kyverno-1.17 1.17.2-r35 —
Wolfi rolling kyverno-1.18 +5 1.18.1-r8 —
Wolfi rolling kyverno-cli-1.17 +4 1.17.2-r12 —
Wolfi rolling kyverno-notation-aws 1.1-r66 —
Wolfi rolling lazydocker 0.25.2-r6 —
Wolfi rolling linkerd2-controller 26.6.3-r1 —
Wolfi rolling linkerd2-debug +1 26.9.2-r0 —
Wolfi rolling litestream 0.5.13-r2 —
Wolfi rolling manifest-tool 2.2.2-r5 —
Wolfi rolling mesosphere-vsphere-csi-driver 3.5.0-r24 —
Wolfi rolling metallb +4 0.16.1-r4 —
Wolfi rolling metrics-server 0.8.1-r15 —
Wolfi rolling metrics-server-compat 0.9.0-r11 —
Wolfi rolling migrate 4.19.1-r20 —
Wolfi rolling minio 0.20260604.005411-r3 —
Wolfi rolling net-kourier-1.21 1.21.1-r5 —
Wolfi rolling neuvector-scanner +1 4.204-r1 —
Wolfi rolling neuvector-sigstore-interface 0_git20260617-r2 —
Wolfi rolling newrelic-infrastructure-agent 1.77.0-r2 —
Wolfi rolling node-feature-discovery-0.18 0.18.3-r21 —
Wolfi rolling node-problem-detector-1.35 1.35.3-r1 —
Wolfi rolling nuclei +1 3.9.0-r2 —
Wolfi rolling op-geth 1.101702.2-r7 —
Wolfi rolling openbao 2.5.5-r2 —
Wolfi rolling opencost 1.120.4-r1 —
Wolfi rolling opentofu-1.11 1.11.11-r1 —
Wolfi rolling opentofu-1.12 1.12.3-r1 —
Wolfi rolling opentofu-1.12-compat 1.12.6-r6 —
Wolfi rolling opentofu-1.9 1.9.4-r28 —
Wolfi rolling osv-scanner 2.4.0-r1 —
Wolfi rolling otel-cli 0.4.5-r25 —
Wolfi rolling percona-server-mongodb-operator 1.22.0-r21 —
Wolfi rolling podman 6.0.0-r2 —
Wolfi rolling policy-controller +1 0.15.1-r13 —
Wolfi rolling prometheus-3.10 3.10.0-r22 —
Wolfi rolling prometheus-3.11 3.11.3-r16 —
Wolfi rolling prometheus-adapter 0.12.0-r30 —
Wolfi rolling prometheus-alertmanager 0.33.0-r2 —
Wolfi rolling promxy 0.0.94-r2 —
Wolfi rolling pulumi-kubernetes-operator 2.7.0-r13 —
Wolfi rolling rancher-2.13 2.13.6-r5 —
Wolfi rolling rancher-2.14 2.14.3-r1 —
Wolfi rolling rancher-agent-2.13 2.13.6-r3 —
Wolfi rolling rancher-agent-2.14 2.14.3-r2 —
Wolfi rolling rancher-fleet 0.16.1-r3 —
Wolfi rolling rancher-fleet-cli +2 0.15.4-r3 —
Wolfi rolling rancher-machine 0.15.0.144-r1 —
Wolfi rolling rancher-system-agent 0.14.0-r1 —
Wolfi rolling rancher-webhook-0.10 0.10.7-r1 —
Wolfi rolling ratify +4 1.4.0-r34 —
Wolfi rolling ratify-licensechecker-compat 1.4.5-r4 —
Wolfi rolling rclone 1.74.3-r3 —
Wolfi rolling rekor-cli +2 1.5.2-r5 —
Wolfi rolling restic 0.19.0-r1 —
Wolfi rolling rke2-cloud-provider 1.36.1-r1 —
Wolfi rolling scorecard 5.5.0-r10 —
Wolfi rolling seaweedfs 4.38-r1 —
Wolfi rolling secrets-store-csi-driver 1.6.0-r7 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.8.2-r2 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.15.0-r4 —
Wolfi rolling skopeo 1.23.0-r3 —
Wolfi rolling slsa-verifier 2.7.1-r22 —
Wolfi rolling snyk-cli 1.1305.2-r1 —
Wolfi rolling spegel +2 0.7.2-r3 —
Wolfi rolling spicedb 1.54.0-r1 —
Wolfi rolling spicedb-operator 1.25.1-r6 —
Wolfi rolling spire-agent +1 1.15.1-r5 —
Wolfi rolling sql_exporter 0.24.1-r3 —
Wolfi rolling steampipe 2.4.4-r7 —
Wolfi rolling step 0.30.6-r2 —
Wolfi rolling step-ca 0.30.2-r13 —
Wolfi rolling step-issuer 0.11.0-r3 —
Wolfi rolling step-issuer-compat 0.12.0-r12 —
Wolfi rolling step-kms-plugin 0.17.0-r9 —
Wolfi rolling syft 1.46.0-r1 —
Wolfi rolling tailscale-k8s-operator 1.98.8-r2 —
Wolfi rolling tdbg +4 1.31.2-r1 —
Wolfi rolling tekton-chains 0.27.1-r3 —
Wolfi rolling tekton-pipelines-events-1.11 +5 1.11.1-r9 —
Wolfi rolling tekton-pipelines-events-1.11-compat +1 1.11.1-r20 —
Wolfi rolling tekton-pipelines-events-1.12 +5 1.12.2-r1 —
Wolfi rolling tekton-pipelines-nop-1.12-compat 1.12.2-r12 —
Wolfi rolling telegraf-1.38 1.38.4-r9 —
Wolfi rolling teleport-18.6 +2 18.6.8-r32 —
Wolfi rolling tempo-2.10 +3 2.10.7-r3 —
Wolfi rolling tempo-3.0 +3 3.0.2-r2 —
Wolfi rolling temporal 1.7.3-r1 —
Wolfi rolling terraform-mcp-server 1.0.0-r2 —
Wolfi rolling terraform-provider-acme 2.48.1-r7 —
Wolfi rolling terraform-provider-google 7.38.0-r1 —
Wolfi rolling terraform-provider-grafana 4.39.0-r1 —
Wolfi rolling tetra +1 1.7.0-r3 —
Wolfi rolling tflint 0.63.1-r4 —
Wolfi rolling tfsec 1.28.14-r38 —
Wolfi rolling thanos 0.41.0-r18 —
Wolfi rolling tkn 0.45.0-r7 —
Wolfi rolling traefik-3.6 3.6.22-r1 —
Wolfi rolling traefik-3.7 3.7.6-r1 —
Wolfi rolling trillian-logserver +1 1.7.3-r11 —
Wolfi rolling trivy 0.71.2-r1 —
Wolfi rolling trivy-operator 0.30.1-r19 —
Wolfi rolling trufflehog 3.95.6-r1 —
Wolfi rolling tw +3 0.0.50-r0 —
Wolfi rolling undock 0.14.0-r2 —
Wolfi rolling vault-env 1.23.0-r4 —
Wolfi rolling vcluster +2 0.35.1-r1 —
Wolfi rolling velero 1.18.2-r1 —
Wolfi rolling velero-restore-helper 1.18.2-r10 —
Wolfi rolling vertical-pod-autoscaler +2 1.7.0-r2 —
Wolfi rolling victoriametrics-operator 0.72.0-r3 —
Wolfi rolling vitess-23 +1 23.0.5-r1 —
Wolfi rolling vitess-24 +1 24.0.2-r3 —
Wolfi rolling vitess-24-compat 24.0.3-r7 —
Wolfi rolling weaviate 1.38.2-r1 —
Wolfi rolling witness 0.11.0-r10 —
Wolfi rolling wolfictl 0.39.19-r1 —
Wolfi rolling xeol 0.10.8-r47 —
Wolfi rolling yunikorn-k8shim 1.8.0-r21 —
Wolfi rolling zarf 0.79.0-r3 —
Wolfi rolling zot 2.1.17-r9 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go go.opentelemetry.io/otel >= 1.41.0, < 1.42.0 · >= 1.43.0, < 1.44.0 1.42.0, 1.44.0 GO-2026-5158
Go go.opentelemetry.io/otel/baggage >= 1.41.0, < 1.42.0 1.42.0 GHSA-5wrp-cwcj-q835
Go go.opentelemetry.io/otel/baggage >= 1.43.0, < 1.44.0 1.44.0 GHSA-5wrp-cwcj-q835
Go go.opentelemetry.io/otel/propagation >= 1.41.0, < 1.42.0 1.42.0 GHSA-5wrp-cwcj-q835
Go go.opentelemetry.io/otel/propagation >= 1.43.0, < 1.44.0 1.44.0 GHSA-5wrp-cwcj-q835

Advisories 50

References