Description
When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | net/http | < 1.25.13, 1.26.0-0 – < 1.26.6, 1.27.0-0 – < 1.27.0-rc.3 | 1.25.13 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-1.26 | 1.26.6-1 | — |
| Debian 14 | golang-1.27 | 1.27~rc3-1 | — |
| Debian 13 | golang-1.24 | No fix yet | — |
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | golang-1.23 +2 | No fix yet | — |
| Ubuntu 24.04 LTS | golang-1.21 +3 | No fix yet | — |
| Ubuntu 22.04 LTS | golang-1.17 +6 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.13 +4 | No fix yet | — |
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +2 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.13 +1 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | buildah +1 | 2:1.43.1-5.el10_2 | RHSA-2026:98555, RHSA-2026:64777, RHSA-2026:63332 |
| RHEL 10 | delve | 1.27.2-3.el10_3 | RHSA-2026:98086 |
| RHEL 10 | go-fdo-server +3 | 1.0.1-2.el10_2.4 | RHSA-2026:98593, RHSA-2026:62578 |
| RHEL 10 | golang +7 | 1.26.7-1.el10_2 | RHSA-2026:60306 |
| RHEL 10 | grafana +1 | 10.2.6-28.el10_2.5 | RHSA-2026:98056, RHSA-2026:63022 |
| RHEL 10 | grafana-pcp | 5.3.0-8.el10_2.1 | RHSA-2026:98579, RHSA-2026:63119 |
| RHEL 10 | gvisor-tap-vsock +1 | 6:0.8.7-2.el10_3 | RHSA-2026:98610 |
| RHEL 10 | image-builder | 52.1-1.el10_2.2 | RHSA-2026:65534 |
| RHEL 10 | ipp-usb | 0.9.27-7.el10_2.3 | RHSA-2026:62631 |
| RHEL 10 | oci-seccomp-bpf-hook | 1.2.11-3.el10_2 | RHSA-2026:98597, RHSA-2026:89752 |
| RHEL 10 | opentelemetry-collector | 0.152.1-2.el10_2 | RHSA-2026:65116 |
| RHEL 10 | osbuild-composer +2 | 165.1-3.el10_2.2 | RHSA-2026:65895 |
| RHEL 10 | podman +3 | 7:5.8.2-9.el10_2 | RHSA-2026:98554, RHSA-2026:70201 |
| RHEL 10 | rhc-worker-playbook | 0.2.10-2.el10_2 | RHSA-2026:67464 |
| RHEL 10 | skopeo +1 | 2:1.22.2-5.el10_2 | RHSA-2026:98556, RHSA-2026:64818 |
| RHEL 9 | buildah +1 | 2:1.43.2-4.el9_9 | RHSA-2026:98450, RHSA-2026:70640 |
| RHEL 9 | containernetworking-plugins | 1:1.9.0-4.el9_8 | RHSA-2026:98449, RHSA-2026:70391 |
| RHEL 9 | golang +7 | 1.26.7-1.el9_8 | RHSA-2026:60304 |
| RHEL 9 | grafana +1 | 10.2.6-23.el9_8.3 | RHSA-2026:98454, RHSA-2026:62406 |
| RHEL 9 | grafana-pcp | 5.1.1-17.el9_9.3 | RHSA-2026:98479 |
| RHEL 9 | gvisor-tap-vsock +1 | 6:0.8.8-2.el9_9 | RHSA-2026:98502 |
| RHEL 9 | image-builder | 52.1-1.el9_8.2 | RHSA-2026:65886 |
| RHEL 9 | opentelemetry-collector | 0.152.1-2.el9_8 | RHSA-2026:65117 |
| RHEL 9 | osbuild-composer +2 | 165.1-4.el9_8.1 | RHSA-2026:65153 |
| RHEL 9 | podman +4 | 6:5.8.2-7.el9_8 | RHSA-2026:69961 |
| RHEL 9 | skopeo +1 | 2:1.22.2-8.el9_8 | RHSA-2026:98448, RHSA-2026:70641 |
| RHEL 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | buildah +1 | 2:1.33.14-6.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | container-selinux | 2:2.229.0-3.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-10.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | containers-common | 2:1-82.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | crit +4 | 3.18-5.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | crun | 1.14.3-4.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | delve | 1.26.1-1.module+el8.10.0+24516+40554724 | RHSA-2026:60305 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | golang +7 | 1.26.7-1.module+el8.10.0+24751+b3673b3e | RHSA-2026:60305 |
| RHEL 8 | grafana +1 | 9.2.10-33.el8_10 | RHSA-2026:62407 |
| RHEL 8 | grafana-pcp | 5.1.1-18.el8_10 | RHSA-2026:63124 |
| RHEL 8 | libslirp +1 | 4.4.0-2.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-3.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | osbuild-composer +2 | 101.5-2.el8_10 | RHSA-2026:66016 |
| RHEL 8 | podman +6 | 4:4.9.4-37.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | python-podman +1 | 4.9.0-3.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | rhc | 1:0.2.5-10.el8_10 | RHSA-2026:64786 |
| RHEL 8 | runc | 4:1.2.9-6.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | skopeo +1 | 2:1.14.6-4.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | toolbox +1 | 0.0.99.5.1-1.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
| RHEL 8 | udica | 0.2.6-21.module+el8.10.0+24790+ef71b018 | RHSA-2026:63163 |
Show 24 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Utils 6 | foreman +1 | 3.12.0.23-1.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite Utils 6 | rubygem-hammer_cli | 3.12.0-2.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite Utils 6 | satellite +1 | 6.16.14-1.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite Capsule 6 | foreman +2 | 3.12.0.23-1.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite Capsule 6 | openvox-agent | 8.31.1-1.el9sat | RHSA-2026:92861 |
| Red Hat Satellite Capsule 6 | openvox-server | 8.17.0-1.el9sat | RHSA-2026:92861 |
| Red Hat Satellite Capsule 6 | pulpcore-obsolete-packages | 1.3.1-6.el9pc | RHSA-2026:74504 |
| Red Hat Satellite Capsule 6 | python-dynaconf +1 | 3.2.13-1.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.62-1.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite Capsule 6 | python-lxml +1 | 4.9.2-5.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite Capsule 6 | python-pulpcore +1 | 3.49.39-4.el8pc | RHSA-2026:74506 |
| Red Hat Satellite Capsule 6 | python-sqlparse +1 | 0.6.0-1.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite Capsule 6 | python3.12-brotli | 1.2.1-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite Capsule 6 | python3.12-django | 4.2.30-3.el9pc | RHSA-2026:92861 |
| Red Hat Satellite Capsule 6 | python3.12-dynaconf | 3.2.13-2.el9pc | RHSA-2026:74504 |
| Red Hat Satellite Capsule 6 | python3.12-gitpython | 3.1.62-1.el9pc | RHSA-2026:92861, RHSA-2026:74504 |
| Red Hat Satellite Capsule 6 | python3.12-pillow | 13.0.0-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite Capsule 6 | python3.12-pulp-ansible | 1:0.28.10-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite Capsule 6 | python3.12-sqlparse | 0.6.0-1.el9pc | RHSA-2026:74504 |
| Red Hat Satellite Capsule 6 | python3.12-urllib3 | 2.8.0-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite Capsule 6 | satellite +2 | 6.16.14-1.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite Capsule 6 | satellite-obsolete-packages | 6.17.12-1.el9sat | RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | foreman +14 | 3.12.0.23-1.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | openvox-agent | 8.31.1-1.el9sat | RHSA-2026:92861 |
| Red Hat Satellite 6 | openvox-server | 8.17.0-1.el9sat | RHSA-2026:92861 |
| Red Hat Satellite 6 | pulpcore-obsolete-packages | 1.3.1-6.el9pc | RHSA-2026:74504 |
| Red Hat Satellite 6 | python-dynaconf +1 | 3.2.13-1.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite 6 | python-gitpython +1 | 3.1.62-1.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite 6 | python-lxml +1 | 4.9.2-5.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite 6 | python-pulpcore +1 | 3.49.39-4.el8pc | RHSA-2026:74506 |
| Red Hat Satellite 6 | python-sqlparse +1 | 0.6.0-1.el8pc | RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Satellite 6 | python3.12-brotli | 1.2.1-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite 6 | python3.12-django | 4.2.30-3.el9pc | RHSA-2026:92861 |
| Red Hat Satellite 6 | python3.12-dynaconf | 3.2.13-2.el9pc | RHSA-2026:74504 |
| Red Hat Satellite 6 | python3.12-gitpython | 3.1.62-1.el9pc | RHSA-2026:92861, RHSA-2026:74504 |
| Red Hat Satellite 6 | python3.12-pillow | 13.0.0-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite 6 | python3.12-pulp-ansible | 1:0.28.10-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite 6 | python3.12-sqlparse | 0.6.0-1.el9pc | RHSA-2026:74504 |
| Red Hat Satellite 6 | python3.12-urllib3 | 2.8.0-1.el9pc | RHSA-2026:92861 |
| Red Hat Satellite 6 | rubygem-foreman_remote_execution +1 | 13.2.8-2.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | rubygem-hammer_cli | 3.12.0-2.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | rubygem-katello | 4.14.0.23-1.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | rubygem-safemode | 1.5.0-2.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | satellite +2 | 6.16.14-1.el8sat | RHSA-2026:74506, RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | satellite-obsolete-packages | 6.17.12-1.el9sat | RHSA-2026:74505, RHSA-2026:74504 |
| Red Hat Satellite 6 | yggdrasil-worker-forwarder | 0.1.0-2.el8sat | RHSA-2026:92861, RHSA-2026:74506, RHSA-2026:74505 |
| Red Hat Rhel Satellite Client 6 | foreman_ygg_worker | 0.3.3-3.el8sat | RHSA-2026:94063 |
| Red Hat Rhel Satellite Client 6 | yggdrasil | 0.2.3-5.el8sat | RHSA-2026:94063 |
| RHEL 10.0 EUS | delve | 1.26.1-2.el10_0 | RHSA-2026:65918 |
| RHEL 10.0 EUS | golang +7 | 1.26.7-1.el10_0 | RHSA-2026:61882 |
| RHEL 10.0 EUS | grafana +1 | 10.2.6-26.el10_0 | RHSA-2026:67517 |
| RHEL 10.0 EUS | grafana-pcp | 5.3.0-1.el10_0.1 | RHSA-2026:66459 |
| RHEL 10.0 EUS | ignition +2 | 2.21.0-3.el10_0.4 | RHSA-2026:65335 |
| RHEL 10.0 EUS | ipp-usb +1 | 0.9.27-3.el10_0.5 | RHSA-2026:98108 |
| RHEL 10.0 EUS | opentelemetry-collector | 0.152.1-2.el10_0 | RHSA-2026:67974 |
| RHEL 10.0 EUS | osbuild-composer +2 | 134.1-12.el10_0 | RHSA-2026:66327 |
| RHEL 10.0 EUS | rhc-worker-playbook | 0.2.3-6.el10_0.1 | RHSA-2026:70103 |
| RHEL 9.8 EUS | oci-seccomp-bpf-hook | 1.2.11-4.el9_8 | RHSA-2026:99169 |
| RHEL 9.6 EUS | delve | 1.26.1-1.el9_6.1 | RHSA-2026:67128 |
| RHEL 9.6 EUS | golang +7 | 1.26.7-1.el9_6 | RHSA-2026:62404 |
| RHEL 9.6 EUS | grafana +1 | 10.2.6-23.el9_6 | RHSA-2026:67518 |
| RHEL 9.6 EUS | grafana-pcp | 5.1.1-15.el9_6.1 | RHSA-2026:67132 |
| RHEL 9.6 EUS | ignition +3 | 2.21.0-7.el9_6.1 | RHSA-2026:65336 |
| RHEL 9.6 EUS | opentelemetry-collector | 0.152.1-2.el9_6 | RHSA-2026:67975 |
| RHEL 9.6 EUS | osbuild-composer +2 | 132.2-12.el9_6 | RHSA-2026:62803 |
| RHEL 9.4 E4S | delve | 1.26.1-1.el9_4.1 | RHSA-2026:67153 |
| RHEL 9.4 E4S | golang +7 | 1.26.7-1.el9_4 | RHSA-2026:62405 |
| RHEL 9.4 E4S | grafana +1 | 9.2.10-28.el9_4 | RHSA-2026:76795 |
| RHEL 9.4 E4S | grafana-pcp | 5.1.1-9.el9_4 | RHSA-2026:67159 |
| RHEL 9.4 E4S | ignition +2 | 2.17.0-2.el9_4.2 | RHSA-2026:65880 |
| RHEL 9.4 E4S | opentelemetry-collector | 0.152.1-2.el9_4 | RHSA-2026:68527 |
| RHEL 9.4 E4S | osbuild-composer +2 | 101.3-4.el9_4.6 | RHSA-2026:62753 |
| RHEL 9.2 E4S | delve | 1.26.1-1.el9_2.1 | RHSA-2026:67313 |
| RHEL 9.2 E4S | golang +7 | 1.26.7-1.el9_2 | RHSA-2026:62602 |
| RHEL 9.2 E4S | grafana | 9.0.9-13.el9_2 | RHSA-2026:76809 |
| RHEL 9.2 E4S | grafana-pcp | 5.1.1-5.el9_2.2 | RHSA-2026:67160 |
| RHEL 9.2 E4S | ignition +2 | 2.15.0-2.el9_2.1 | RHSA-2026:65359 |
| RHEL 9.2 E4S | osbuild-composer +3 | 76.1-9.el9_2 | RHSA-2026:62754 |
| RHEL 8.8 TUS | delve | 1.26.1-1.module+el8.8.0+24781+86ad105d | RHSA-2026:87245 |
| RHEL 8.8 TUS | git-lfs | 3.2.0-2.el8_8.8 | RHSA-2026:72737 |
| RHEL 8.8 TUS | golang +7 | 1.26.10-4.module+el8.8.0+25113+a148ecc0 | RHSA-2026:87245 |
| RHEL 8.8 TUS | grafana | 7.5.15-12.el8_8 | RHSA-2026:88340 |
| RHEL 8.8 TUS | grafana-pcp | 3.2.0-6.el8_8.2 | RHSA-2026:88395 |
| RHEL 8.8 TUS | osbuild-composer +3 | 75-10.el8_8 | RHSA-2026:68504 |
| RHEL 8.8 E4S | delve | 1.26.1-1.module+el8.8.0+24781+86ad105d | RHSA-2026:87245 |
| RHEL 8.8 E4S | git-lfs | 3.2.0-2.el8_8.8 | RHSA-2026:72737 |
| RHEL 8.8 E4S | golang +7 | 1.26.10-4.module+el8.8.0+25113+a148ecc0 | RHSA-2026:87245 |
| RHEL 8.8 E4S | grafana | 7.5.15-12.el8_8 | RHSA-2026:88340 |
| RHEL 8.8 E4S | grafana-pcp | 3.2.0-6.el8_8.2 | RHSA-2026:88395 |
| RHEL 8.8 E4S | osbuild-composer +3 | 75-10.el8_8 | RHSA-2026:68504 |
| RHEL 8.6 EUS Long Life | delve | 1.26.1-1.module+el8.6.0+24782+a062e766 | RHSA-2026:87246 |
| RHEL 8.6 EUS Long Life | git-lfs | 2.13.3-3.el8_6.8 | RHSA-2026:72805 |
| RHEL 8.6 EUS Long Life | golang +7 | 1.26.10-4.module+el8.6.0+25114+90ecdb41 | RHSA-2026:87246 |
| RHEL 8.6 EUS Long Life | grafana | 7.5.11-12.el8_6 | RHSA-2026:88339 |
| RHEL 8.6 EUS Long Life | grafana-pcp | 3.2.0-4.el8_6.2 | RHSA-2026:88394 |
| RHEL 8.6 EUS Long Life | osbuild-composer +3 | 46.3-8.el8_6 | RHSA-2026:69235 |
| RHEL 8.6 AUS | delve | 1.26.1-1.module+el8.6.0+24782+a062e766 | RHSA-2026:87246 |
| RHEL 8.6 AUS | git-lfs | 2.13.3-3.el8_6.8 | RHSA-2026:72805 |
| RHEL 8.6 AUS | golang +7 | 1.26.10-4.module+el8.6.0+25114+90ecdb41 | RHSA-2026:87246 |
| RHEL 8.6 AUS | grafana | 7.5.11-12.el8_6 | RHSA-2026:88339 |
| RHEL 8.6 AUS | grafana-pcp | 3.2.0-4.el8_6.2 | RHSA-2026:88394 |
| RHEL 8.6 AUS | osbuild-composer +3 | 46.3-8.el8_6 | RHSA-2026:69235 |
| RHEL 8.4 EUS Long Life | delve | 1.26.1-1.module+el8.4.0+25181+7ce5b91c | RHSA-2026:90994 |
| RHEL 8.4 EUS Long Life | git-lfs | 2.13.3-3.el8_4.6 | RHSA-2026:95234 |
| RHEL 8.4 EUS Long Life | golang +7 | 1.26.10-2.module+el8.4.0+25201+9a419e96 | RHSA-2026:90994 |
| RHEL 8.4 EUS Long Life | osbuild-composer +2 | 28.7-7.el8_4 | RHSA-2026:96076 |
| RHEL 8.4 AUS | delve | 1.26.1-1.module+el8.4.0+25181+7ce5b91c | RHSA-2026:90994 |
| RHEL 8.4 AUS | git-lfs | 2.13.3-3.el8_4.6 | RHSA-2026:95234 |
| RHEL 8.4 AUS | golang +7 | 1.26.10-2.module+el8.4.0+25201+9a419e96 | RHSA-2026:90994 |
| RHEL 8.4 AUS | osbuild-composer +2 | 28.7-7.el8_4 | RHSA-2026:96076 |
| Red Hat OpenStack 18 | golang-github-openstack-k8s-operators-os-diff | 0.1.1-18.0.20261021172337.a95ae05.el9ost | RHSA-2026:90332 |
| Red Hat OpenStack 17 | collectd-libpod-stats | 1.0.6-9.el9ost | RHSA-2026:90329 |
| Red Hat OpenStack 17 | collectd-sensubility | 0.2.1-8.el9ost | RHSA-2026:90329 |
| Red Hat OpenStack 17 | etcd | 3.4.26-9.10.el9ost | RHSA-2026:90329 |
| Red Hat OpenStack 16 | collectd-libpod-stats | 1.0.4-6.2.el8ost | RHSA-2026:90330 |
| Red Hat OpenStack 16 | collectd-sensubility | 0.2.1-1.3.el8ost | RHSA-2026:90330 |
| Red Hat OpenStack 16 | etcd | 3.3.23-25.el8ost | RHSA-2026:90330 |
| Red Hat OpenShift 4 | cri-o | 1.35.9-12.rhaos4.22.git4c168db.el9 | RHSA-2026:71445 |
| Red Hat OpenShift 4 | microshift +18 | 4.22.16-202609250657.p0.g3898bb2.assembly.4.22.16.el9 | RHSA-2026:71672 |
| Red Hat OpenShift 4 | openshift +1 | 4.15.0-202610071830.p2.g5cb2ef4.assembly.stream.el8 | RHSA-2026:82810, RHSA-2026:71445 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.15.0-202610071830.p2.g8231637.assembly.stream.el8 | RHSA-2026:82810, RHSA-2026:71445 |
| Red Hat OpenShift 4 | openshift-kubelet +3 | 4.22.0-202609220430.p2.g9858a61.assembly.stream.el9 | RHSA-2026:71445 |
| Red Hat OpenShift 4 | ose-aws-ecr-image-credential-provider | 4.15.0-202610071830.p2.gfd77d92.assembly.stream.el8 | RHSA-2026:82810 |
| Red Hat OpenShift 4 | ose-azure-acr-image-credential-provider | 4.15.0-202610071830.p2.g5638728.assembly.stream.el8 | RHSA-2026:82810 |
| Red Hat OpenShift 4 | ose-gcp-gcr-image-credential-provider | 4.15.0-202610071830.p2.gfc50272.assembly.stream.el8 | RHSA-2026:82810 |
| Red Hat Hardened Images 1 | golang1.25 +5 | 1.25.13-0.1.hum1 | RHSA-2026:54836 |
| Red Hat Hardened Images 1 | golang1.26 +5 | 1.26.6-0.1.hum1 | RHSA-2026:54835 |
| Red Hat Edge Manager 1 | flightctl +2 | 1.1.4-1.el9em | RHSA-2026:68335, RHSA-2026:68334 |
| Red Hat Ansible Automation Platform Inside 2 | receptor | 1.6.8-1.el8ap | RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112 |
| Red Hat Ansible Automation Platform Developer 2 | automation-controller +1 | 4.7.17-1.el9ap | RHSA-2026:71113 |
| Red Hat Ansible Automation Platform Developer 2 | python-sqlparse +1 | 0.6.0-1.el10ap | RHSA-2026:71113, RHSA-2026:71112 |
| Red Hat Ansible Automation Platform Developer 2 | python3.12-sqlparse | 0.6.0-1.el8ap | RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112 |
| Red Hat Ansible Automation Platform Developer 2 | receptor | 1.6.8-1.el8ap | RHSA-2026:71114, RHSA-2026:71113 |
| Red Hat Ansible Automation Platform 2 | automation-controller +3 | 4.7.17-1.el9ap | RHSA-2026:71113 |
| Red Hat Ansible Automation Platform 2 | automation-controller-venv-tower | 4.6.33-1.el8ap | RHSA-2026:71114, RHSA-2026:71113 |
| Red Hat Ansible Automation Platform 2 | automation-gateway-proxy-server | 2.5.10-8.el8ap | RHSA-2026:71114, RHSA-2026:71113 |
| Red Hat Ansible Automation Platform 2 | automation-gateway-server | 2.5.20260923-1.el8ap | RHSA-2026:71114 |
| Red Hat Ansible Automation Platform 2 | automation-platform-ui | 2.6.14-1.el9ap | RHSA-2026:71113 |
| Red Hat Ansible Automation Platform 2 | python-sqlparse +1 | 0.6.0-1.el10ap | RHSA-2026:71113, RHSA-2026:71112 |
| Red Hat Ansible Automation Platform 2 | python3.12-gitpython | 3.1.60-1.el8ap | RHSA-2026:71114, RHSA-2026:71113 |
| Red Hat Ansible Automation Platform 2 | python3.12-sqlparse | 0.6.0-1.el8ap | RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112 |
| Red Hat Ansible Automation Platform 2 | receptor | 1.6.8-1.el8ap | RHSA-2026:71114, RHSA-2026:71113, RHSA-2026:71112 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | buildah +1 | 2:1.43.1-5.el10_2 | ALSA-2026:64777, ALSA-2026:63332 |
| AlmaLinux 10 | go-fdo-server +3 | 1.0.1-2.el10_2.4 | ALSA-2026:62578 |
| AlmaLinux 10 | golang +7 | 1.26.7-1.el10_2.alma.1 | ALSA-2026:60306 |
| AlmaLinux 10 | grafana +1 | 10.2.6-28.el10_2.5 | ALSA-2026:63022 |
| AlmaLinux 10 | grafana-pcp | 5.3.0-8.el10_2.1 | ALSA-2026:63119 |
| AlmaLinux 10 | ipp-usb | 0.9.27-7.el10_2.3 | ALSA-2026:62631 |
| AlmaLinux 10 | oci-seccomp-bpf-hook | 1.2.11-3.el10_2 | ALSA-2026:89752 |
| AlmaLinux 10 | opentelemetry-collector | 0.152.1-2.el10_2 | ALSA-2026:65116 |
| AlmaLinux 10 | podman +3 | 7:5.8.2-9.el10_2.alma.1 | ALSA-2026:70201 |
| AlmaLinux 10 | skopeo +1 | 2:1.22.2-5.el10_2 | ALSA-2026:64818 |
| AlmaLinux 9 | buildah +1 | 2:1.43.3-2.el9_8 | ALSA-2026:70640 |
| AlmaLinux 9 | containernetworking-plugins | 1:1.9.0-4.el9_8 | ALSA-2026:70391 |
| AlmaLinux 9 | golang +7 | 1.26.7-1.el9_8 | ALSA-2026:60304 |
| AlmaLinux 9 | grafana +1 | 10.2.6-23.el9_8.3 | ALSA-2026:62406 |
| AlmaLinux 9 | opentelemetry-collector | 0.152.1-2.el9_8 | ALSA-2026:65117 |
| AlmaLinux 9 | osbuild-composer +2 | 165.1-4.el9_8.1.alma.1 | ALSA-2026:65153 |
| AlmaLinux 9 | podman +4 | 6:5.8.2-7.el9_8 | ALSA-2026:69961 |
| AlmaLinux 9 | skopeo +1 | 2:1.22.2-8.el9_8 | ALSA-2026:70641 |
| AlmaLinux 8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:63163 |
| AlmaLinux 8 | buildah +1 | 2:1.33.14-6.module_el8.10.0+4269+94686149 | ALSA-2026:63163 |
| AlmaLinux 8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:63163 |
| AlmaLinux 8 | conmon | 3:2.1.10-1.module_el8.10.0+3845+87b84552 | ALSA-2026:63163 |
| AlmaLinux 8 | container-selinux | 2:2.229.0-3.module_el8.10.0+4213+0493256b | ALSA-2026:63163 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.4.0-10.module_el8.10.0+4269+94686149 | ALSA-2026:63163 |
| AlmaLinux 8 | containers-common | 2:1-82.module_el8.10.0+4016+efd18bf8 | ALSA-2026:63163 |
| AlmaLinux 8 | crit +1 | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:63163 |
| AlmaLinux 8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 | ALSA-2026:63163 |
| AlmaLinux 8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:63163 |
| AlmaLinux 8 | crun | 1.14.3-4.module_el8.10.0+4269+94686149 | ALSA-2026:63163 |
| AlmaLinux 8 | delve | 1.26.1-1.module_el8.10.0+4223+bd807c2e | ALSA-2026:60305 |
| AlmaLinux 8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:63163 |
| AlmaLinux 8 | golang +7 | 1.26.7-1.module_el8.10.0+4264+117c8fc2 | ALSA-2026:60305 |
| AlmaLinux 8 | grafana +1 | 9.2.10-33.el8_10 | ALSA-2026:62407 |
| AlmaLinux 8 | grafana-pcp | 5.1.1-18.el8_10 | ALSA-2026:63124 |
| AlmaLinux 8 | libslirp | 4.4.0-2.module_el8.10.0+4016+efd18bf8 | ALSA-2026:63163 |
| AlmaLinux 8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:63163 |
| AlmaLinux 8 | netavark | 2:1.10.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:63163 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.10-3.module_el8.10.0+4269+94686149 | ALSA-2026:63163 |
| AlmaLinux 8 | osbuild-composer +2 | 101.5-2.el8_10.alma.1 | ALSA-2026:66016 |
| AlmaLinux 8 | podman +6 | 4:4.9.4-37.module_el8.10.0+4269+94686149 | ALSA-2026:63163 |
| AlmaLinux 8 | python3-criu | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:63163 |
| AlmaLinux 8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:63163 |
| AlmaLinux 8 | runc | 4:1.2.9-6.module_el8.10.0+4269+94686149 | ALSA-2026:63163 |
| AlmaLinux 8 | skopeo +1 | 2:1.14.6-4.module_el8.10.0+4269+94686149 | ALSA-2026:63163 |
| AlmaLinux 8 | slirp4netns | 1.2.3-1.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:63163 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:63163 |
| AlmaLinux 8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:63163 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | buildah | 2:1.43.1-5.el10_2 | RLSA-2026:98555, RLSA-2026:64777, RLSA-2026:63332 |
| Rocky Linux 10 | buildah-tests | 2:1.45.0-2.el10 | RLSA-2026:98555 |
| Rocky Linux 10 | delve | 1.27.2-3.el10_3 | RLSA-2026:98086 |
| Rocky Linux 10 | go-fdo-server | 1.0.1-2.el10_2.4 | RLSA-2026:98593, RLSA-2026:62578 |
| Rocky Linux 10 | go-fdo-server-owner +2 | 1.0.1-6.el10_3.9 | RLSA-2026:98593 |
| Rocky Linux 10 | golang | 1.26.7-1.el10_2 | RLSA-2026:60306 |
| Rocky Linux 10 | golang-github-openprinting-ipp-usb | 0.9.27-7.el10_2.3 | RLSA-2026:62631 |
| Rocky Linux 10 | grafana | 10.2.6-28.el10_2.5 | RLSA-2026:98056, RLSA-2026:63022 |
| Rocky Linux 10 | grafana-pcp | 5.3.0-8.el10_2.1 | RLSA-2026:63119 |
| Rocky Linux 10 | grafana-selinux | 12.4.3-3.el10_3.2 | RLSA-2026:98056 |
| Rocky Linux 10 | gvisor-tap-vsock +1 | 6:0.8.7-2.el10_3 | RLSA-2026:98610 |
| Rocky Linux 10 | image-builder | 52.1-1.el10_2.2.rocky.0.1 | RLSA-2026:65534 |
| Rocky Linux 10 | oci-seccomp-bpf-hook | 1.2.11-3.el10_2 | RLSA-2026:98597, RLSA-2026:89752 |
| Rocky Linux 10 | opentelemetry-collector | 0.152.1-2.el10_2 | RLSA-2026:65116 |
| Rocky Linux 10 | osbuild-composer | 165.1-3.el10_2.2.rocky.0.1 | RLSA-2026:65895 |
| Rocky Linux 10 | podman | 7:5.8.2-9.el10_2 | RLSA-2026:70201 |
| Rocky Linux 10 | skopeo | 2:1.22.2-5.el10_2 | RLSA-2026:64818 |
| Rocky Linux 9 | buildah | 2:1.43.3-2.el9_8 | RLSA-2026:70640 |
| Rocky Linux 9 | containernetworking-plugins | 1:1.9.0-4.el9_8 | RLSA-2026:98449, RLSA-2026:70391 |
| Rocky Linux 9 | golang | 1.26.7-1.el9_8 | RLSA-2026:60304 |
| Rocky Linux 9 | grafana | 10.2.6-23.el9_8.3 | RLSA-2026:62406 |
| Rocky Linux 9 | grafana-pcp | 5.1.1-17.el9_9.3 | RLSA-2026:98479 |
| Rocky Linux 9 | gvisor-tap-vsock +1 | 6:0.8.8-2.el9_9 | RLSA-2026:98502 |
| Rocky Linux 9 | image-builder | 52.1-1.el9_8.2 | RLSA-2026:65886 |
| Rocky Linux 9 | opentelemetry-collector | 0.152.1-2.el9_8 | RLSA-2026:65117 |
| Rocky Linux 9 | osbuild-composer | 165.1-4.el9_8.1.rocky.0.1 | RLSA-2026:65153 |
| Rocky Linux 9 | podman | 6:5.8.2-7.el9_8 | RLSA-2026:69961 |
| Rocky Linux 9 | skopeo | 2:1.22.2-8.el9_8 | RLSA-2026:98448, RLSA-2026:70641 |
| Rocky Linux 9 | skopeo-tests | 3:1.22.2-5.el9_9 | RLSA-2026:98448 |
| Rocky Linux 8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:63163 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-3.module+el8.10.0+40223+e940a224 | RLSA-2026:63163 |
| Rocky Linux 8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:63163 |
| Rocky Linux 8 | criu | 3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
| Rocky Linux 8 | delve | 1.26.1-1.module+el8.10.0+40244+e7cb3ff8 | RLSA-2026:60305 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
| Rocky Linux 8 | grafana | 9.2.10-33.el8_10 | RLSA-2026:62407 |
| Rocky Linux 8 | grafana-pcp | 5.1.1-18.el8_10 | RLSA-2026:63124 |
| Rocky Linux 8 | libslirp | 4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
| Rocky Linux 8 | osbuild-composer | 101.5-2.el8_10.rocky.0.6 | RLSA-2026:66016 |
| Rocky Linux 8 | python-podman | 4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2026:63163 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
| Rocky Linux 8 | toolbox | 0.0.99.5.1-1.module+el8.10.0+40087+cfe9c127.rocky.0.2 | RLSA-2026:63163 |
| Rocky Linux 8 | udica | 0.2.6-21.module+el8.10.0+1815+5fe7415e | RLSA-2026:63163 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLES 15 SP7 | go1.25-openssl | 1.25.14-150600.13.27.1 | SUSE-SU-2026:3815-1 |
| SLES 15 SP7 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLES 15 SP7 | go1.26-openssl | 1.26.7-150600.13.15.1 | SUSE-SU-2026:3816-1 |
| SLES 15 SP7 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
| SLES 15 SP6 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLES 15 SP6 | go1.25-openssl | 1.25.14-150600.13.27.1 | SUSE-SU-2026:3815-1 |
| SLES 15 SP6 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLES 15 SP6 | go1.26-openssl | 1.26.7-150600.13.15.1 | SUSE-SU-2026:3816-1 |
| SLES 15 SP6 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
| SLES 15 SP5 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLES 15 SP5 | go1.25-openssl | 1.25.14-150000.1.33.1 | SUSE-SU-2026:3800-1 |
| SLES 15 SP5 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLES 15 SP5 | go1.26-openssl | 1.26.7-150000.1.18.1 | SUSE-SU-2026:3799-1 |
| SLES 15 SP5 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
| SLES 15 SP4 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLES 15 SP4 | go1.25-openssl | 1.25.14-150000.1.33.1 | SUSE-SU-2026:3800-1 |
| SLES 15 SP4 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLES 15 SP4 | go1.26-openssl | 1.26.7-150000.1.18.1 | SUSE-SU-2026:3799-1 |
| SLES 15 SP4 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | go1.25 | 1.25.13-160000.1.1 | SUSE-SU-2026:23300-1 |
| SLES for SAP 16.0 | go1.25-openssl | 1.25.14-160000.1.1 | SUSE-SU-2026:23573-1 |
| SLES for SAP 16.0 | go1.26 | 1.26.6-160000.1.1 | SUSE-SU-2026:23301-1 |
| SLES for SAP 16.0 | go1.26-openssl | 1.26.7-160000.1.1 | SUSE-SU-2026:23576-1 |
| SLES for SAP 16.0 | govulncheck-vulndb | 0.0.20260827T195228-160000.1.1 | SUSE-SU-2026:23625-1 |
| SLES for SAP 15 SP6 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLES for SAP 15 SP6 | go1.25-openssl | 1.25.14-150600.13.27.1 | SUSE-SU-2026:3815-1 |
| SLES for SAP 15 SP6 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLES for SAP 15 SP6 | go1.26-openssl | 1.26.7-150600.13.15.1 | SUSE-SU-2026:3816-1 |
| SLES for SAP 15 SP6 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
| SLES for SAP 15 SP5 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLES for SAP 15 SP5 | go1.25-openssl | 1.25.14-150000.1.33.1 | SUSE-SU-2026:3800-1 |
| SLES for SAP 15 SP5 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLES for SAP 15 SP5 | go1.26-openssl | 1.26.7-150000.1.18.1 | SUSE-SU-2026:3799-1 |
| SLES for SAP 15 SP5 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
| SLES for SAP 15 SP4 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLES for SAP 15 SP4 | go1.25-openssl | 1.25.14-150000.1.33.1 | SUSE-SU-2026:3800-1 |
| SLES for SAP 15 SP4 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLES for SAP 15 SP4 | go1.26-openssl | 1.26.7-150000.1.18.1 | SUSE-SU-2026:3799-1 |
| SLES for SAP 15 SP4 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
| SLES 16.0 | go1.25 | 1.25.13-160000.1.1 | SUSE-SU-2026:23300-1 |
| SLES 16.0 | go1.25-openssl | 1.25.14-160000.1.1 | SUSE-SU-2026:23573-1 |
| SLES 16.0 | go1.26 | 1.26.6-160000.1.1 | SUSE-SU-2026:23301-1 |
| SLES 16.0 | go1.26-openssl | 1.26.7-160000.1.1 | SUSE-SU-2026:23576-1 |
| SLES 16.0 | govulncheck-vulndb | 0.0.20260827T195228-160000.1.1 | SUSE-SU-2026:23625-1 |
| SLE HPC 15 SP5 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLE HPC 15 SP5 | go1.25-openssl | 1.25.14-150000.1.33.1 | SUSE-SU-2026:3800-1 |
| SLE HPC 15 SP5 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLE HPC 15 SP5 | go1.26-openssl | 1.26.7-150000.1.18.1 | SUSE-SU-2026:3799-1 |
| SLE HPC 15 SP5 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
| SLE HPC 15 SP4 | go1.25 | 1.25.13-150000.1.50.1 | SUSE-SU-2026:3640-1 |
| SLE HPC 15 SP4 | go1.25-openssl | 1.25.14-150000.1.33.1 | SUSE-SU-2026:3800-1 |
| SLE HPC 15 SP4 | go1.26 | 1.26.6-150000.1.24.1 | SUSE-SU-2026:3641-1 |
| SLE HPC 15 SP4 | go1.26-openssl | 1.26.7-150000.1.18.1 | SUSE-SU-2026:3799-1 |
| SLE HPC 15 SP4 | go1.27 | 1.27.0-150000.1.6.1 | SUSE-SU-2026:3830-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.25 | 1.25.13-1.1 | openSUSE-SU-2026:11516-1 |
| openSUSE Tumbleweed | go1.26 | 1.26.6-1.1 | openSUSE-SU-2026:11517-1 |
| openSUSE Tumbleweed | go1.27 | 1.27rc3-1.1 | openSUSE-SU-2026:11536-1 |
| openSUSE Tumbleweed | kyverno | 1.19.1-1.1 | openSUSE-SU-2026:11822-1 |
| openSUSE Tumbleweed | rclone | 1.75.1-1.1 | openSUSE-SU-2026:11727-1 |
| openSUSE Leap 16.0 | go1.25 | 1.25.13-160000.1.1 | openSUSE-SU-2026:21592-1 |
| openSUSE Leap 16.0 | go1.25-openssl | 1.25.14-160000.1.1 | openSUSE-SU-2026:21696-1 |
| openSUSE Leap 16.0 | go1.26 | 1.26.6-160000.1.1 | openSUSE-SU-2026:21593-1 |
| openSUSE Leap 16.0 | go1.26-openssl | 1.26.7-160000.1.1 | openSUSE-SU-2026:21705-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260827T195228-160000.1.1 | openSUSE-SU-2026:21761-1 |
| openSUSE Leap 16.0 | rclone | 1.75.1-bp160.1.1 | openSUSE-SU-2026:21999-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.26.8-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | golang +6 | 1.26.7-1.amzn2023.0.1 | ALAS2023-2026-2114 |
| Amazon Linux 2 | golang +6 | 1.26.7-1.amzn2.0.1 | ALAS2-2026-3893 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | oci-seccomp-bpf-hook | 1.2.11-3.el10_2 | ELSA-2026-89752 |
| Oracle Linux 10 | podman +3 | 7:5.8.2-9.0.1.el10_2 | ELSA-2026-70201 |
| Oracle Linux 9 | buildah +1 | 2:1.43.3-2.0.1.el9_8 | ELSA-2026-70640 |
| Oracle Linux 9 | containernetworking-plugins | 1:1.9.0-4.el9_8 | ELSA-2026-70391 |
| Oracle Linux 9 | podman +4 | 6:5.8.2-7.0.1.el9_8 | ELSA-2026-69961 |
| Oracle Linux 9 | skopeo +1 | 2:1.22.2-8.el9_8 | ELSA-2026-70641 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r68 | — |
| Wolfi rolling | addon-resizer | 1.8.24-r1 | — |
| Wolfi rolling | amass | 5.1.1-r12 | — |
| Wolfi rolling | amazon-cloudwatch-agent | 1.300072.0-r1 | — |
| Wolfi rolling | amazon-cloudwatch-agent-operator | 3.7.0-r1 | — |
| Wolfi rolling | amazon-k8s-cni +1 | 1.23.0-r1 | — |
| Wolfi rolling | argo-cd-3.2 +1 | 3.2.12-r13 | — |
| Wolfi rolling | argo-cd-3.3-compat | 3.3.14-r9 | — |
| Wolfi rolling | argo-cd-3.4 +1 | 3.4.7-r2 | — |
| Wolfi rolling | argo-workflows-3.7 +1 | 3.7.18-r0 | — |
| Wolfi rolling | argo-workflows-4.0 +2 | 4.0.9-r0 | — |
| Wolfi rolling | argo-workflows-ui-4.0 | 4.0.11-r0 | — |
| Wolfi rolling | argocd-image-updater | 1.3.0-r1 | — |
| Wolfi rolling | atlantis | 0.46.0-r3 | — |
| Wolfi rolling | authservice | 1.1.8-r1 | — |
| Wolfi rolling | aws-eks-pod-identity-agent | 0.2.1-r5 | — |
| Wolfi rolling | aws-load-balancer-controller | 3.5.0-r1 | — |
| Wolfi rolling | aws-otel-collector | 0.49.0-r3 | — |
| Wolfi rolling | aws-privateca-issuer | 1.9.1-r1 | — |
| Wolfi rolling | aws-sigv4-proxy | 1.12-r3 | — |
| Wolfi rolling | azure-service-operator | 2.20.0-r6 | — |
| Wolfi rolling | azure-workload-identity-webhook | 1.6.1-r1 | — |
| Wolfi rolling | azurefile-csi-1.35 | 1.35.7-r1 | — |
| Wolfi rolling | bank-vaults +1 | 1.33.1-r8 | — |
| Wolfi rolling | bento | 1.20.0-r1 | — |
| Wolfi rolling | blob-csi-1.27 | 1.27.9-r1 | — |
| Wolfi rolling | buf | 1.72.0-r2 | — |
| Wolfi rolling | buildctl +2 | 0.32.2-r1 | — |
| Wolfi rolling | cadvisor | 0.60.5-r2 | — |
| Wolfi rolling | cadvisor-compat | 0.60.5-r8 | — |
| Wolfi rolling | calico-felix-3.32 +2 | 3.32.2-r3 | — |
| Wolfi rolling | calico-goldmane-3.31 | 3.31.7-r3 | — |
| Wolfi rolling | cass-operator | 1.31.0-r7 | — |
| Wolfi rolling | cerbos | 0.55.0-r7 | — |
| Wolfi rolling | cert-exporter | 2.19.0-r1 | — |
| Wolfi rolling | cert-manager-1.20 +5 | 1.20.3-r10 | — |
| Wolfi rolling | cert-manager-1.20-crds | 1.20.3-r18 | — |
| Wolfi rolling | cert-manager-cmctl +1 | 2.5.0-r14 | — |
| Wolfi rolling | cert-manager-csi-driver | 0.16.0-r1 | — |
| Wolfi rolling | cert-manager-istio-csr | 0.17.0-r0 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.5-r20 | — |
| Wolfi rolling | certificate-transparency | 1.3.3-r22 | — |
| Wolfi rolling | certificate-transparency-trillian-ctserver | 1.3.3-r17 | — |
| Wolfi rolling | cfssl | 1.6.5-r45 | — |
| Wolfi rolling | chisel | 1.11.8-r4 | — |
| Wolfi rolling | cilium-1.19 +4 | 1.19.6-r6 | — |
| Wolfi rolling | cilium-cli | 0.19.7-r2 | — |
| Wolfi rolling | cis-operator-1.4 | 1.4.9-r2 | — |
| Wolfi rolling | cloud-provider-aws-1.35-cloud-controller-manager | 1.35.2-r11 | — |
| Wolfi rolling | cloud-provider-aws-1.36-cloud-controller-manager | 1.36.1-r3 | — |
| Wolfi rolling | cloud-provider-azure-cloud-controller-manager-1.36-compat | 1.36.6-r0 | — |
| Wolfi rolling | cloud-provider-azure-cloud-node-manager-1.35 +1 | 1.35.8-r1 | — |
| Wolfi rolling | cloud-provider-azure-cloud-node-manager-1.36 +1 | 1.36.5-r1 | — |
| Wolfi rolling | cloud-provider-gcp-cloud-controller-manager | 35.0.5-r17 | — |
| Wolfi rolling | cloud-provider-vsphere | 1.36.0-r14 | — |
| Wolfi rolling | cloud-sql-proxy-2.16 | 2.16.0-r28 | — |
| Wolfi rolling | cloud-sql-proxy-2.21 | 2.21.3-r10 | — |
| Wolfi rolling | cloudflared | 2026.8.2-r0 | — |
| Wolfi rolling | cloudnative-pg +1 | 1.30.0-r4 | — |
| Wolfi rolling | cloudprober | 0.14.4-r2 | — |
| Wolfi rolling | cluster-api-1.13-controller +3 | 1.13.5-r1 | — |
| Wolfi rolling | cluster-api-azure-controller | 1.26.0-r5 | — |
| Wolfi rolling | cluster-api-azure-controller-compat | 1.27.0-r1 | — |
| Wolfi rolling | cluster-api-ipam-provider-in-cluster | 1.1.0-r11 | — |
| Wolfi rolling | cluster-proportional-autoscaler | 1.10.3-r13 | — |
| Wolfi rolling | cluster-proportional-autoscaler-compat | 1.11.0-r1 | — |
| Wolfi rolling | cni-plugins +4 | 1.9.1-r10 | — |
| Wolfi rolling | configmap-reload | 0.15.0-r19 | — |
| Wolfi rolling | conftest | 0.69.0-r1 | — |
| Wolfi rolling | coredns-1.14 +1 | 1.14.6-r3 | — |
| Wolfi rolling | cortex | 1.21.1-r8 | — |
| Wolfi rolling | cosign-3 | 3.1.3-r1 | — |
| Wolfi rolling | crane +2 | 0.21.9-r1 | — |
| Wolfi rolling | croc | 11.3.2-r0 | — |
| Wolfi rolling | crossplane-2.2 | 2.2.4-r4 | — |
| Wolfi rolling | crossplane-provider-aws-ec2-compat +2 | 2.7.0-r6 | — |
| Wolfi rolling | crossplane-provider-aws-kms | 2.6.0-r8 | — |
| Wolfi rolling | crossplane-provider-aws-s3 +12 | 2.7.0-r1 | — |
| Wolfi rolling | crossplane-provider-azure-authorization | 2.6.0-r13 | — |
| Wolfi rolling | crossplane-provider-keycloak | 2.24.1-r1 | — |
| Wolfi rolling | crossplane-provider-sql | 0.16.1-r1 | — |
| Wolfi rolling | ctr-1 +3 | 1.7.34-r5 | — |
| Wolfi rolling | ctr-2 +3 | 2.3.4-r1 | — |
| Wolfi rolling | cue | 0.17.1-r2 | — |
| Wolfi rolling | dagdotdev | 0.0.20-r25 | — |
| Wolfi rolling | dapr-daprd-1.17 +3 | 1.17.12-r1 | — |
| Wolfi rolling | dapr-sentry-1.17 +1 | 1.17.13-r0 | — |
| Wolfi rolling | dataplaneapi | 3.4.1-r1 | — |
| Wolfi rolling | descheduler | 0.36.0-r10 | — |
| Wolfi rolling | dex | 2.45.1-r21 | — |
| Wolfi rolling | dgraph | 25.4.0-r1 | — |
| Wolfi rolling | distribution +1 | 3.1.1-r10 | — |
| Wolfi rolling | docker-machine-driver-harvester | 1.0.8-r1 | — |
| Wolfi rolling | docker-machine-driver-linode | 0.1.16-r9 | — |
| Wolfi rolling | dockerd-28 | 28.5.2-r31 | — |
| Wolfi rolling | dogstatsd-7.77 +4 | 7.77.3-r25 | — |
| Wolfi rolling | dogstatsd-7.78 +4 | 7.78.4-r20 | — |
| Wolfi rolling | dogstatsd-7.79 +4 | 7.79.2-r18 | — |
| Wolfi rolling | dogstatsd-7.80 +4 | 7.80.4-r12 | — |
| Wolfi rolling | dogstatsd-7.81 +4 | 7.81.3-r1 | — |
| Wolfi rolling | doppler-kubernetes-operator | 1.7.1-r20 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 4.5.1-r3 | — |
| Wolfi rolling | eksctl | 0.230.0-r0 | — |
| Wolfi rolling | emissary +1 | 4.1.0-r10 | — |
| Wolfi rolling | esbuild | 0.28.2-r1 | — |
| Wolfi rolling | external-dns-0.21 | 0.21.0-r18 | — |
| Wolfi rolling | external-secrets-operator-2.3 | 2.3.0-r19 | — |
| Wolfi rolling | external-secrets-operator-2.4 | 2.4.1-r17 | — |
| Wolfi rolling | external-secrets-operator-2.6 | 2.6.0-r10 | — |
| Wolfi rolling | falco-exporter | 0.8.7-r31 | — |
| Wolfi rolling | falco-no-driver | 0.44.1-r5 | — |
| Wolfi rolling | falcoctl | 0.13.0-r18 | — |
| Wolfi rolling | falcosidekick | 2.34.1-r7 | — |
| Wolfi rolling | ferretdb | 2.7.0-r26 | — |
| Wolfi rolling | flannel | 0.28.9-r1 | — |
| Wolfi rolling | fluent-operator | 3.9.0-r5 | — |
| Wolfi rolling | flux-2.8 | 2.8.8-r16 | — |
| Wolfi rolling | flux-2.9 | 2.9.4-r2 | — |
| Wolfi rolling | flux-image-automation-controller | 1.2.4-r2 | — |
| Wolfi rolling | flux-image-reflector-controller | 1.2.4-r1 | — |
| Wolfi rolling | flux-kustomize-controller | 1.9.4-r2 | — |
| Wolfi rolling | flux-kustomize-controller-iamguarded-compat | 1.9.5-r2 | — |
| Wolfi rolling | flux-notification-controller | 1.9.3-r2 | — |
| Wolfi rolling | flux-source-controller | 1.9.4-r1 | — |
| Wolfi rolling | flyte | 1.16.8-r4 | — |
| Wolfi rolling | frp | 0.70.1-r1 | — |
| Wolfi rolling | fscrypt | 0.3.6-r12 | — |
| Wolfi rolling | gatekeeper-3.22 | 3.22.2-r13 | — |
| Wolfi rolling | gcp-compute-persistent-disk-csi-driver-1.25 | 1.25.2-r13 | — |
| Wolfi rolling | gcp-compute-persistent-disk-csi-driver-1.25-compat | 1.25.2-r18 | — |
| Wolfi rolling | gh | 2.97.0-r1 | — |
| Wolfi rolling | git-credential-oauth | 0.17.2-r10 | — |
| Wolfi rolling | gitaly-19.0 +3 | 19.0.6-r1 | — |
| Wolfi rolling | github-mcp-server | 1.9.0-r1 | — |
| Wolfi rolling | gitlab-kas-19.2 +1 | 19.2.2-r1 | — |
| Wolfi rolling | gitlab-pages-19.0 | 19.0.5-r1 | — |
| Wolfi rolling | gitlab-pages-19.1 | 19.1.8-r0 | — |
| Wolfi rolling | gitlab-runner-19.0 +2 | 19.0.3-r2 | — |
| Wolfi rolling | gitlab-runner-19.1 +2 | 19.1.2-r3 | — |
| Wolfi rolling | gitleaks | 8.30.1-r21 | — |
| Wolfi rolling | gitness | 3.3.0-r30 | — |
| Wolfi rolling | glab | 1.113.0-r1 | — |
| Wolfi rolling | go-discover | 0_git20260806-r1 | — |
| Wolfi rolling | gogatekeeper | 4.11.0-r1 | — |
| Wolfi rolling | gostatsd | 28.3.0-r35 | — |
| Wolfi rolling | grafana-12.4 | 12.4.8-r1 | — |
| Wolfi rolling | grafana-13.0 | 13.0.6-r1 | — |
| Wolfi rolling | grafana-agent-operator | 0.44.8-r14 | — |
| Wolfi rolling | grafana-alloy | 1.18.1-r1 | — |
| Wolfi rolling | grafana-image-renderer | 5.12.1-r1 | — |
| Wolfi rolling | grafana-mimir-3.0 +3 | 3.0.8-r3 | — |
| Wolfi rolling | grafana-mimir-3.1 +3 | 3.1.4-r3 | — |
| Wolfi rolling | grafana-operator | 5.24.0-r4 | — |
| Wolfi rolling | grafana-pyroscope-2.0 | 2.0.6-r3 | — |
| Wolfi rolling | grafana-rollout-operator | 0.38.1-r3 | — |
| Wolfi rolling | guac +3 | 1.1.0-r26 | — |
| Wolfi rolling | haproxy-ingress-0.16 | 0.16.1-r8 | — |
| Wolfi rolling | harbor-2.14 +3 | 2.14.4-r6 | — |
| Wolfi rolling | harbor-scanner-trivy | 0.38.0-r4 | — |
| Wolfi rolling | helm-3 | 3.21.4-r0 | — |
| Wolfi rolling | helm-operator | 1.42.3-r8 | — |
| Wolfi rolling | hubble | 1.19.4-r11 | — |
| Wolfi rolling | hubble-ui-backend | 0.13.5-r15 | — |
| Wolfi rolling | hydra | 26.2.0-r26 | — |
| Wolfi rolling | infinispan-operator | 2.5.14-r1 | — |
| Wolfi rolling | ingress-nginx-controller-1.15 +1 | 1.15.10-r1 | — |
| Wolfi rolling | ipfs-cluster | 1.1.6-r18 | — |
| Wolfi rolling | istio-install-cni-1.29 +2 | 1.29.6-r2 | — |
| Wolfi rolling | jaeger-operator | 1.65.0-r27 | — |
| Wolfi rolling | k3d | 5.9.0-r7 | — |
| Wolfi rolling | k3s +2 | 1.36.3.1-r1 | — |
| Wolfi rolling | k3s-1.32 +2 | 1.32.13.1-r26 | — |
| Wolfi rolling | k3s-1.34 +2 | 1.34.10.1-r1 | — |
| Wolfi rolling | k6 | 2.2.0-r1 | — |
| Wolfi rolling | k8s_gateway | 1.8.2-r5 | — |
| Wolfi rolling | k8sgpt | 0.4.36-r4 | — |
| Wolfi rolling | k8ssandra-operator | 1.32.6-r1 | — |
| Wolfi rolling | kaf | 0.2.14-r11 | — |
| Wolfi rolling | kapp | 0.65.3-r6 | — |
| Wolfi rolling | kapp-controller | 0.60.4-r4 | — |
| Wolfi rolling | kargo-1.10 | 1.10.9-r4 | — |
| Wolfi rolling | karma | 0.132-r1 | — |
| Wolfi rolling | karpenter-1.11 | 1.11.3-r1 | — |
| Wolfi rolling | katib-controller | 0.19.0-r34 | — |
| Wolfi rolling | keda-2.19 +2 | 2.19.0-r24 | — |
| Wolfi rolling | keda-2.20 +2 | 2.20.2-r1 | — |
| Wolfi rolling | kine | 0.16.4-r0 | — |
| Wolfi rolling | kitty | 0.48.2-r1 | — |
| Wolfi rolling | knative-eventing-1.21-jobsink +1 | 1.21.4-r10 | — |
| Wolfi rolling | knative-eventing-1.22-filter +7 | 1.22.2-r4 | — |
| Wolfi rolling | knative-operator-1.21 +1 | 1.21.4-r3 | — |
| Wolfi rolling | knative-operator-1.22 +1 | 1.22.3-r3 | — |
| Wolfi rolling | knative-operator-1.22-compat | 1.22.3-r8 | — |
| Wolfi rolling | knative-serving-1.21-queue +5 | 1.21.3-r3 | — |
| Wolfi rolling | knative-serving-1.22-queue +5 | 1.22.1-r8 | — |
| Wolfi rolling | ko +1 | 0.19.1-r3 | — |
| Wolfi rolling | kserve +1 | 0.20.0-r7 | — |
| Wolfi rolling | kserve-agent +4 | 0.20.0-r1 | — |
| Wolfi rolling | kserve-modelmesh-serving | 0.12.0-r38 | — |
| Wolfi rolling | kserve-rest-proxy | 0.12.0-r32 | — |
| Wolfi rolling | kube-fluentd-operator | 1.18.2-r77 | — |
| Wolfi rolling | kube-metrics-adapter | 0.2.9-r15 | — |
| Wolfi rolling | kube-rbac-proxy | 0.22.1-r5 | — |
| Wolfi rolling | kube-vip | 1.2.3-r1 | — |
| Wolfi rolling | kubeadm-1.35 +7 | 1.35.7-r5 | — |
| Wolfi rolling | kubeadm-1.36 +7 | 1.36.3-r3 | — |
| Wolfi rolling | kubectl-1.33 | 1.33.13-r3 | — |
| Wolfi rolling | kubectl-bash-completion-1.35 +3 | 1.35.8-r6 | — |
| Wolfi rolling | kubeflow-access-management +5 | 1.10.0-r31 | — |
| Wolfi rolling | kubeflow-pipelines-apiserver | 2.17.2-r4 | — |
| Wolfi rolling | kubelet-csr-approver | 1.2.14-r7 | — |
| Wolfi rolling | kuberay-operator | 1.6.2-r4 | — |
| Wolfi rolling | kubernetes-csi-external-health-monitor | 0.18.0-r13 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 6.3.0-r6 | — |
| Wolfi rolling | kubernetes-csi-external-resizer | 2.2.1-r6 | — |
| Wolfi rolling | kubernetes-csi-external-snapshotter-8.6 +1 | 8.6.0-r9 | — |
| Wolfi rolling | kubernetes-csi-node-driver-registrar-2.16 | 2.16.0-r24 | — |
| Wolfi rolling | kubernetes-csi-node-driver-registrar-2.17 | 2.17.0-r8 | — |
| Wolfi rolling | kubernetes-csi-node-driver-registrar-2.17-compat | 2.17.0-r11 | — |
| Wolfi rolling | kubernetes-dashboard-api | 1.14.0-r17 | — |
| Wolfi rolling | kubernetes-dashboard-metrics-scraper | 1.2.2-r31 | — |
| Wolfi rolling | kubernetes-dashboard-web | 1.7.0-r30 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.26.8-r14 | — |
| Wolfi rolling | kubernetes-event-exporter | 1.7-r69 | — |
| Wolfi rolling | kubernetes-ingress-defaultbackend | 1.41.1-r1 | — |
| Wolfi rolling | kubernetes-replicator | 2.12.4-r3 | — |
| Wolfi rolling | kubescape | 4.0.12-r1 | — |
| Wolfi rolling | kubescape-operator | 0.2.162-r1 | — |
| Wolfi rolling | kubevela-vela-cli +1 | 1.11.0-r5 | — |
| Wolfi rolling | kubewatch +1 | 2.15.0-r3 | — |
| Wolfi rolling | kubo | 0.43.0-r1 | — |
| Wolfi rolling | kubo-compat | 0.43.1-r0 | — |
| Wolfi rolling | kuma-cp-2.13 +2 | 2.13.10-r1 | — |
| Wolfi rolling | kwok | 0.8.0-r4 | — |
| Wolfi rolling | kyverno-1.17 | 1.17.2-r35 | — |
| Wolfi rolling | kyverno-1.18 +6 | 1.18.2-r7 | — |
| Wolfi rolling | kyverno-cli-1.17 +5 | 1.17.2-r28 | — |
| Wolfi rolling | kyverno-notation-aws | 1.1-r73 | — |
| Wolfi rolling | kyverno-policy-reporter | 3.9.1-r1 | — |
| Wolfi rolling | lazygit | 0.64.1-r1 | — |
| Wolfi rolling | litestream | 0.5.17-r3 | — |
| Wolfi rolling | local-path-provisioner | 0.0.37-r1 | — |
| Wolfi rolling | local-static-provisioner +1 | 2.9.0-r1 | — |
| Wolfi rolling | local-volume-node-cleanup-compat | 2.9.0-r4 | — |
| Wolfi rolling | logstash-exporter | 1.9.1-r16 | — |
| Wolfi rolling | loki-3.6 +3 | 3.6.14-r1 | — |
| Wolfi rolling | lvm-driver +2 | 1.9.1-r3 | — |
| Wolfi rolling | mailpit | 1.30.7-r1 | — |
| Wolfi rolling | mariadb-operator | 26.6.0-r8 | — |
| Wolfi rolling | mattermost-11.1 | 11.10.0-r1 | — |
| Wolfi rolling | mattermost-11.7 | 11.7.9-r1 | — |
| Wolfi rolling | mcp-grafana | 1.1.0-r1 | — |
| Wolfi rolling | mesosphere-vsphere-csi-driver +1 | 3.5.0-r26 | — |
| Wolfi rolling | metallb +4 | 0.16.1-r7 | — |
| Wolfi rolling | metrics-server | 0.9.0-r4 | — |
| Wolfi rolling | metrics-server-compat | 0.9.0-r11 | — |
| Wolfi rolling | minio | 0.20260717.120751-r6 | — |
| Wolfi rolling | minio-object-browser | 2.0.4-r22 | — |
| Wolfi rolling | mongo-tools | 100.18.0-r2 | — |
| Wolfi rolling | mongodb-kubernetes-operator | 0.13.0-r21 | — |
| Wolfi rolling | mountpoint-s3-csi-driver-2.5 | 2.5.0-r13 | — |
| Wolfi rolling | mps-control-daemon +2 | 0.19.3-r6 | — |
| Wolfi rolling | multus-cni | 4.3.0-r3 | — |
| Wolfi rolling | nats | 0.4.0-r5 | — |
| Wolfi rolling | net-kourier-1.21 | 1.21.1-r11 | — |
| Wolfi rolling | newrelic-infra-operator | 1.1.1-r1 | — |
| Wolfi rolling | nfs-subdir-external-provisioner | 4.0.18-r45 | — |
| Wolfi rolling | nginx-prometheus-exporter | 1.5.3-r0 | — |
| Wolfi rolling | node-feature-discovery-0.18 | 0.18.3-r24 | — |
| Wolfi rolling | nodetaint | 0.0.5-r12 | — |
| Wolfi rolling | nri-mssql | 2.36.0-r1 | — |
| Wolfi rolling | nri-prometheus | 2.30.2-r1 | — |
| Wolfi rolling | nuclei | 3.11.1-r2 | — |
| Wolfi rolling | oauth2-proxy | 7.15.3-r6 | — |
| Wolfi rolling | octo-sts +1 | 0.8.0-r1 | — |
| Wolfi rolling | ollama | 0.32.14-r0 | — |
| Wolfi rolling | op-geth +3 | 1.101702.2-r8 | — |
| Wolfi rolling | opa | 1.19.0-r1 | — |
| Wolfi rolling | openbao | 2.6.1-r2 | — |
| Wolfi rolling | openbao-k8s | 1.4.0-r56 | — |
| Wolfi rolling | opencost | 1.121.1-r1 | — |
| Wolfi rolling | openfga | 1.18.3-r1 | — |
| Wolfi rolling | opensearch-k8s-operator | 2.8.0-r22 | — |
| Wolfi rolling | opentofu-1.11 | 1.11.14-r6 | — |
| Wolfi rolling | opentofu-1.12 | 1.12.6-r6 | — |
| Wolfi rolling | opentofu-1.9 | 1.9.4-r24 | — |
| Wolfi rolling | osv-scanner | 2.5.0-r1 | — |
| Wolfi rolling | otel-cli | 0.4.5-r29 | — |
| Wolfi rolling | percona-server-mongodb-operator | 1.23.0-r3 | — |
| Wolfi rolling | pg_timetable | 7.0.0-r3 | — |
| Wolfi rolling | pgpool2_exporter | 1.2.2-r27 | — |
| Wolfi rolling | php-fpm_exporter | 2.2.0-r34 | — |
| Wolfi rolling | podinfo | 6.14.1-r2 | — |
| Wolfi rolling | podman-6.0 | 6.0.2-r2 | — |
| Wolfi rolling | polaris | 10.2.2-r1 | — |
| Wolfi rolling | policy-controller +1 | 0.15.1-r22 | — |
| Wolfi rolling | portieris | 0.14.2-r4 | — |
| Wolfi rolling | postgres-operator | 2.0.1-r2 | — |
| Wolfi rolling | prometheus-3.10 | 3.10.0-r18 | — |
| Wolfi rolling | prometheus-3.11 | 3.11.3-r13 | — |
| Wolfi rolling | prometheus-3.9 | 3.9.1-r11 | — |
| Wolfi rolling | prometheus-alertmanager | 0.33.1-r5 | — |
| Wolfi rolling | prometheus-operator +2 | 0.93.1-r1 | — |
| Wolfi rolling | prometheus-operator-iamguarded-compat | 0.94.0-r0 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 2.9.0-r2 | — |
| Wolfi rolling | pvc-autoresizer | 0.21.0-r13 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator | 1.20.1-r1 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator-iamguarded-compat | 1.20.3-r1 | — |
| Wolfi rolling | rancher-2.14 +1 | 2.14.4-r1 | — |
| Wolfi rolling | rancher-agent-2.13 | 2.13.8-r1 | — |
| Wolfi rolling | rancher-fleet | 0.16.1-r3 | — |
| Wolfi rolling | rancher-fleet-cli +2 | 0.16.0-r2 | — |
| Wolfi rolling | rancher-machine | 0.15.0.145-r4 | — |
| Wolfi rolling | rancher-telemetry | 0.6.2-r25 | — |
| Wolfi rolling | rancher-webhook-0.10 | 0.10.9-r2 | — |
| Wolfi rolling | ratify | 1.4.4-r1 | — |
| Wolfi rolling | rclone | 1.75.0-r1 | — |
| Wolfi rolling | redis-operator | 0.26.0-r3 | — |
| Wolfi rolling | rekor-cli | 1.5.3-r4 | — |
| Wolfi rolling | renovate | 44.115.4-r0 | — |
| Wolfi rolling | rootlesskit | 3.1.0-r1 | — |
| Wolfi rolling | rqlite | 10.2.7-r3 | — |
| Wolfi rolling | runc | 1.5.1-r2 | — |
| Wolfi rolling | runc-1.4 | 1.4.3-r1 | — |
| Wolfi rolling | scorecard | 5.5.0-r15 | — |
| Wolfi rolling | sealed-secrets | 0.38.4-r2 | — |
| Wolfi rolling | seaweedfs | 4.41-r1 | — |
| Wolfi rolling | secrets-store-csi-driver | 1.6.0-r9 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.8.2-r4 | — |
| Wolfi rolling | sftpgo | 2.7.5-r4 | — |
| Wolfi rolling | sftpgo-plugin-pubsub | 1.0.18-r3 | — |
| Wolfi rolling | skaffold | 2.24.0-r3 | — |
| Wolfi rolling | skopeo | 1.24.0-r1 | — |
| Wolfi rolling | slsa-verifier | 2.7.1-r28 | — |
| Wolfi rolling | smokescreen | 0_git20260803-r1 | — |
| Wolfi rolling | sonobuoy | 0.57.5-r3 | — |
| Wolfi rolling | spark-operator | 2.5.2-r1 | — |
| Wolfi rolling | spegel | 0.7.4-r5 | — |
| Wolfi rolling | spicedb-operator | 1.26.0-r3 | — |
| Wolfi rolling | spiffe-helper | 0.11.0-r24 | — |
| Wolfi rolling | spire-agent +2 | 1.15.2-r5 | — |
| Wolfi rolling | spire-controller-manager | 0.7.0-r4 | — |
| Wolfi rolling | splunk-otel-collector +2 | 0.158.0-r1 | — |
| Wolfi rolling | splunk-otel-collector-compat | 0.160.0-r0 | — |
| Wolfi rolling | sql_exporter | 0.24.5-r1 | — |
| Wolfi rolling | src | 7.6.0-r1 | — |
| Wolfi rolling | stakater-reloader | 1.4.21-r1 | — |
| Wolfi rolling | step | 0.30.6-r6 | — |
| Wolfi rolling | step-issuer | 0.12.0-r6 | — |
| Wolfi rolling | step-issuer-compat | 0.12.0-r12 | — |
| Wolfi rolling | step-kms-plugin | 0.17.0-r12 | — |
| Wolfi rolling | swagger | 0.36.3-r0 | — |
| Wolfi rolling | syft | 1.51.0-r1 | — |
| Wolfi rolling | tailscale +1 | 1.102.2-r1 | — |
| Wolfi rolling | tekton-chains | 0.29.1-r1 | — |
| Wolfi rolling | tekton-pipelines-events-1.12 +4 | 1.12.2-r7 | — |
| Wolfi rolling | tekton-pipelines-webhook-1.11 +1 | 1.11.1-r20 | — |
| Wolfi rolling | tempo-3.0 +1 | 3.0.3-r6 | — |
| Wolfi rolling | temporal | 1.8.2-r1 | — |
| Wolfi rolling | terraform | 1.5.7-r55 | — |
| Wolfi rolling | terraform-mcp-server | 1.2.0-r2 | — |
| Wolfi rolling | terraform-provider-acme | 2.48.3-r3 | — |
| Wolfi rolling | terragrunt | 1.1.3-r1 | — |
| Wolfi rolling | thanos-operator | 0.3.7-r51 | — |
| Wolfi rolling | timestamp-authority-server | 2.1.3-r5 | — |
| Wolfi rolling | timoni | 0.31.0-r1 | — |
| Wolfi rolling | tkn | 0.46.0-r1 | — |
| Wolfi rolling | traefik-3.6 | 3.6.25-r2 | — |
| Wolfi rolling | traefik-3.7 | 3.7.10-r2 | — |
| Wolfi rolling | trillian-logsigner | 1.7.3-r19 | — |
| Wolfi rolling | trino | 483-r2 | — |
| Wolfi rolling | trino-plugin-oracle +3 | 483-r7 | — |
| Wolfi rolling | trufflehog | 3.96.0-r2 | — |
| Wolfi rolling | vault-env | 1.23.0-r7 | — |
| Wolfi rolling | vault-secrets-webhook | 1.23.1-r6 | — |
| Wolfi rolling | vcluster +2 | 0.36.1-r2 | — |
| Wolfi rolling | velero | 1.18.2-r5 | — |
| Wolfi rolling | verticadb-operator | 25.4.0.0-r23 | — |
| Wolfi rolling | vertical-pod-autoscaler +2 | 1.7.1-r4 | — |
| Wolfi rolling | victoriametrics +3 | 1.149.0-r1 | — |
| Wolfi rolling | victoriametrics-operator +1 | 0.73.1-r4 | — |
| Wolfi rolling | victoriametrics-vmagent-cluster +4 | 1.149.0-r2 | — |
| Wolfi rolling | victoriametrics-vmauth-compat +1 | 1.152.0-r0 | — |
| Wolfi rolling | vitess-23 +1 | 23.0.5-r8 | — |
| Wolfi rolling | volume-modifier-for-k8s | 0.9.5-r5 | — |
| Wolfi rolling | wave | 0.11.0-r18 | — |
| Wolfi rolling | weaviate | 1.39.0-r1 | — |
| Wolfi rolling | witness | 0.12.0-r4 | — |
| Wolfi rolling | yunikorn-web | 1.9.0-r2 | — |
| Wolfi rolling | zarf | 0.83.0-r1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.25.13 · >= 1.26.0-0, < 1.26.6 · >= 1.27.0-0, < 1.27.0-rc.3 | 1.25.13, 1.26.6, 1.27.0-rc.3 | GO-2026-6089 |
Advisories 50
- RHSA-2026:88340 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:90330 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:89752 Red Hat Security Advisory: oci-seccomp-bpf-hook security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98086 Red Hat Security Advisory: delve security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98454 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:90994 Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:90329 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security advisory Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98579 Red Hat Security Advisory: grafana-pcp security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:88394 Red Hat Security Advisory: grafana-pcp security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98502 Red Hat Security Advisory: gvisor-tap-vsock security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:88339 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98056 Red Hat Security Advisory: grafana security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:95234 Red Hat Security Advisory: git-lfs security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:90332 Red Hat Security Advisory: RHOSO 18.0 os-diff security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98610 Red Hat Security Advisory: gvisor-tap-vsock security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:88395 Red Hat Security Advisory: grafana-pcp security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87245 Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98479 Red Hat Security Advisory: grafana-pcp security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87246 Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:92861 Red Hat Security Advisory: Satellite 6.19 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:94063 Red Hat Security Advisory: Satellite 6 Client Update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98597 Red Hat Security Advisory: oci-seccomp-bpf-hook security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:96076 Red Hat Security Advisory: osbuild-composer security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98448 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98555 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:82810 Red Hat Security Advisory: OpenShift Container Platform 4.15.70 packages and security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98593 Red Hat Security Advisory: go-fdo-server security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98450 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98556 Red Hat Security Advisory: skopeo security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98449 Red Hat Security Advisory: containernetworking-plugins security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98554 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98108 Red Hat Security Advisory: golang-github-openprinting-ipp-usb security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:99169 Red Hat Security Advisory: oci-seccomp-bpf-hook security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:71114 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:71113 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RLSA-2026:98610 Important: gvisor-tap-vsock security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98593 Important: go-fdo-server security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98597 Important: oci-seccomp-bpf-hook security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98502 Important: gvisor-tap-vsock security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98448 Important: skopeo security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98449 Important: containernetworking-plugins security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98479 Important: grafana-pcp security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98056 Important: grafana security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98086 Important: delve security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98555 Important: buildah security update Rocky Linux Security Advisories · Nov 13, 2026
- WID-SEC-2026-2850 Golang Go: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- ALSA-2026:62406 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:63022 Important: grafana security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:70641 Important: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:70640 Important: buildah security update AlmaLinux Security Advisories · Oct 29, 2026