CVE-2026-39821
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
9.6
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
- Record
CVE-2026-39821- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Weakness
- CWE-1289, CWE-1289
- Updated
- 2026-11-02
EUVDEUVD-2026-31449
9.6
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
- Record
EUVD-2026-31449- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-w2q5-6q6x-x959
10.0
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an...
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
- Record
GHSA-w2q5-6q6x-x959- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N - Weakness
- CWE-1289
- Updated
- 2026-11-02
NVD
9.6
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
- Record
CVE-2026-39821- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Weakness
- CWE-1289
- Updated
- 2026-11-02
OSVALPINE-CVE-2026-39821
9.6
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
- Record
ALPINE-CVE-2026-39821- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-03
OSVBELL-CVE-2026-39821
9.6
- Record
BELL-CVE-2026-39821- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
Show 48 moreShow less
OSV
9.6
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
- Record
CVE-2026-39821- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-04
OSVDEBIAN-CVE-2026-39821
9.6
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".
- Record
DEBIAN-CVE-2026-39821- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:23262
8.2
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:23262- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:23264
8.2
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:23264- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:30853
8.2
Red Hat Security Advisory: git-lfs security update
- Record
RHSA-2026:30853- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:30854
8.2
Red Hat Security Advisory: git-lfs security update
- Record
RHSA-2026:30854- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:30855
8.2
Red Hat Security Advisory: git-lfs security update
- Record
RHSA-2026:30855- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:34357
8.2
Red Hat Security Advisory: opentelemetry-collector security update
- Record
RHSA-2026:34357- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:34359
8.2
Red Hat Security Advisory: opentelemetry-collector security update
- Record
RHSA-2026:34359- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:34789
8.2
Red Hat Security Advisory: OpenShift Container Platform 4.22.4 packages and security update
- Record
RHSA-2026:34789- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:35826
8.2
Red Hat Security Advisory: grafana-pcp security update
- Record
RHSA-2026:35826- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:35827
8.2
Red Hat Security Advisory: grafana security update
- Record
RHSA-2026:35827- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:35828
8.2
Red Hat Security Advisory: grafana security update
- Record
RHSA-2026:35828- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:35829
8.2
Red Hat Security Advisory: grafana-pcp security update
- Record
RHSA-2026:35829- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:35830
8.2
Red Hat Security Advisory: grafana security update
- Record
RHSA-2026:35830- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:35831
8.2
Red Hat Security Advisory: grafana-pcp security update
- Record
RHSA-2026:35831- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:36796
9.1
Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update
- Record
RHSA-2026:36796- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:37435
8.2
Red Hat Security Advisory: golang security, bug fix, and enhancement update
- Record
RHSA-2026:37435- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:37436
8.2
Red Hat Security Advisory: golang security, bug fix, and enhancement update
- Record
RHSA-2026:37436- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:38995
8.2
Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update
- Record
RHSA-2026:38995- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:39005
8.2
Red Hat Security Advisory: rhc security update
- Record
RHSA-2026:39005- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:39573
8.2
Red Hat Security Advisory: yggdrasil security update
- Record
RHSA-2026:39573- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:39879
8.2
Red Hat Security Advisory: rhc security update
- Record
RHSA-2026:39879- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:41019
9.1
Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update
- Record
RHSA-2026:41019- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:41930
8.2
Red Hat Security Advisory: rhc security update
- Record
RHSA-2026:41930- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:42078
9.0
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Record
RHSA-2026:42078- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:42079
9.0
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Record
RHSA-2026:42079- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:42080
8.2
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
- Record
RHSA-2026:42080- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:42082
9.0
Red Hat Security Advisory: Satellite 6.16.11 Async Update
- Record
RHSA-2026:42082- CVSS 3.1
- 9.0 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:42150
9.1
Red Hat Security Advisory: Satellite 6.17.9.1 Async Update
- Record
RHSA-2026:42150- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:42151
9.1
Red Hat Security Advisory: Satellite 6.18.7.1 Async Update
- Record
RHSA-2026:42151- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:42240
9.1
Red Hat Security Advisory: Satellite 6.19.2.1 Async Update
- Record
RHSA-2026:42240- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:46395
8.2
Red Hat Security Advisory: go-fdo-server security update
- Record
RHSA-2026:46395- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:49702
8.8
Red Hat Security Advisory: golang security update
- Record
RHSA-2026:49702- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:49712
8.8
Red Hat Security Advisory: golang security update
- Record
RHSA-2026:49712- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:51112
8.2
Red Hat Security Advisory: grafana security update
- Record
RHSA-2026:51112- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:51187
8.2
Red Hat Security Advisory: yggdrasil security update
- Record
RHSA-2026:51187- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:52826
8.2
Red Hat Security Advisory: ignition security update
- Record
RHSA-2026:52826- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:53374
8.2
Red Hat Security Advisory: rhc security update
- Record
RHSA-2026:53374- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:53412
8.6
Red Hat Security Advisory: opentelemetry-collector security update
- Record
RHSA-2026:53412- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2026:53413
8.6
Red Hat Security Advisory: opentelemetry-collector security update
- Record
RHSA-2026:53413- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2026:53415
8.6
Red Hat Security Advisory: opentelemetry-collector security update
- Record
RHSA-2026:53415- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2026:54191
9.1
Red Hat Security Advisory: rhc-worker-script security update
- Record
RHSA-2026:54191- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:54401
8.2
Red Hat Security Advisory: rhc security update
- Record
RHSA-2026:54401- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:54580
8.2
Red Hat Security Advisory: OpenShift Container Platform 4.20.34 packages and security update
- Record
RHSA-2026:54580- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:54757
9.1
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
- Record
RHSA-2026:54757- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:56143
8.8
Red Hat Security Advisory: grafana-pcp security update
- Record
RHSA-2026:56143- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:56223
8.8
Red Hat Security Advisory: grafana-pcp security update
- Record
RHSA-2026:56223- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
Affected products
- golang net
- golang.org/x/net golang.org/x/net/idna
- go standard library net/http
- go standard library net/http/internal/http2
- red hat assisted installer for red hat openshift container platform 2
- red hat cert manager support for red hat openshift release 1.19
- red hat cluster observability operator 1.5.0
- red hat compliance operator
- red hat confidential compute attestation
- red hat cryostat 4
- red hat deployment validation operator
- red hat devworkspace operator 0.42
Show 138 moreShow less
- red hat external secrets operator for red hat openshift
- red hat externaldns operator
- red hat fence agents remediation operator
- red hat file integrity operator
- red hat gatekeeper 3
- red hat logging for red hat openshift 6
- red hat logging for red hat openshift 6.2
- red hat logging subsystem for red hat openshift 6.4
- red hat logging subsystem for red hat openshift 6.5
- red hat logical volume manager storage
- red hat machine deletion remediation operator
- red hat multiarch tuning operator
- red hat multicluster engine for kubernetes
- red hat multicluster engine for kubernetes 2.11
- red hat multicluster engine for kubernetes 2.6
- red hat multicluster engine for kubernetes 2.8
- red hat multicluster engine for kubernetes 2.9
- red hat multicluster global hub 1.4.5
- red hat multicluster global hub 1.6.5
- red hat multicluster global hub 1.7.0
- red hat network observability operator
- red hat node healthcheck operator
- red hat openshift api for data protection
- red hat openshift api for data protection 1.3
- red hat openshift api for data protection 1.5
- red hat openshift api for data protection 1.6
- red hat openshift developer tools and services
- red hat openshift lightspeed
- red hat openshift pipelines
- red hat openshift serverless
- red hat power monitoring for red hat openshift
- red hat 3scale api management platform 2
- red hat advanced cluster management for kubernetes 2
- red hat advanced cluster management for kubernetes 2.11
- red hat advanced cluster management for kubernetes 2.13
- red hat advanced cluster security 4.9
- red hat advanced cluster security for kubernetes 4.10
- red hat advanced cluster security for kubernetes 4.11
- red hat ansible automation platform 2
- red hat ansible automation platform 2.5 for rhel 8
- red hat ansible automation platform 2.5 for rhel 9
- red hat ansible automation platform 2.6
- red hat ansible automation platform 2.6 for rhel 10
- red hat ansible automation platform 2.6 for rhel 9
- red hat ansible automation platform 2.7
- red hat ansible automation platform 2.7 for rhel 10
- red hat ansible automation platform 2.7 for rhel 9
- red hat ceph storage 5
- red hat ceph storage 6
- red hat ceph storage 8
- red hat ceph storage 9
- red hat certification program for red hat enterprise linux 9
- red hat connectivity link 1
- red hat developer hub
- red hat edge manager 1.0
- red hat edge manager 1.1
- red hat enterprise linux 10
- red hat enterprise linux 10.0 extended update support
- red hat enterprise linux 7
- red hat enterprise linux 7 extended lifecycle support
- red hat enterprise linux 8
- red hat enterprise linux 9
- red hat enterprise linux 9.2 update services for sap solutions
- red hat enterprise linux 9.4 update services for sap solutions
- red hat enterprise linux 9.6 extended update support
- red hat enterprise linux ai (rhel ai) 3
- red hat enterprise linux ai 3.4
- red hat hardened images
- red hat lightspeed (formerly insights) for runtimes 1.0
- red hat migration toolkit 1.8
- red hat migration toolkit for applications 8.1
- red hat migration toolkit for applications 8.2
- red hat multicluster global hub 1.5.3
- red hat openshift ai (rhoai)
- red hat openshift ai 2.25
- red hat openshift ai 3.4
- red hat openshift builds 1.7.3
- red hat openshift builds 1.8.1
- red hat openshift cluster manager cli
- red hat openshift container platform 4
- red hat openshift container platform 4.16
- red hat openshift container platform 4.20
- red hat openshift container platform 4.21
- red hat openshift container platform 4.22
- red hat openshift data foundation 4.18
- red hat openshift data foundation 4.22
- red hat openshift dev spaces 3.29
- red hat openshift distributed tracing 3
- red hat openshift distributed tracing 3.10.2
- red hat openshift for windows containers
- red hat openshift gitops 1.19
- red hat openshift gitops 1.20
- red hat openshift on aws
- red hat openshift service mesh 2.6
- red hat openshift service mesh 3.0
- red hat openshift service mesh 3.1
- red hat openshift service mesh 3.2
- red hat openshift service mesh 3.3
- red hat openshift virtualization 4
- red hat openshift workload availability 0.12
- red hat openshift workload availability 0.13
- red hat openshift workload availability 0.3
- red hat openshift workload availability 0.7
- red hat openshift workload availability 0.8
- red hat openshift workload availability 5.7
- red hat openstack platform 16.2
- red hat openstack platform 17.1
- red hat openstack platform 18.0
- red hat quay 3.10
- red hat quay 3.12
- red hat quay 3.15
- red hat quay 3.16
- red hat quay 3.17
- red hat quay 3.9
- red hat satellite 6
- red hat satellite 6.16 for rhel 8
- red hat satellite 6.16 for rhel 9
- red hat satellite 6.17 for rhel 9
- red hat satellite 6.18
- red hat satellite 6.18 for rhel 9
- red hat satellite 6.19
- red hat satellite 6.19 for rhel 9
- red hat service interconnect 1
- red hat service interconnect 2
- red hat trusted artifact signer 1.4
- red hat web terminal 1.11
- red hat web terminal 1.12
- red hat web terminal 1.13
- red hat web terminal 1.14
- red hat web terminal 1.15
- red hat web terminal 1.16
- red hat rhem 1.0 for rhel 9
- red hat rhem 1.1 for rhel 10
- red hat rhem 1.1 for rhel 9
- red hat security profiles operator
- red hat streams for apache kafka 3.2.1
- red hat zero trust workload identity manager
- red hat zero trust workload identity manager - tech preview
Affected packages
| Package | Affected | Fixed |
|---|---|---|
goAlpine:v3.24 |
before 1.26.8-r0 | 1.26.8-r0 |
git-lfsAlmaLinux:8 |
before 3.4.1-11.el8_10 | 3.4.1-11.el8_10 |
git-lfsAlmaLinux:9 |
before 3.7.1-4.el9_8.1 | 3.7.1-4.el9_8.1 |
git-lfsAlmaLinux:10 |
before 3.7.1-5.el10_2.5 | 3.7.1-5.el10_2.5 |
opentelemetry-collectorAlmaLinux:10 From an advisory covering 6 CVEs |
before 0.152.1-1.el10_2 | 0.152.1-1.el10_2 |
opentelemetry-collectorAlmaLinux:9 From an advisory covering 6 CVEs |
before 0.152.1-1.el9_8 | 0.152.1-1.el9_8 |
grafana-pcpAlmaLinux:10 |
before 5.3.0-7.el10_2 | 5.3.0-7.el10_2 |
grafanaAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.2.6-27.el10_2 | 10.2.6-27.el10_2 |
grafana-selinuxAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.2.6-27.el10_2 | 10.2.6-27.el10_2 |
grafanaAlmaLinux:9 From an advisory covering 2 CVEs |
before 10.2.6-23.el9_8 | 10.2.6-23.el9_8 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
grafana-selinuxAlmaLinux:9 From an advisory covering 2 CVEs |
before 10.2.6-23.el9_8 | 10.2.6-23.el9_8 |
grafana-pcpAlmaLinux:9 |
before 5.1.1-17.el9_8 | 5.1.1-17.el9_8 |
grafanaAlmaLinux:8 |
before 9.2.10-31.el8_10 | 9.2.10-31.el8_10 |
grafana-selinuxAlmaLinux:8 |
before 9.2.10-31.el8_10 | 9.2.10-31.el8_10 |
grafana-pcpAlmaLinux:8 |
before 5.1.1-16.el8_10 | 5.1.1-16.el8_10 |
go-toolsetAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
golangAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
golang-binAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
golang-docsAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
golang-miscAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
golang-raceAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
golang-srcAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
golang-testsAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.26.5-1.el9_8 | 1.26.5-1.el9_8 |
go-toolsetAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
golangAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
golang-binAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
golang-docsAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
golang-miscAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
golang-raceAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
golang-srcAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
golang-testsAlmaLinux:10 From an advisory covering 3 CVEs |
before 1.26.5-1.el10_2.alma.1 | 1.26.5-1.el10_2.alma.1 |
delveAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.26.1-1.module_el8.10.0+4223+bd807c2e | 1.26.1-1.module_el8.10.0+4223+bd807c2e |
go-toolsetAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.26.5-1.module_el8.10.0+4223+bd807c2e | 1.26.5-1.module_el8.10.0+4223+bd807c2e |
golangAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.26.5-1.module_el8.10.0+4223+bd807c2e | 1.26.5-1.module_el8.10.0+4223+bd807c2e |
golang-binAlmaLinux:8 From an advisory covering 6 CVEs |
before 1.26.5-1.module_el8.10.0+4223+bd807c2e | 1.26.5-1.module_el8.10.0+4223+bd807c2e |
kubevirt-openvmmAzure Linux:3 |
through 1.9.0-1 | None known |
azl-otel-collectorAzure Linux:3 |
through 0.127.0-1 | None known |
buildahAzure Linux:3 |
through 1.43.1-3 | None known |
cri-oAzure Linux:3 |
through 1.30.1-1 | None known |
kata-containers-previewAzure Linux:3 |
through 3.27.0~preview2-2 | None known |
podmanAzure Linux:3 |
through 5.6.1-10 | None known |
application-gateway-kubernetes-ingressAzure Linux:3 |
before 1.7.7-5 | 1.7.7-5 |
azcopyAzure Linux:3 |
before 10.25.1-6 | 10.25.1-6 |
azurelinux-image-toolsAzure Linux:3 |
before 1.4.0-2 | 1.4.0-2 |
cert-managerAzure Linux:3 |
before 1.12.15-9 | 1.12.15-9 |
cf-cliAzure Linux:3 |
before 8.7.11-6 | 8.7.11-6 |
cloud-provider-kubevirtAzure Linux:3 |
before 0.5.1-4 | 0.5.1-4 |
containerd2Azure Linux:3 |
before 2.2.4-2 | 2.2.4-2 |
containerized-data-importerAzure Linux:3 |
before 1.62.0-6 | 1.62.0-6 |
corednsAzure Linux:3 |
before 1.11.4-17 | 1.11.4-17 |
cri-toolsAzure Linux:3 |
before 1.32.0-6 | 1.32.0-6 |
docker-buildxAzure Linux:3 |
before 0.14.0-13 | 0.14.0-13 |
docker-cliAzure Linux:3 |
before 25.0.7-3 | 25.0.7-3 |
docker-composeAzure Linux:3 |
before 2.27.0-11 | 2.27.0-11 |
etcdAzure Linux:3 |
before 3.5.30-2 | 3.5.30-2 |
flannelAzure Linux:3 |
before 0.24.2-28 | 0.24.2-28 |
ghAzure Linux:3 |
before 2.62.0-16 | 2.62.0-16 |
git-lfsAzure Linux:3 |
before 3.6.1-4 | 3.6.1-4 |
golangAzure Linux:3 |
before 1.25.11-3 | 1.25.11-3 |
golangAzure Linux:3 |
before 1.26.4-3 | 1.26.4-3 |
ignition-flatcarAzure Linux:3 |
before 2.22.0-5 | 2.22.0-5 |
influxdbAzure Linux:3 |
before 2.7.5-17 | 2.7.5-17 |
jxAzure Linux:3 |
before 3.10.182-4 | 3.10.182-4 |
kata-containersAzure Linux:3 |
before 3.19.1.kata3-4 | 3.19.1.kata3-4 |
kata-containers-ccAzure Linux:3 |
before 3.15.0.aks0-12 | 3.15.0.aks0-12 |
kedaAzure Linux:3 |
before 2.14.1-13 | 2.14.1-13 |
kube-vip-cloud-providerAzure Linux:3 |
before 0.0.10-6 | 0.0.10-6 |
kubernetesAzure Linux:3 |
before 1.30.10-25 | 1.30.10-25 |
buildahAlpaquita:23 |
1.28.0-r1 and later | None known |
containerdAlpaquita:23 |
1.6.10-r0 and later | None known |
goAlpaquita:23 |
1.19.7-r0 up to 1.25.14-r0 | 1.25.14-r0 |
podmanAlpaquita:23 |
4.3.1-r0 and later | None known |
runcAlpaquita:23 |
1.1.4-r3 and later | None known |
skopeoAlpaquita:23 |
1.10.0-r2 and later | None known |
buildahAlpaquita:25 |
1.40.0-r0 and later | None known |
containerdAlpaquita:25 |
2.1.1-r0 and later | None known |
docker-cli-buildxAlpaquita:25 |
0.24.0-r0 and later | None known |
goAlpaquita:25 |
1.24.3-r0 up to 1.25.14-r0 | 1.25.14-r0 |
google-guest-agentAlpaquita:25 |
20250521.00-r0 and later | None known |
osv-scannerAlpaquita:25 |
2.1.0-r4 and later | None known |
podmanAlpaquita:25 |
5.5.0-r0 and later | None known |
rootlesskitAlpaquita:25 |
2.3.5-r0 and later | None known |
runcAlpaquita:25 |
1.3.0-r1 and later | None known |
skopeoAlpaquita:25 |
1.18.0-r2 and later | None known |
buildahAlpaquita:stream |
1.31.0-r0 and later | None known |
calicoctlAlpaquita:stream |
3.31.3-r0 and later | None known |
cilium-cliAlpaquita:stream |
0.19.0-r12 and later | None known |
cni-pluginsAlpaquita:stream |
1.9.0-r2 and later | None known |
containerdAlpaquita:stream |
1.7.2-r1 and later | None known |
cri-toolsAlpaquita:stream |
1.35.0-r2 and later | None known |
docker-cli-buildxAlpaquita:stream |
0.11.0-r0 and later | None known |
etcdAlpaquita:stream |
3.6.4-r6 and later | None known |
goAlpaquita:stream |
1.20.5-r2 up to 1.26.7-r0 | 1.26.7-r0 |
google-guest-agentAlpaquita:stream |
20250214.01-r0 and later | None known |
grypeAlpaquita:stream |
0.100.0-r0 and later | None known |
helmAlpaquita:stream |
3.19.0-r4 and later | None known |
osv-scannerAlpaquita:stream |
2.1.0-r2 and later | None known |
podmanAlpaquita:stream |
4.5.1-r1 and later | None known |
rootlesskitAlpaquita:stream |
2.1.0-r0 and later | None known |
runcAlpaquita:stream |
1.1.7-r1 and later | None known |
skopeoAlpaquita:stream |
1.13.0-r1 and later | None known |
goBellSoft Hardened Containers:23 |
1.19.7-r0 up to 1.25.14-r0 | 1.25.14-r0 |
goBellSoft Hardened Containers:25 |
1.24.3-r0 up to 1.25.14-r0 | 1.25.14-r0 |
goBellSoft Hardened Containers:stream |
1.20.5-r2 up to 1.26.7-r0 | 1.26.7-r0 |
git-lfsTuxCare:AlmaLinux:9.6 |
before 3.6.1-2.el9_6.tuxcare.els6 | 3.6.1-2.el9_6.tuxcare.els6 |
grafanaTuxCare:AlmaLinux:9.6 |
before 10.2.6-15.el9_6.tuxcare.els13 | 10.2.6-15.el9_6.tuxcare.els13 |
grafana-selinuxTuxCare:AlmaLinux:9.6 |
before 10.2.6-15.el9_6.tuxcare.els13 | 10.2.6-15.el9_6.tuxcare.els13 |
grafana-pcpTuxCare:AlmaLinux:9.6 |
before 5.1.1-11.el9_6.tuxcare.els5 | 5.1.1-11.el9_6.tuxcare.els5 |
grafana-pcpTuxCare:AlmaLinux:9.2 |
before 5.1.1-1.el9_2.tuxcare.els4 | 5.1.1-1.el9_2.tuxcare.els4 |
grafanaTuxCare:AlmaLinux:9.2 |
before 9.0.9-4.el9_2.alma.1.tuxcare.els19 | 9.0.9-4.el9_2.alma.1.tuxcare.els19 |
go-toolsetTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
golangTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
golang-binTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
golang-docsTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
golang-miscTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
golang-raceTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
golang-srcTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
golang-testsTuxCare:AlmaLinux:9.6 |
before 1.25.7-1.el9_6.tuxcare.els13 | 1.25.7-1.el9_6.tuxcare.els13 |
go-toolsetTuxCare:AlmaLinux:9.2 |
before 1.22.9-1.el9_2.tuxcare.els19 | 1.22.9-1.el9_2.tuxcare.els19 |
golangTuxCare:AlmaLinux:9.2 |
before 1.22.9-1.el9_2.tuxcare.els19 | 1.22.9-1.el9_2.tuxcare.els19 |
golang-binTuxCare:AlmaLinux:9.2 |
before 1.22.9-1.el9_2.tuxcare.els19 | 1.22.9-1.el9_2.tuxcare.els19 |
golang-docsTuxCare:AlmaLinux:9.2 |
before 1.22.9-1.el9_2.tuxcare.els19 | 1.22.9-1.el9_2.tuxcare.els19 |
golang-miscTuxCare:AlmaLinux:9.2 |
before 1.22.9-1.el9_2.tuxcare.els19 | 1.22.9-1.el9_2.tuxcare.els19 |
golang-srcTuxCare:AlmaLinux:9.2 |
before 1.22.9-1.el9_2.tuxcare.els19 | 1.22.9-1.el9_2.tuxcare.els19 |
golang-testsTuxCare:AlmaLinux:9.2 |
before 1.22.9-1.el9_2.tuxcare.els19 | 1.22.9-1.el9_2.tuxcare.els19 |
osbuild-composerTuxCare:AlmaLinux:9.6 |
before 132.2-3.el9_6.alma.1.tuxcare.els6 | 132.2-3.el9_6.alma.1.tuxcare.els6 |
osbuild-composer-coreTuxCare:AlmaLinux:9.6 |
before 132.2-3.el9_6.alma.1.tuxcare.els6 | 132.2-3.el9_6.alma.1.tuxcare.els6 |
osbuild-composer-testsTuxCare:AlmaLinux:9.6 |
before 132.2-3.el9_6.alma.1.tuxcare.els6 | 132.2-3.el9_6.alma.1.tuxcare.els6 |
osbuild-composer-workerTuxCare:AlmaLinux:9.6 |
before 132.2-3.el9_6.alma.1.tuxcare.els6 | 132.2-3.el9_6.alma.1.tuxcare.els6 |
ignitionTuxCare:AlmaLinux:9.6 |
before 2.21.0-1.el9_6.tuxcare.els1 | 2.21.0-1.el9_6.tuxcare.els1 |
ignition-edgeTuxCare:AlmaLinux:9.6 |
before 2.21.0-1.el9_6.tuxcare.els1 | 2.21.0-1.el9_6.tuxcare.els1 |
ignition-grubTuxCare:AlmaLinux:9.6 |
before 2.21.0-1.el9_6.tuxcare.els1 | 2.21.0-1.el9_6.tuxcare.els1 |
ignition-validateTuxCare:AlmaLinux:9.6 |
before 2.21.0-1.el9_6.tuxcare.els1 | 2.21.0-1.el9_6.tuxcare.els1 |
ignitionTuxCare:AlmaLinux:9.2 From an advisory covering 6 CVEs |
before 2.15.0-2.el9_2.tuxcare.els1 | 2.15.0-2.el9_2.tuxcare.els1 |
ignition-edgeTuxCare:AlmaLinux:9.2 From an advisory covering 6 CVEs |
before 2.15.0-2.el9_2.tuxcare.els1 | 2.15.0-2.el9_2.tuxcare.els1 |
ignition-validateTuxCare:AlmaLinux:9.2 From an advisory covering 6 CVEs |
before 2.15.0-2.el9_2.tuxcare.els1 | 2.15.0-2.el9_2.tuxcare.els1 |
osbuild-composerTuxCare:AlmaLinux:9.2 |
before 76-2.el9_2.2.alma.tuxcare.els10 | 76-2.el9_2.2.alma.tuxcare.els10 |
golang-golang-x-netDebian:12 |
All versions, plus listed versions 1:0.10.0-11:0.11.0-11:0.14.0-11:0.15.0-11:0.15.0-2 Show 22 moreShow less1:0.17.0+dfsg-11:0.19.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.22.0+dfsg-11:0.23.0+dfsg-11:0.24.0+dfsg-11:0.25.0+dfsg-11:0.26.0+dfsg-11:0.26.0+dfsg-21:0.27.0-11:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-21:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-11:0.7.0+dfsg-1 |
None known |
golang-golang-x-netDebian:13 |
All versions, plus listed versions 1:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-2 Show 5 moreShow less1:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-1 |
None known |
golang-golang-x-netDebian:14 |
before 1:0.55.0-1, plus listed versions 1:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-21:0.53.0-2~bpo13+1 |
1:0.55.0-1 |
stdlibGo |
before 1.25.13, 1.26.0-0 up to 1.26.6, 1.27.0-0 up to 1.27.0-rc.3 | 1.25.131.26.61.27.0-rc.3 |
golang.org/x/netGo |
before 0.55.0 | 0.55.0 |
golangMageia:10 From an advisory covering 10 CVEs |
before 1.25.13-1.mga10 | 1.25.13-1.mga10 |
golangMageia:9 From an advisory covering 10 CVEs |
before 1.25.13-1.mga9 | 1.25.13-1.mga9 |
golang1.25Red Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.25.11-2.hum1 | 0:1.25.11-2.hum1 |
golang1.25-binRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.25.11-2.hum1 | 0:1.25.11-2.hum1 |
golang1.25-docsRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.25.11-2.hum1 | 0:1.25.11-2.hum1 |
golang1.25-miscRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.25.11-2.hum1 | 0:1.25.11-2.hum1 |
golang1.25-srcRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.25.11-2.hum1 | 0:1.25.11-2.hum1 |
golang1.25-testsRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.25.11-2.hum1 | 0:1.25.11-2.hum1 |
golang1.26Red Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.26.4-2.hum1 | 0:1.26.4-2.hum1 |
golang1.26-binRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.26.4-2.hum1 | 0:1.26.4-2.hum1 |
golang1.26-docsRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.26.4-2.hum1 | 0:1.26.4-2.hum1 |
golang1.26-miscRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.26.4-2.hum1 | 0:1.26.4-2.hum1 |
golang1.26-srcRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.26.4-2.hum1 | 0:1.26.4-2.hum1 |
golang1.26-testsRed Hat:hummingbird:1 From an advisory covering 14 CVEs |
before 0:1.26.4-2.hum1 | 0:1.26.4-2.hum1 |
git-lfsRed Hat:enterprise_linux:8::appstream |
before 0:3.4.1-11.el8_10 | 0:3.4.1-11.el8_10 |
git-lfs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.4.1-11.el8_10 | 0:3.4.1-11.el8_10 |
git-lfs-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:3.4.1-11.el8_10 | 0:3.4.1-11.el8_10 |
git-lfsRed Hat:enterprise_linux:9::appstream |
before 0:3.7.1-4.el9_8.1 | 0:3.7.1-4.el9_8.1 |
git-lfs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:3.7.1-4.el9_8.1 | 0:3.7.1-4.el9_8.1 |
git-lfs-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:3.7.1-4.el9_8.1 | 0:3.7.1-4.el9_8.1 |
git-lfsRed Hat:enterprise_linux:10.2 |
before 0:3.7.1-5.el10_2.5 | 0:3.7.1-5.el10_2.5 |
git-lfs-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:3.7.1-5.el10_2.5 | 0:3.7.1-5.el10_2.5 |
git-lfs-debugsourceRed Hat:enterprise_linux:10.2 |
before 0:3.7.1-5.el10_2.5 | 0:3.7.1-5.el10_2.5 |
opentelemetry-collectorRed Hat:enterprise_linux:10.2 From an advisory covering 6 CVEs |
before 0:0.152.1-1.el10_2 | 0:0.152.1-1.el10_2 |
opentelemetry-collectorRed Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs |
before 0:0.152.1-1.el9_8 | 0:0.152.1-1.el9_8 |
ose-azure-acr-image-credential-providerRed Hat:openshift:4.22::el8 |
before 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 | 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el8 |
ose-azure-acr-image-credential-providerRed Hat:openshift:4.22::el9 |
before 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el9 | 0:4.22.0-202606291123.p2.ga17a3e3.assembly.stream.el9 |
grafana-pcpRed Hat:enterprise_linux:10.2 |
before 0:5.3.0-7.el10_2 | 0:5.3.0-7.el10_2 |
grafana-pcp-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:5.3.0-7.el10_2 | 0:5.3.0-7.el10_2 |
grafana-pcp-debugsourceRed Hat:enterprise_linux:10.2 |
before 0:5.3.0-7.el10_2 | 0:5.3.0-7.el10_2 |
grafanaRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 0:10.2.6-27.el10_2 | 0:10.2.6-27.el10_2 |
grafana-debuginfoRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 0:10.2.6-27.el10_2 | 0:10.2.6-27.el10_2 |
grafana-debugsourceRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 0:10.2.6-27.el10_2 | 0:10.2.6-27.el10_2 |
grafana-selinuxRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 0:10.2.6-27.el10_2 | 0:10.2.6-27.el10_2 |
grafanaRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:10.2.6-23.el9_8 | 0:10.2.6-23.el9_8 |
git-lfsRocky Linux:8 |
before 0:3.4.1-11.el8_10 | 0:3.4.1-11.el8_10 |
git-lfsRocky Linux:9 |
before 0:3.7.1-4.el9_8.1 | 0:3.7.1-4.el9_8.1 |
git-lfsRocky Linux:10 |
before 0:3.7.1-5.el10_2.5 | 0:3.7.1-5.el10_2.5 |
opentelemetry-collectorRocky Linux:10 From an advisory covering 6 CVEs |
before 0:0.152.1-1.el10_2 | 0:0.152.1-1.el10_2 |
opentelemetry-collectorRocky Linux:9 From an advisory covering 6 CVEs |
before 0:0.152.1-1.el9_8 | 0:0.152.1-1.el9_8 |
grafana-pcpRocky Linux:10 |
before 0:5.3.0-7.el10_2 | 0:5.3.0-7.el10_2 |
grafanaRocky Linux:10 |
before 0:10.2.6-27.el10_2 | 0:10.2.6-27.el10_2 |
grafanaRocky Linux:9 |
before 0:10.2.6-23.el9_8 | 0:10.2.6-23.el9_8 |
grafana-pcpRocky Linux:9 |
before 0:5.1.1-17.el9_8 | 0:5.1.1-17.el9_8 |
grafanaRocky Linux:8 |
before 0:9.2.10-31.el8_10 | 0:9.2.10-31.el8_10 |
grafana-pcpRocky Linux:8 |
before 0:5.1.1-16.el8_10 | 0:5.1.1-16.el8_10 |
golangRocky Linux:9 From an advisory covering 2 CVEs |
before 0:1.26.5-1.el9_8 | 0:1.26.5-1.el9_8 |
golangRocky Linux:10 From an advisory covering 2 CVEs |
before 0:1.26.5-1.el10_2 | 0:1.26.5-1.el10_2 |
delveRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.26.1-1.module+el8.10.0+40244+e7cb3ff8 | 0:1.26.1-1.module+el8.10.0+40244+e7cb3ff8 |
golangRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.26.5-1.module+el8.10.0+40244+e7cb3ff8 | 0:1.26.5-1.module+el8.10.0+40244+e7cb3ff8 |
yggdrasilRocky Linux:10 From an advisory covering 3 CVEs |
before 0:0.4.9.2-1.el10_2 | 0:0.4.9.2-1.el10_2 |
go-fdo-serverRocky Linux:10 From an advisory covering 2 CVEs |
before 0:1.0.1-2.el10_2.3 | 0:1.0.1-2.el10_2.3 |
osbuild-composerRocky Linux:9 From an advisory covering 10 CVEs |
before 0:165.1-4.el9_8.1.rocky.0.1 | 0:165.1-4.el9_8.1.rocky.0.1 |
image-builderRocky Linux:10 From an advisory covering 14 CVEs |
before 0:52.1-1.el10_2.2.rocky.0.1 | 0:52.1-1.el10_2.2.rocky.0.1 |
image-builderRocky Linux:9 From an advisory covering 13 CVEs |
before 0:52.1-1.el9_8.2 | 0:52.1-1.el9_8.2 |
osbuild-composerRocky Linux:8 From an advisory covering 10 CVEs |
before 0:101.5-2.el8_10.rocky.0.6 | 0:101.5-2.el8_10.rocky.0.6 |
osbuild-composerRocky Linux:10 From an advisory covering 6 CVEs |
before 0:165.1-5.el10_2.rocky.0.1 | 0:165.1-5.el10_2.rocky.0.1 |
golang.org/x/netRoot:Go |
before v0.42.0-aikido.3 | v0.42.0-aikido.3v0.39.0-aikido.4v0.34.0-aikido.3v0.33.0-aikido.7v0.35.0-aikido.3v0.38.0-aikido.2v0.26.0-aikido.1v0.35.0-aikido.2v0.50.0-aikido.1v0.40.0-aikido.1v0.26.0-aikido.2v0.50.0-aikido.2v0.38.0-aikido.3v0.41.0-aikido.1v0.42.0-aikido.1v0.48.0-aikido.1v0.33.0-aikido.5v0.39.0-aikido.1v0.52.0-aikido.1v0.47.0-aikido.1v0.39.0-aikido.2v0.35.0-aikido.1v0.33.0-aikido.6v0.39.0-aikido.3v0.42.0-aikido.2v0.48.0-aikido.2v0.34.0-aikido.1v0.52.0-aikido.2v0.34.0-aikido.2v0.37.0-aikido.1v0.47.0-aikido.2v0.43.0-aikido.1v0.29.0-aikido.1v0.41.0-aikido.2v0.40.0-aikido.2v0.38.0-aikido.4v0.54.0-aikido.1v0.23.0-aikido.1v0.29.0-aikido.2v0.29.0-aikido.3v0.47.0-aikido.3v0.35.0-aikido.4v0.54.0-aikido.2v0.38.0-aikido.5v0.40.0-aikido.3v0.35.0-aikido.5v0.41.0-aikido.3v0.47.0-aikido.4v0.49.0-aikido.1v0.52.0-aikido.3v0.52.0-aikido.4v0.29.0-aikido.4v0.38.0-aikido.6v0.41.0-aikido.4v0.40.0-aikido.4v0.47.0-aikido.5v0.54.0-aikido.3v0.52.0-aikido.5v0.29.0-aikido.5v0.43.0-aikido.2v0.54.0-aikido.4v0.23.0-aikido.2v0.23.0-aikido.3v0.29.0-aikido.6v0.39.0-aikido.5v0.42.0-aikido.4v0.39.0-aikido.6 |
rootio-golang.org/x/netRoot:Go |
before v0.42.0-root.io.3 | v0.42.0-root.io.3v0.39.0-root.io.4v0.34.0-root.io.3v0.33.0-root.io.7v0.35.0-root.io.3v0.38.0-root.io.2v0.26.0-root.io.1v0.41.0-root.io.1v0.35.0-root.io.2v0.50.0-root.io.1v0.40.0-root.io.1v0.26.0-root.io.2v0.38.0-root.io.3v0.50.0-root.io.2v0.42.0-root.io.1v0.48.0-root.io.1v0.33.0-root.io.5v0.39.0-root.io.1v0.52.0-root.io.1v0.47.0-root.io.1v0.39.0-root.io.2v0.35.0-root.io.1v0.33.0-root.io.6v0.39.0-root.io.3v0.42.0-root.io.2v0.48.0-root.io.2v0.34.0-root.io.1v0.52.0-root.io.2v0.34.0-root.io.2v0.37.0-root.io.1v0.47.0-root.io.2v0.43.0-root.io.1v0.29.0-root.io.1v0.41.0-root.io.2v0.40.0-root.io.2v0.38.0-root.io.4v0.54.0-root.io.1v0.23.0-root.io.1v0.29.0-root.io.2v0.29.0-root.io.3v0.47.0-root.io.3v0.35.0-root.io.4v0.54.0-root.io.2v0.38.0-root.io.5v0.40.0-root.io.3v0.35.0-root.io.5v0.41.0-root.io.3v0.47.0-root.io.4v0.49.0-root.io.1v0.52.0-root.io.3v0.52.0-root.io.4v0.29.0-root.io.4v0.38.0-root.io.6v0.41.0-root.io.4v0.40.0-root.io.4v0.47.0-root.io.5v0.54.0-root.io.3v0.52.0-root.io.5v0.29.0-root.io.5v0.43.0-root.io.2v0.54.0-root.io.4v0.23.0-root.io.2v0.23.0-root.io.3v0.29.0-root.io.6v0.39.0-root.io.5v0.42.0-root.io.4v0.39.0-root.io.6 |
headmoreSUSE:Package Hub 12 |
before 1.1.1-2.1 | 1.1.1-2.1 |
helmSUSE:Package Hub 12 |
before 3.21.1-160000.1.1 | 3.21.1-160000.1.1 |
headmoreSUSE:SLFO:1.2 |
before 1.1.1-2.1 | 1.1.1-2.1 |
helmSUSE:SLFO:1.2 |
before 3.21.1-160000.1.1 | 3.21.1-160000.1.1 |
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.25.42 | 5.1.5-8.25.42 |
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-9.23.49 | 5.1.5-9.23.49 |
suse-multi-linux-manager-5.1-aarch64-proxy-squid-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.18 | 5.1.5-8.23.18 |
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.25.42 | 5.1.5-8.25.42 |
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-9.23.49 | 5.1.5-9.23.49 |
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.18 | 5.1.5-8.23.18 |
suse-multi-linux-manager-5.1-s390x-proxy-httpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.25.42 | 5.1.5-8.25.42 |
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-9.23.49 | 5.1.5-9.23.49 |
suse-multi-linux-manager-5.1-s390x-proxy-squid-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-s390x-proxy-ssh-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.18 | 5.1.5-8.23.18 |
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.25.42 | 5.1.5-8.25.42 |
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-9.23.49 | 5.1.5-9.23.49 |
suse-multi-linux-manager-5.1-x86_64-proxy-squid-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.20 | 5.1.5-8.23.20 |
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-imageSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.5-8.23.18 | 5.1.5-8.23.18 |
uyuni-toolsSUSE:Multi-Linux Manager Proxy Extension for SLE 5.1 |
before 5.1.32-150700.3.33.2 | 5.1.32-150700.3.33.2 |
suse-multi-linux-manager-5.1-aarch64-server-attestation-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-8.25.23 | 5.1.5-8.25.23 |
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-8.23.24 | 5.1.5-8.23.24 |
suse-multi-linux-manager-5.1-aarch64-server-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-8.23.61 | 5.1.5-8.23.61 |
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-8.23.23 | 5.1.5-8.23.23 |
suse-multi-linux-manager-5.1-aarch64-server-postgresql-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-6.27.22 | 5.1.5-6.27.22 |
suse-multi-linux-manager-5.1-aarch64-server-saline-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-9.23.41 | 5.1.5-9.23.41 |
suse-multi-linux-manager-5.1-ppc64le-server-attestation-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-8.25.23 | 5.1.5-8.25.23 |
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-imageSUSE:Multi-Linux Manager Server Extension for SLE 5.1 |
before 5.1.5-8.23.24 | 5.1.5-8.23.24 |
golang-1.10Ubuntu:14.04:LTS |
All versions, plus listed versions 1.10.4-2ubuntu1~14.04.1 |
None known |
golang-1.10Ubuntu:16.04:LTS |
All versions, plus listed versions 1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2 |
None known |
golang-1.6Ubuntu:16.04:LTS |
All versions, plus listed versions 1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5 Show 5 moreShow less1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4 |
None known |
juju-coreUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.24.6-0ubuntu31.25.0-0ubuntu11.25.0-0ubuntu21.25.0-0ubuntu32.0~beta4-0ubuntu2 Show 12 moreShow less2.0~beta6-0ubuntu1.16.04.12.0~beta7-0ubuntu1.16.04.12.0~beta12-0ubuntu1.16.04.12.0~beta15-0ubuntu2.16.04.12.0.0-0ubuntu0.16.04.22.0.2-0ubuntu0.16.04.12.0.2-0ubuntu0.16.04.22.3.1-0ubuntu0.16.04.12.3.2-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.1+esm12.3.7-0ubuntu0.16.04.1+esm2 |
None known |
lxdUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.20-0ubuntu40.21-0ubuntu30.21-0ubuntu50.22-0ubuntu10.22-0ubuntu2 Show 45 moreShow less0.23-0ubuntu10.23-0ubuntu20.23-0ubuntu30.24-0ubuntu20.24-0ubuntu30.24-0ubuntu40.25-0ubuntu10.26-0ubuntu20.26-0ubuntu30.27-0ubuntu10.27-0ubuntu22.0.0~beta1-0ubuntu32.0.0~beta1-0ubuntu42.0.0~beta2-0ubuntu12.0.0~beta2-0ubuntu22.0.0~beta3-0ubuntu12.0.0~beta3-0ubuntu22.0.0~beta3-0ubuntu32.0.0~beta3-0ubuntu42.0.0~beta4-0ubuntu12.0.0~beta4-0ubuntu22.0.0~beta4-0ubuntu32.0.0~beta4-0ubuntu42.0.0~beta4-0ubuntu52.0.0~beta4-0ubuntu62.0.0~beta4-0ubuntu72.0.0~rc1-0ubuntu12.0.0~rc1-0ubuntu22.0.0~rc1-0ubuntu32.0.0~rc2-0ubuntu22.0.0~rc2-0ubuntu32.0.0~rc3-0ubuntu12.0.0~rc3-0ubuntu22.0.0~rc3-0ubuntu32.0.0~rc3-0ubuntu42.0.0~rc4-0ubuntu12.0.0~rc5-0ubuntu12.0.0~rc6-0ubuntu12.0.0~rc6-0ubuntu22.0.0~rc7-0ubuntu12.0.0~rc7-0ubuntu22.0.0~rc8-0ubuntu12.0.0~rc8-0ubuntu22.0.0~rc8-0ubuntu32.0.0~rc8-0ubuntu5 |
None known |
containerdUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.2.1-0ubuntu4~16.040.2.3-0ubuntu1~16.040.2.5-0ubuntu1~16.04.11.2.6-0ubuntu1~16.04.21.2.6-0ubuntu1~16.04.3 Show 9 moreShow less1.2.6-0ubuntu1~16.04.41.2.6-0ubuntu1~16.04.51.2.6-0ubuntu1~16.04.61.2.6-0ubuntu1~16.04.6+esm11.2.6-0ubuntu1~16.04.6+esm21.2.6-0ubuntu1~16.04.6+esm41.2.6-0ubuntu1~16.04.6+esm51.2.6-0ubuntu1~16.04.6+esm61.2.6-0ubuntu1~16.04.6+esm7 |
None known |
golang-1.13Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm21.13.8-1ubuntu1~16.04.3+esm3 |
None known |
golang-1.18Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.18.1-1ubuntu1~16.04.61.18.1-1ubuntu1~16.04.6+esm1 |
None known |
google-guest-agentUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 20201217.02-0ubuntu1~16.04.020230426.00-0ubuntu2~16.04.320231004.02-0ubuntu1~16.04.120231004.02-0ubuntu1~16.04.220240716.00-0ubuntu1~16.04.020240716.00-0ubuntu1~16.04.0+esm120240716.00-0ubuntu1~16.04.0+esm220240716.00-0ubuntu1~16.04.0+esm3 |
None known |
google-osconfig-agentUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 20210219.00-0ubuntu1~16.04.020230504.00-0ubuntu1~16.04.020240320.00-0ubuntu1~16.04.020240524.03-0ubuntu2~16.04.020251028.00-0ubuntu2~16.04.1 |
None known |
golang-1.10Ubuntu:18.04:LTS |
All versions, plus listed versions 1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2 |
None known |
lxdUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.18-0ubuntu62.19-0ubuntu12.20-0ubuntu32.20-0ubuntu42.21-0ubuntu1 Show 18 moreShow less2.21-0ubuntu22.21-0ubuntu32.21-0ubuntu43.0.0~beta2-0ubuntu33.0.0~beta3-0ubuntu33.0.0~beta5-0ubuntu23.0.0~beta7-0ubuntu13.0.0-0ubuntu13.0.0-0ubuntu23.0.0-0ubuntu33.0.0-0ubuntu43.0.1-0ubuntu1~18.04.13.0.2-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.23.0.3-0ubuntu1~18.04.2+esm13.0.3-0ubuntu1~18.04.2+esm23.0.3-0ubuntu1~18.04.2+esm3 |
None known |
containerdUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 0.2.5-0ubuntu21.2.6-0ubuntu1~18.04.11.2.6-0ubuntu1~18.04.21.3.3-0ubuntu1~18.04.11.3.3-0ubuntu1~18.04.2 Show 15 moreShow less1.3.3-0ubuntu1~18.04.31.3.3-0ubuntu1~18.04.41.4.4-0ubuntu1~18.04.21.5.2-0ubuntu1~18.04.11.5.2-0ubuntu1~18.04.21.5.2-0ubuntu1~18.04.31.5.5-0ubuntu3~18.04.11.5.5-0ubuntu3~18.04.21.5.9-0ubuntu1~18.04.11.5.9-0ubuntu1~18.04.21.6.12-0ubuntu1~18.04.11.6.12-0ubuntu1~18.04.1+esm11.6.12-0ubuntu1~18.04.1+esm21.6.12-0ubuntu1~18.04.1+esm31.6.12-0ubuntu1~18.04.1+esm4 |
None known |
golang-1.13Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.41.13.8-1ubuntu1~18.04.4+esm1 |
None known |
golang-1.16Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.16.2-0ubuntu1~18.04.21.16.2-0ubuntu1~18.04.2+esm1 |
None known |
golang-1.18Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.18.1-1ubuntu1~18.04.31.18.1-1ubuntu1~18.04.41.18.1-1ubuntu1~18.04.4+esm1 |
None known |
golang-1.8Ubuntu:18.04:LTS |
All versions, plus listed versions 1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1 |
None known |
golang-1.9Ubuntu:18.04:LTS |
All versions, plus listed versions 1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1 |
None known |
golang-golang-x-net-devUbuntu:Pro:18.04:LTS |
before 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3, plus listed versions 1:0.0+git20170629.c81e7f2+dfsg-1ubuntu11:0.0+git20170629.c81e7f2+dfsg-1ubuntu21:0.0+git20170629.c81e7f2+dfsg-21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm11:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2 |
1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3 |
google-guest-agentUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 20201217.02-0ubuntu1~18.04.020210414.00-0ubuntu1~18.04.020210629.00-0ubuntu1~18.04.120220622.00-0ubuntu2~18.04.020220622.00-0ubuntu2~18.04.1 Show 8 moreShow less20230426.00-0ubuntu2~18.04.020231004.02-0ubuntu1~18.04.220231004.02-0ubuntu1~18.04.320240716.00-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.0+esm120241011.01-0ubuntu1~18.04.0+esm220241011.01-0ubuntu1~18.04.0+esm3 |
None known |
google-osconfig-agentUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 20210219.00-0ubuntu1~18.04.020210608.1-0ubuntu1~18.04.120210608.1-0ubuntu1~18.04.220220824.00-0ubuntu1~18.04.120230504.00-0ubuntu1~18.04.0 Show 4 moreShow less20240320.00-0ubuntu1~18.04.020240524.03-0ubuntu2~18.04.020240926.03-0ubuntu1~18.04.020251028.00-0ubuntu2~18.04.0 |
None known |
adsysUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 0.8~22.040.9.2~20.040.9.2~20.04.10.9.2~20.04.20.9.2~20.04.2ubuntu0.10.9.2~20.04.2ubuntu0.1+esm10.9.2~20.04.2ubuntu0.1+esm2 |
None known |
containerdUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.2.10-0ubuntu11.3.2-0ubuntu11.3.3-0ubuntu11.3.3-0ubuntu21.3.3-0ubuntu2.1 Show 20 moreShow less1.3.3-0ubuntu2.21.3.3-0ubuntu2.31.4.4-0ubuntu1~20.04.21.5.2-0ubuntu1~20.04.11.5.2-0ubuntu1~20.04.21.5.2-0ubuntu1~20.04.31.5.5-0ubuntu3~20.04.11.5.5-0ubuntu3~20.04.21.5.9-0ubuntu1~20.04.11.5.9-0ubuntu1~20.04.41.5.9-0ubuntu1~20.04.51.5.9-0ubuntu1~20.04.61.6.12-0ubuntu1~20.04.11.6.12-0ubuntu1~20.04.31.6.12-0ubuntu1~20.04.51.6.12-0ubuntu1~20.04.61.6.12-0ubuntu1~20.04.71.6.12-0ubuntu1~20.04.81.6.12-0ubuntu1~20.04.8+esm11.6.12-0ubuntu1~20.04.8+esm2 |
None known |
golang-1.13Ubuntu:20.04:LTS |
All versions, plus listed versions 1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1 Show 5 moreShow less1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.11.13.8-1ubuntu1.2 |
None known |
golang-1.14Ubuntu:20.04:LTS |
All versions, plus listed versions 1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1 Show 4 moreShow less1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2 |
None known |
google-guest-agentUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 20201217.02-0ubuntu1~20.04.020210414.00-0ubuntu1~20.04.020210629.00-0ubuntu1~20.04.020220622.00-0ubuntu2~20.04.020220622.00-0ubuntu2~20.04.2 Show 11 moreShow less20230426.00-0ubuntu2~20.04.020231004.02-0ubuntu1~20.04.120231004.02-0ubuntu1~20.04.220231004.02-0ubuntu1~20.04.320231004.02-0ubuntu1~20.04.420240716.00-0ubuntu1~20.04.020241011.01-0ubuntu1~20.04.120250116.00-0ubuntu1~20.04.020250116.00-0ubuntu1~20.04.0+esm120250116.00-0ubuntu1~20.04.0+esm220250116.00-0ubuntu1~20.04.0+esm3 |
None known |
golang-1.16Ubuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.16.2-0ubuntu1~20.041.16.2-0ubuntu1~20.04.11.16.2-0ubuntu1~20.04.1+esm1 |
None known |
golang-1.18Ubuntu:20.04:LTS |
All versions, plus listed versions 1.18.1-1ubuntu1~20.04.11.18.1-1ubuntu1~20.04.21.18.1-1ubuntu1~20.04.3 |
None known |
golang-1.20Ubuntu:20.04:LTS |
All versions, plus listed versions 1.20.3-1ubuntu0.1~20.041.20.3-1ubuntu0.1~20.04.1 |
None known |
golang-1.21Ubuntu:20.04:LTS |
All versions, plus listed versions 1.21.1-1~ubuntu20.04.11.21.1-1~ubuntu20.04.21.21.1-1~ubuntu20.04.3 |
None known |
golang-1.22Ubuntu:20.04:LTS |
All versions, plus listed versions 1.22.2-2~20.04.11.22.2-2~20.04.21.22.2-2~20.04.3 |
None known |
golang-golang-x-net-devUbuntu:Pro:20.04:LTS |
before 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3, plus listed versions 1:0.0+git20190811.74dc4d7+dfsg-11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2 |
1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3 |
google-osconfig-agentUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 20210219.00-0ubuntu1~20.04.020210608.1-0ubuntu1~20.04.020210608.1-0ubuntu1~20.04.120220824.00-0ubuntu1~20.04.120230504.00-0ubuntu1~20.04.0 Show 6 moreShow less20240320.00-0ubuntu1~20.04.020240320.00-0ubuntu1~20.04.120240524.03-0ubuntu2~20.04.020240926.03-0ubuntu1~20.04.020250115.01-0ubuntu1~20.04.020251028.00-0ubuntu2~20.04.0 |
None known |
rcloneopenSUSE:Tumbleweed From an advisory covering 23 CVEs |
before 1.74.2-1.1 | 1.74.2-1.1 |
amazon-ecs-initopenSUSE:Tumbleweed |
before 1.103.2-1.1 | 1.103.2-1.1 |
amazon-ssm-agentopenSUSE:Tumbleweed |
before 3.3.4515.0-1.1 | 3.3.4515.0-1.1 |
azure-storage-azcopyopenSUSE:Tumbleweed |
before 10.32.4-1.1 | 10.32.4-1.1 |
hauleropenSUSE:Tumbleweed |
before 1.4.3-4.1 | 1.4.3-4.1 |
helmopenSUSE:Tumbleweed |
before 4.2.0-3.1 | 4.2.0-3.1 |
helm3openSUSE:Tumbleweed |
before 3.21.0-2.1 | 3.21.0-2.1 |
trivyopenSUSE:Tumbleweed |
before 0.70.0-4.1 | 0.70.0-4.1 |
apptaineropenSUSE:Tumbleweed |
before 1.4.5-6.1 | 1.4.5-6.1 |
distributionopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 3.1.1-3.1 | 3.1.1-3.1 |
mcphostopenSUSE:Tumbleweed |
before 0.34.0-7.1 | 0.34.0-7.1 |
rqliteopenSUSE:Tumbleweed |
before 10.1.0-2.1 | 10.1.0-2.1 |
cloudflaredopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 2026.5.2-1.1 | 2026.5.2-1.1 |
v2ray-coreopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 5.51.2-1.1 | 5.51.2-1.1 |
google-guest-agentopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 20260529.00-1.1 | 20260529.00-1.1 |
yqopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 4.53.2-2.1 | 4.53.2-2.1 |
prometheus-blackbox_exporteropenSUSE:Tumbleweed |
before 0.26.0-6.1 | 0.26.0-6.1 |
grafanaopenSUSE:Tumbleweed |
before 11.6.14+security04-2.1 | 11.6.14+security04-2.1 |
golang-github-prometheus-prometheusopenSUSE:Tumbleweed |
before 3.12.0-2.1 | 3.12.0-2.1 |
golang-github-prometheus-alertmanageropenSUSE:Tumbleweed |
before 0.32.2-2.1 | 0.32.2-2.1 |
golang-github-prometheus-node_exporteropenSUSE:Tumbleweed |
before 1.11.1-2.1 | 1.11.1-2.1 |
warewulf4openSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 4.7.0-1.1 | 4.7.0-1.1 |
alloyopenSUSE:Tumbleweed From an advisory covering 14 CVEs |
before 1.17.0-1.1 | 1.17.0-1.1 |
docker-stableopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 24.0.9_ce-18.1 | 24.0.9_ce-18.1 |
containerdopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 1.7.33-1.1 | 1.7.33-1.1 |
velociraptoropenSUSE:Tumbleweed From an advisory covering 49 CVEs |
before 0.7.0.4.git185.a5708584-2.1 | 0.7.0.4.git185.a5708584-2.1 |
dockeropenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 29.4.0_ce-40.1 | 29.4.0_ce-40.1 |
cadvisoropenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 0.60.3-1.1 | 0.60.3-1.1 |
go-sendxmppopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 0.16.0-1.1 | 0.16.0-1.1 |
gomuksopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 26.03+git.1780250926.564a8707-1.1 | 26.03+git.1780250926.564a8707-1.1 |
containerized-data-importer1.65openSUSE:Tumbleweed From an advisory covering 13 CVEs |
before 1.65.0-2.1 | 1.65.0-2.1 |
kubevirt1.8openSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 1.8.4-2.1 | 1.8.4-2.1 |
ghopenSUSE:Tumbleweed |
before 2.96.0-2.1 | 2.96.0-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| affected | OSV | |
| affected, aliases_more, facts, references | OSV | |
| affected, aliases, aliases_more, references | OSV | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-39821 is a critical vulnerability (CVSS 9.6) in Golang Net, published November 5, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 79th percentile. Fixed in go 1.26.8-r0.
References
go.dev/cl/767220
go.dev/issue/78760
groups.google.com/g/golang-announce/c/iI-mYSI0lu8
groups.google.com/g/golang-announce/c/94pEornpRlI
pkg.go.dev/vuln/GO-2026-5026
access.redhat.com/security/cve/CVE-2026-39821
Show 194 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2480756
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json
access.redhat.com/errata/RHSA-2026:42079
access.redhat.com/errata/RHSA-2026:42080
access.redhat.com/errata/RHSA-2026:41019
access.redhat.com/errata/RHSA-2026:66350
access.redhat.com/errata/RHSA-2026:54191
access.redhat.com/errata/RHSA-2026:42078
access.redhat.com/errata/RHSA-2026:54757
access.redhat.com/errata/RHSA-2026:54580
access.redhat.com/errata/RHSA-2026:34789
nvd.nist.gov/vuln/detail/CVE-2026-39821
github.com/advisories/GHSA-w2q5-6q6x-x959
security.alpinelinux.org/vuln/CVE-2026-39821
bugzilla.redhat.com/2480756
errata.almalinux.org/8/ALSA-2026-30853.html
errata.almalinux.org/9/ALSA-2026-30854.html
errata.almalinux.org/10/ALSA-2026-30855.html
bugzilla.redhat.com/2466505
bugzilla.redhat.com/2466507
bugzilla.redhat.com/2467822
bugzilla.redhat.com/2480761
bugzilla.redhat.com/2484207
errata.almalinux.org/10/ALSA-2026-34357.html
errata.almalinux.org/9/ALSA-2026-34359.html
errata.almalinux.org/10/ALSA-2026-35826.html
errata.almalinux.org/10/ALSA-2026-35827.html
redhat.com/security/data/cve/CVE-2026-25681.html
errata.almalinux.org/9/ALSA-2026-35828.html
errata.almalinux.org/9/ALSA-2026-35829.html
errata.almalinux.org/8/ALSA-2026-35830.html
redhat.com/security/data/cve/CVE-2026-42505.html
bugzilla.redhat.com/2498152
redhat.com/security/data/cve/CVE-2026-42504.html
redhat.com/security/data/cve/CVE-2026-42507.html
bugzilla.redhat.com/2467809
bugzilla.redhat.com/2467820
docs.bell-sw.com/security/cves/CVE-2026-39821
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782991913.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784024382.html
nvd.nist.gov/vuln/detail/CVE-2026-25681
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784025046.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784027626.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784074875.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784216354.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784533387.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1789038537.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1789376503.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1789570040.html
nvd.nist.gov/vuln/detail/CVE-2026-33818
nvd.nist.gov/vuln/detail/CVE-2026-56858
nvd.nist.gov/vuln/detail/CVE-2026-56859
nvd.nist.gov/vuln/detail/CVE-2026-56860
nvd.nist.gov/vuln/detail/CVE-2026-56862
pkg.go.dev
github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39821.json
security-tracker.debian.org/tracker/CVE-2026-39821
advisories.mageia.org/MGASA-2026-0341.html
bugs.mageia.org/show_bug.cgi?id=36142
openwall.com/lists/oss-security/2026/08/13/13
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23262.json
cve.org/CVERecord?id=CVE-2026-27145
nvd.nist.gov/vuln/detail/CVE-2026-27145
go.dev/cl/783621
go.dev/issue/79694
groups.google.com/g/golang-announce/c/tKs3rmcBcKw
pkg.go.dev/vuln/GO-2026-5037
cve.org/CVERecord?id=CVE-2026-33811
nvd.nist.gov/vuln/detail/CVE-2026-33811
go.dev/cl/767860
go.dev/issue/78803
groups.google.com/g/golang-announce/c/qcCIEXso47M
pkg.go.dev/vuln/GO-2026-4981
cve.org/CVERecord?id=CVE-2026-33814
nvd.nist.gov/vuln/detail/CVE-2026-33814
go.dev/cl/761581
go.dev/cl/761640
go.dev/issue/78476
pkg.go.dev/vuln/GO-2026-4918
cve.org/CVERecord?id=CVE-2026-39820
go.dev/cl/759940
go.dev/issue/78566
pkg.go.dev/vuln/GO-2026-4986
cve.org/CVERecord?id=CVE-2026-39821
cve.org/CVERecord?id=CVE-2026-39823
pkg.go.dev/vuln/GO-2026-4982
cve.org/CVERecord?id=CVE-2026-39825
pkg.go.dev/vuln/GO-2026-4976
cve.org/CVERecord?id=CVE-2026-39826
pkg.go.dev/vuln/GO-2026-4980
cve.org/CVERecord?id=CVE-2026-39836
pkg.go.dev/vuln/GO-2026-4971
cve.org/CVERecord?id=CVE-2026-42501
groups.google.com/g/golang-announce/c/a082jnz-LvI
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_23264.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30853.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30854.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30855.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34357.json
github.com/prometheus/prometheus/pull/18587
github.com/prometheus/prometheus/pull/18590
github.com/prometheus/prometheus/releases/tag/v3.11.3
github.com/prometheus/prometheus/releases/tag/v3.5.3
github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj
github.com/prometheus/prometheus/pull/18584
github.com/prometheus/prometheus/pull/18585
github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34359.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34789.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_35826.json
docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro
docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index
groups.google.com/g/golang-announce/c/8FJoBkPddm4
groups.google.com/g/golang-announce/c/EdhZqrQ98hk
groups.google.com/g/golang-announce/c/0uYbvbPZRWU
issues.redhat.com/browse/RHEL-193476
groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc
issues.redhat.com/browse/RHEL-193473
issues.redhat.com/browse/RHEL-193478
docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_enterprise_linux/rhem-integrating-with-aap
docs.redhat.com/en/documentation/red_hat_edge_manager/1.1/html/installing_red_hat_edge_manager_on_red_hat_openshift_container_platform/edge-manager-install-rhem-ocp
docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases
docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5
cna.openjsf.org/security-advisories.html
docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates
docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6
docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates
docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7
issues.redhat.com/browse/SAT-47477
lists.apache.org/thread/pgtfq44ltc9t63kxcbqmwqzt45pnhqdy
issues.redhat.com/browse/OSPRH-20808
groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
security.openstack.org/ossa/OSSA-2025-002.html
openwall.com/lists/oss-security/2025/11/04/2
groups.google.com/g/golang-announce/c/K09ubi9FQFk
bugs.launchpad.net/nova/+bug/2137507
openwall.com/lists/oss-security/2026/04/07/12
security.openstack.org/ossa/OSSA-2026-005.html
bugs.launchpad.net/glance/+bug/2138602
cna.erlef.org/cves/CVE-2026-42789.html
osv.dev/vulnerability/EEF-CVE-2026-42789
erlang.org/doc/system/versions.html
cna.erlef.org/cves/CVE-2026-42790.html
osv.dev/vulnerability/EEF-CVE-2026-42790
bugs.launchpad.net/keystone/+bug/2149775
review.opendev.org/c/openstack/keystone/+/985804
bugs.launchpad.net/oslo.messaging/+bug/2150316
wiki.openstack.org/wiki/OSSN/OSSN-0096
grafana.com/security/security-advisories/cve-2026-8609
grafana.com/security/security-advisories/cve-2026-33376
grafana.com/security/security-advisories/cve-2026-33377
grafana.com/security/security-advisories/cve-2026-33382
grafana.com/security/security-advisories/cve-2026-42127
errata.rockylinux.org/RLSA-2026:30853
errata.rockylinux.org/RLSA-2026:30854
errata.rockylinux.org/RLSA-2026:30855
errata.rockylinux.org/RLSA-2026:34357
errata.rockylinux.org/RLSA-2026:34359
errata.rockylinux.org/RLSA-2026:35826
errata.rockylinux.org/RLSA-2026:35827
errata.rockylinux.org/RLSA-2026:35828
errata.rockylinux.org/RLSA-2026:35829
errata.rockylinux.org/RLSA-2026:35830
suse.com/support/update/announcement//suse-ou-20162857-1
bugzilla.suse.com/1266598
suse.com/security/cve/CVE-2026-39821
suse.com/support/update/announcement/-2026-3712/suse-ru-20263712-1
bugzilla.suse.com/1243168
bugzilla.suse.com/1244141
bugzilla.suse.com/1245944
bugzilla.suse.com/1247004
bugzilla.suse.com/1253505
bugzilla.suse.com/1254201
bugzilla.suse.com/1257102
bugzilla.suse.com/1257295
bugzilla.suse.com/1258500
suse.com/support/update/announcement/2026/suse-su-202622066-1
suse.com/security/cve/CVE-2025-58190
suse.com/security/cve/CVE-2026-25680
suse.com/security/cve/CVE-2026-25681
suse.com/security/cve/CVE-2026-27136
suse.com/security/cve/CVE-2026-33186
suse.com/security/cve/CVE-2026-33814
ubuntu.com/security/CVE-2026-39821
ubuntu.com/security/notices/USN-8416-1
ubuntu.com/security/notices/USN-8883-1
ubuntu.com/security/notices/USN-8900-1
ubuntu.com/security/notices/USN-8914-1
ubuntu.com/security/notices/USN-8883-2
ubuntu.com/security/CVE-2022-27664
ubuntu.com/security/CVE-2022-41723
ubuntu.com/security/CVE-2023-3978
ubuntu.com/security/CVE-2024-45338
Left out here: 1,422 package rows, 26 versions and 3,516 references. The JSON record has them. Also not on the record: 334 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 383 source records.