Every CVE Search/ Get API key

CVE-2026-39835

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

5.3 MediumFix available

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.50%Up 0.5 points since May 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
CVE-2026-39835
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2026-31393 7.5

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
EUVD-2026-31393
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-78mq-xcr3-xm33 5.3

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
GHSA-78mq-xcr3-xm33
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-295, CWE-476
Updated
2026-11-02
NVD 5.3

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
CVE-2026-39835
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-295, CWE-476
Updated
2026-11-02
OSVBELL-CVE-2026-39835 5.3
Record
BELL-CVE-2026-39835
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSV 5.3

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
CVE-2026-39835
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-39835 5.3

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
DEBIAN-CVE-2026-39835
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVGHSA-78mq-xcr3-xm33 5.3

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
GHSA-78mq-xcr3-xm33
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-295, CWE-476
Updated
2026-11-02
OSVRHSA-2026:36199 8.7

Red Hat Security Advisory: buildah security update

Record
RHSA-2026:36199
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:36796 9.1

Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update

Record
RHSA-2026:36796
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:37072 8.7

Red Hat Security Advisory: podman security, bug fix, and enhancement update

Record
RHSA-2026:37072
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:37123 8.7

Red Hat Security Advisory: podman security, bug fix, and enhancement update

Record
RHSA-2026:37123
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:37410 8.7

Red Hat Security Advisory: buildah security update

Record
RHSA-2026:37410
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:38504 7.5

Red Hat Security Advisory: container-tools:rhel8 security update

Record
RHSA-2026:38504
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2026:41019 9.1

Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update

Record
RHSA-2026:41019
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:51036 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

Record
RHSA-2026:51036
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:62391 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:62391
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:66561 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:66561
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:36199 8.7

Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.

Security Fix(es):

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)

  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)

  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)

  • golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:36199
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:37072 8.7

Important: podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)

  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)

  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)

  • golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)

  • golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)

  • golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)

  • golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)

  • podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)

Bug Fix(es) and Enhancement(s):

  • podman does not clean up all files and leaves orphaned files consuming disk space [rhel-10.2.z] (JIRA:Rocky Linux-173842)

  • [FJ10.2 Bug]: [REG]The "podman-remote save" command fails for rootless users. [rhel-10.2.z] (JIRA:Rocky Linux-192440)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:37072
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:37123 8.7

Important: podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)

  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)

  • golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)

  • golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)

  • golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)

  • golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)

  • podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)

Bug Fix(es) and Enhancement(s):

  • podman does not clean up all files and leaves orphaned files consuming disk space [rhel-9.8.z] (JIRA:Rocky Linux-173988)

  • [FJ9.8 Bug]: [REG]The "podman-remote save" command fails for rootless users. [rhel-9.8.z] (JIRA:Rocky Linux-192439)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:37123
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:37410 8.7

Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.

Security Fix(es):

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)

  • golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:37410
CVSS 3.1
8.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2026:38504 7.5

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)

  • podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:38504
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-39835 5.3

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
UBUNTU-CVE-2026-39835
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:36199 No score

Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.

Security Fix(es):

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
  • golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:36199
Updated
2026-11-02
OSVALSA-2026:37123 No score

Important: podman security, bug fix, and enhancement update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.

Security Fix(es):

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
  • golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
  • golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)
  • golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
  • golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
  • golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)
  • podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)

Bug Fix(es) and Enhancement(s):

  • podman does not clean up all files and leaves orphaned files consuming disk space [almalinux-9.8.z] (JIRA:AlmaLinux-173988)
  • [FJ9.8 Bug]: [REG]The "podman-remote save" command fails for rootless users. [almalinux-9.8.z] (JIRA:AlmaLinux-192439)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:37123
Updated
2026-11-02
OSVALSA-2026:37410 No score

Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.

Security Fix(es):

  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
  • golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:37410
Updated
2026-11-02
OSVALSA-2026:38504 No score

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
  • golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
  • podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:38504
Updated
2026-11-02
OSVAZL-111563 No score

CVE-2026-39835 affecting package kubevirt-openvmm 1.9.0-1

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-111563
Updated
2026-11-05
OSVAZL-87191 No score

CVE-2026-39835 affecting package buildah 1.43.1-3

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87191
Updated
2026-11-05
OSVAZL-87248 No score

CVE-2026-39835 affecting package cri-o 1.30.1-1

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87248
Updated
2026-11-05
OSVAZL-87308 No score

CVE-2026-39835 affecting package podman 5.6.1-10

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87308
Updated
2026-11-05
OSVAZL-87417 No score

CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-9

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87417
Updated
2026-11-02
OSVAZL-87465 No score

CVE-2026-39835 affecting package cf-cli for versions less than 8.7.11-7

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87465
Updated
2026-11-05
OSVAZL-87627 No score

CVE-2026-39835 affecting package docker-buildx for versions less than 0.14.0-15

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87627
Updated
2026-11-05
OSVAZL-87702 No score

CVE-2026-39835 affecting package docker-compose for versions less than 2.27.0-12

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87702
Updated
2026-11-02
OSVAZL-87768 No score

CVE-2026-39835 affecting package gh for versions less than 2.62.0-17

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87768
Updated
2026-11-02
OSVAZL-87912 No score

CVE-2026-39835 affecting package kubernetes for versions less than 1.30.10-25

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87912
Updated
2026-11-05
OSVAZL-87975 No score

CVE-2026-39835 affecting package kubevirt for versions less than 1.7.1-7

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-87975
Updated
2026-11-05
OSVAZL-88071 No score

CVE-2026-39835 affecting package moby-engine for versions less than 25.0.3-18

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-88071
Updated
2026-11-02
OSVAZL-88167 No score

CVE-2026-39835 affecting package packer for versions less than 1.9.5-15

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-88167
Updated
2026-11-02
OSVAZL-88332 No score

CVE-2026-39835 affecting package telegraf for versions less than 1.31.0-23

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
AZL-88332
Updated
2026-11-02
OSVCLSA-2026-1784132479 No score

buildah: Fix of 3 CVEs

  • CVE-2026-39835: return an error instead of panicking when the SSH CertChecker IsHostAuthority/IsUserAuthority callbacks are unset, in the vendored golang.org/x/crypto/ssh
Record
CLSA-2026-1784132479
Updated
2026-11-02
OSVCLSA-2026-1784133121 No score

buildah: Fix of 3 CVEs

  • CVE-2026-39835: return an error instead of panicking when the SSH CertChecker IsHostAuthority/IsUserAuthority callbacks are unset, in the vendored golang.org/x/crypto/ssh
Record
CLSA-2026-1784133121
Updated
2026-11-02
OSVCLSA-2026-1784155512 No score

podman: Fix of 3 CVEs

  • CVE-2026-39835: return an error instead of panicking when the vendored golang.org/x/crypto/ssh CertChecker IsHostAuthority or IsUserAuthority callbacks are nil, preventing a nil-pointer dereference DoS
Record
CLSA-2026-1784155512
Updated
2026-11-02
OSVCLSA-2026-1786960012 No score

podman: Fix of CVE-2026-39835

  • CVE-2026-39835: return an error instead of panicking when the vendored golang.org/x/crypto/ssh CertChecker IsHostAuthority or IsUserAuthority callbacks are nil, preventing a nil-pointer dereference DoS
Record
CLSA-2026-1786960012
Updated
2026-11-02
OSVGO-2026-5015 No score

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Record
GO-2026-5015
Updated
2026-11-02
OSVopenSUSE-SU-2026:10842-1 No score

apptainer-1.4.5-5.1 on GA media

These are all security issues fixed in the apptainer-1.4.5-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10842-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10845-1 No score

mcphost-0.34.0-5.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10845-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10856-1 No score

rclone-1.74.2-1.1 on GA media

These are all security issues fixed in the rclone-1.74.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10856-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10949-1 No score

git-bug-0.10.1-5.1 on GA media

These are all security issues fixed in the git-bug-0.10.1-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10949-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11126-1 No score

velociraptor-0.7.0.4.git185.a5708584-2.1 on GA media

These are all security issues fixed in the velociraptor-0.7.0.4.git185.a5708584-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11126-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11806-1 No score

kit-0.107.0-1.1 on GA media

These are all security issues fixed in the kit-0.107.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11806-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:12166-1 No score

percona-toolkit-3.7.1.4-1.1 on GA media

These are all security issues fixed in the percona-toolkit-3.7.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12166-1
Updated
2026-11-02

Affected products

Show 53 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
golang.org/x/crypto
Go
 before 0.52.0
0.52.0
buildah
AlmaLinux:10
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
buildah-tests
AlmaLinux:10
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
podman
AlmaLinux:9
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-docker
AlmaLinux:9
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-plugins
AlmaLinux:9
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-remote
AlmaLinux:9
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-tests
AlmaLinux:9
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
buildah
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
buildah-tests
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
aardvark-dns
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7
aardvark-dns
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe
2:1.10.1-2.module_el8.10.0+4089+ce72bbbe
aardvark-dns
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module_el8.10.0+4047+545787c4
2:1.10.1-2.module_el8.10.0+4047+545787c4
aardvark-dns
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
2:1.10.1-2.module_el8.10.0+3901+4b80ecd7
buildah
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1.33.14-4.module_el8.10.0+4213+0493256b
2:1.33.14-4.module_el8.10.0+4213+0493256b
buildah-tests
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1.33.14-4.module_el8.10.0+4213+0493256b
2:1.33.14-4.module_el8.10.0+4213+0493256b
cockpit-podman
AlmaLinux:8
From an advisory covering 3 CVEs
 before 84.1-1.module_el8.10.0+4102+6c76e544
84.1-1.module_el8.10.0+4102+6c76e544
conmon
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module_el8.10.0+3970+8445edf6
3:2.1.10-1.module_el8.10.0+3970+8445edf6
conmon
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module_el8.10.0+4090+91932338
3:2.1.10-1.module_el8.10.0+4090+91932338
conmon
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module_el8.10.0+4068+0e21408f
3:2.1.10-1.module_el8.10.0+4068+0e21408f
container-selinux
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:2.229.0-3.module_el8.10.0+4213+0493256b
2:2.229.0-3.module_el8.10.0+4213+0493256b
containernetworking-plugins
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1:1.4.0-8.module_el8.10.0+4136+16425343
1:1.4.0-8.module_el8.10.0+4136+16425343
containers-common
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1-82.module_el8.10.0+3876+e55593a8
2:1-82.module_el8.10.0+3876+e55593a8
containers-common
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1-82.module_el8.10.0+3901+4b80ecd7
2:1-82.module_el8.10.0+3901+4b80ecd7
containers-common
AlmaLinux:8
From an advisory covering 3 CVEs
 before 2:1-82.module_el8.10.0+4089+ce72bbbe
2:1-82.module_el8.10.0+4089+ce72bbbe
crit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4047+545787c4
3.18-5.module_el8.10.0+4047+545787c4
crit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3901+4b80ecd7
3.18-5.module_el8.10.0+3901+4b80ecd7
crit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4120+03ad4b47
3.18-5.module_el8.10.0+4120+03ad4b47
crit
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
criu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4089+ce72bbbe
3.18-5.module_el8.10.0+4089+ce72bbbe
criu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4120+03ad4b47
3.18-5.module_el8.10.0+4120+03ad4b47
criu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3876+e55593a8
3.18-5.module_el8.10.0+3876+e55593a8
criu
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3909+6e1c1eb7
3.18-5.module_el8.10.0+3909+6e1c1eb7
criu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4016+efd18bf8
3.18-5.module_el8.10.0+4016+efd18bf8
criu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4089+ce72bbbe
3.18-5.module_el8.10.0+4089+ce72bbbe
criu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4068+0e21408f
3.18-5.module_el8.10.0+4068+0e21408f
criu-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3858+6ad51f9f
3.18-5.module_el8.10.0+3858+6ad51f9f
criu-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3970+8445edf6
3.18-5.module_el8.10.0+3970+8445edf6
criu-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3909+6e1c1eb7
3.18-5.module_el8.10.0+3909+6e1c1eb7
criu-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+3926+f12484f5
3.18-5.module_el8.10.0+3926+f12484f5
criu-libs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.18-5.module_el8.10.0+4082+f7f0c95e
3.18-5.module_el8.10.0+4082+f7f0c95e
crun
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.14.3-2.module_el8.10.0+4120+03ad4b47
1.14.3-2.module_el8.10.0+4120+03ad4b47
crun
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.14.3-2.module_el8.10.0+4102+6c76e544
1.14.3-2.module_el8.10.0+4102+6c76e544
crun
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.14.3-2.module_el8.10.0+4082+f7f0c95e
1.14.3-2.module_el8.10.0+4082+f7f0c95e
fuse-overlayfs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.13-1.module_el8.10.0+4047+545787c4
1.13-1.module_el8.10.0+4047+545787c4
fuse-overlayfs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.13-1.module_el8.10.0+4082+f7f0c95e
1.13-1.module_el8.10.0+4082+f7f0c95e
fuse-overlayfs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.13-1.module_el8.10.0+3792+03eaed9c
1.13-1.module_el8.10.0+3792+03eaed9c
fuse-overlayfs
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.13-1.module_el8.10.0+4068+0e21408f
1.13-1.module_el8.10.0+4068+0e21408f
libslirp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.4.0-2.module_el8.10.0+4023+db236c53
4.4.0-2.module_el8.10.0+4023+db236c53
libslirp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.4.0-2.module_el8.10.0+4090+91932338
4.4.0-2.module_el8.10.0+4090+91932338
kubevirt-openvmm
Azure Linux:3
 through 1.9.0-1 None known
buildah
Azure Linux:3
 through 1.43.1-3 None known
cri-o
Azure Linux:3
 through 1.30.1-1 None known
podman
Azure Linux:3
 through 5.6.1-10 None known
cert-manager
Azure Linux:3
 before 1.12.15-9
1.12.15-9
cf-cli
Azure Linux:3
 before 8.7.11-7
8.7.11-7
docker-buildx
Azure Linux:3
 before 0.14.0-15
0.14.0-15
docker-compose
Azure Linux:3
 before 2.27.0-12
2.27.0-12
gh
Azure Linux:3
 before 2.62.0-17
2.62.0-17
kubernetes
Azure Linux:3
 before 1.30.10-25
1.30.10-25
kubevirt
Azure Linux:3
 before 1.7.1-7
1.7.1-7
moby-engine
Azure Linux:3
 before 25.0.3-18
25.0.3-18
packer
Azure Linux:3
 before 1.9.5-15
1.9.5-15
telegraf
Azure Linux:3
 before 1.31.0-23
1.31.0-23
buildah
Alpaquita:23
 1.28.0-r1 and later None known
containerd
Alpaquita:23
 1.6.10-r0 and later None known
podman
Alpaquita:23
 4.3.1-r0 and later None known
skopeo
Alpaquita:23
 1.10.0-r2 and later None known
buildah
Alpaquita:25
 1.40.0-r0 and later None known
containerd
Alpaquita:25
 2.1.1-r0 and later None known
docker-cli-buildx
Alpaquita:25
 0.24.0-r0 and later None known
google-guest-agent
Alpaquita:25
 20250521.00-r0 and later None known
osv-scanner
Alpaquita:25
 2.1.0-r4 and later None known
podman
Alpaquita:25
 5.5.0-r0 and later None known
skopeo
Alpaquita:25
 1.18.0-r2 and later None known
buildah
Alpaquita:stream
 1.31.0-r0 and later None known
calicoctl
Alpaquita:stream
 3.31.3-r0 and later None known
cilium-cli
Alpaquita:stream
 0.19.0-r12 and later None known
containerd
Alpaquita:stream
 1.7.2-r1 and later None known
docker-cli-buildx
Alpaquita:stream
 0.11.0-r0 and later None known
etcd
Alpaquita:stream
 3.6.4-r6 and later None known
google-guest-agent
Alpaquita:stream
 20250214.01-r0 and later None known
grype
Alpaquita:stream
 0.100.0-r0 and later None known
helm
Alpaquita:stream
 3.19.0-r4 and later None known
osv-scanner
Alpaquita:stream
 2.1.0-r2 and later None known
podman
Alpaquita:stream
 4.5.1-r1 and later None known
skopeo
Alpaquita:stream
 1.13.0-r1 and later None known
buildah
TuxCare:AlmaLinux:9.6
 before 2:1.39.6-1.el9_6.tuxcare.els11
2:1.39.6-1.el9_6.tuxcare.els11
buildah-tests
TuxCare:AlmaLinux:9.6
 before 2:1.39.6-1.el9_6.tuxcare.els11
2:1.39.6-1.el9_6.tuxcare.els11
buildah
TuxCare:AlmaLinux:9.2
 before 2:1.39.6-1.el9_2.tuxcare.els11
2:1.39.6-1.el9_2.tuxcare.els11
buildah-tests
TuxCare:AlmaLinux:9.2
 before 2:1.39.6-1.el9_2.tuxcare.els11
2:1.39.6-1.el9_2.tuxcare.els11
podman
TuxCare:AlmaLinux:9.6
 before 5:5.4.0-13.el9_6.tuxcare.els11
5:5.4.0-13.el9_6.tuxcare.els11
podman-docker
TuxCare:AlmaLinux:9.6
 before 5:5.4.0-13.el9_6.tuxcare.els11
5:5.4.0-13.el9_6.tuxcare.els11
podman-plugins
TuxCare:AlmaLinux:9.6
 before 5:5.4.0-13.el9_6.tuxcare.els11
5:5.4.0-13.el9_6.tuxcare.els11
podman-remote
TuxCare:AlmaLinux:9.6
 before 5:5.4.0-13.el9_6.tuxcare.els11
5:5.4.0-13.el9_6.tuxcare.els11
podman-tests
TuxCare:AlmaLinux:9.6
 before 5:5.4.0-13.el9_6.tuxcare.els11
5:5.4.0-13.el9_6.tuxcare.els11
podman
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els16
2:4.4.1-13.el9_2.tuxcare.els16
podman-docker
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els16
2:4.4.1-13.el9_2.tuxcare.els16
podman-gvproxy
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els16
2:4.4.1-13.el9_2.tuxcare.els16
podman-plugins
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els16
2:4.4.1-13.el9_2.tuxcare.els16
podman-remote
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els16
2:4.4.1-13.el9_2.tuxcare.els16
podman-tests
TuxCare:AlmaLinux:9.2
 before 2:4.4.1-13.el9_2.tuxcare.els16
2:4.4.1-13.el9_2.tuxcare.els16
golang-go.crypto
Debian:12
 All versions, plus listed versions
1:0.10.0-11:0.12.0-11:0.13.0-11:0.14.0-11:0.16.0-1
Show 31 moreShow less
1:0.17.0-11:0.18.0-11:0.19.0-11:0.21.0-11:0.22.0-11:0.23.0-11:0.24.0-11:0.24.0-21:0.25.0-11:0.25.0-1~bpo12+11:0.33.0-1~exp11:0.36.0-1~exp11:0.4.0-11:0.41.0-1~exp11:0.42.0-11:0.42.0-1~exp11:0.42.0-21:0.42.0-31:0.42.0-41:0.43.0-11:0.43.0-21:0.45.0-11:0.46.0-11:0.47.0-11:0.50.0-11:0.52.0-11:0.52.0-1~bpo13+11:0.53.0-11:0.54.0-11:0.55.0-11:0.56.0-1
 None known
golang-go.crypto
Debian:13
 All versions, plus listed versions
1:0.25.0-11:0.33.0-1~exp11:0.36.0-1~exp11:0.41.0-1~exp11:0.42.0-1
Show 16 moreShow less
1:0.42.0-1~exp11:0.42.0-21:0.42.0-31:0.42.0-41:0.43.0-11:0.43.0-21:0.45.0-11:0.46.0-11:0.47.0-11:0.50.0-11:0.52.0-11:0.52.0-1~bpo13+11:0.53.0-11:0.54.0-11:0.55.0-11:0.56.0-1
 None known
golang-go.crypto
Debian:14
 before 1:0.52.0-1, plus listed versions
1:0.25.0-11:0.33.0-1~exp11:0.36.0-1~exp11:0.41.0-1~exp11:0.42.0-1
Show 11 moreShow less
1:0.42.0-1~exp11:0.42.0-21:0.42.0-31:0.42.0-41:0.43.0-11:0.43.0-21:0.45.0-11:0.46.0-11:0.47.0-11:0.50.0-11:0.52.0-1~bpo13+1
1:0.52.0-1
buildah
Red Hat:enterprise_linux:10.2
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
buildah-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
buildah-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
buildah-tests
Red Hat:enterprise_linux:10.2
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
buildah-tests-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
flightctl
Red Hat:edge_manager:1.0::el9
From an advisory covering 23 CVEs
 before 0:1.0.3-1.el9em
0:1.0.3-1.el9em
flightctl-agent
Red Hat:edge_manager:1.0::el9
From an advisory covering 23 CVEs
 before 0:1.0.3-1.el9em
0:1.0.3-1.el9em
flightctl-cli
Red Hat:edge_manager:1.0::el9
From an advisory covering 23 CVEs
 before 0:1.0.3-1.el9em
0:1.0.3-1.el9em
flightctl-selinux
Red Hat:edge_manager:1.0::el9
From an advisory covering 23 CVEs
 before 0:1.0.3-1.el9em
0:1.0.3-1.el9em
podman
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman-docker
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman-remote
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman-remote-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman-tests-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman-tests
Red Hat:enterprise_linux:10.2
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-docker
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-plugins
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-plugins-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-remote
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-remote-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-tests
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
podman-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
buildah
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
buildah-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
buildah-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
buildah-tests
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
buildah-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
aardvark-dns
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+24510+6ea3880e
2:1.10.1-2.module+el8.10.0+24510+6ea3880e
buildah
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:1.33.14-4.module+el8.10.0+24510+6ea3880e
2:1.33.14-4.module+el8.10.0+24510+6ea3880e
buildah-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:1.33.14-4.module+el8.10.0+24510+6ea3880e
2:1.33.14-4.module+el8.10.0+24510+6ea3880e
buildah-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:1.33.14-4.module+el8.10.0+24510+6ea3880e
2:1.33.14-4.module+el8.10.0+24510+6ea3880e
buildah-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:1.33.14-4.module+el8.10.0+24510+6ea3880e
2:1.33.14-4.module+el8.10.0+24510+6ea3880e
buildah-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:1.33.14-4.module+el8.10.0+24510+6ea3880e
2:1.33.14-4.module+el8.10.0+24510+6ea3880e
cockpit-podman
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+24510+6ea3880e
0:84.1-1.module+el8.10.0+24510+6ea3880e
conmon
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+24510+6ea3880e
3:2.1.10-1.module+el8.10.0+24510+6ea3880e
conmon-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+24510+6ea3880e
3:2.1.10-1.module+el8.10.0+24510+6ea3880e
conmon-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+24510+6ea3880e
3:2.1.10-1.module+el8.10.0+24510+6ea3880e
container-selinux
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.229.0-3.module+el8.10.0+24510+6ea3880e
2:2.229.0-3.module+el8.10.0+24510+6ea3880e
containernetworking-plugins
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.4.0-8.module+el8.10.0+24510+6ea3880e
1:1.4.0-8.module+el8.10.0+24510+6ea3880e
containernetworking-plugins-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.4.0-8.module+el8.10.0+24510+6ea3880e
1:1.4.0-8.module+el8.10.0+24510+6ea3880e
containernetworking-plugins-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.4.0-8.module+el8.10.0+24510+6ea3880e
1:1.4.0-8.module+el8.10.0+24510+6ea3880e
containers-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+24510+6ea3880e
2:1-82.module+el8.10.0+24510+6ea3880e
crit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.18-5.module+el8.10.0+24510+6ea3880e
0:3.18-5.module+el8.10.0+24510+6ea3880e
criu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.18-5.module+el8.10.0+24510+6ea3880e
0:3.18-5.module+el8.10.0+24510+6ea3880e
buildah
Rocky Linux:10
From an advisory covering 4 CVEs
 before 2:1.43.1-3.el10_2
2:1.43.1-3.el10_2
podman
Rocky Linux:10
From an advisory covering 8 CVEs
 before 7:5.8.2-4.el10_2
7:5.8.2-4.el10_2
podman
Rocky Linux:9
From an advisory covering 7 CVEs
 before 6:5.8.2-4.el9_8
6:5.8.2-4.el9_8
buildah
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:1.43.1-3.el9_8
2:1.43.1-3.el9_8
aardvark-dns
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9
2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9
aardvark-dns
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+1896+b18fa106
2:1.10.1-2.module+el8.10.0+1896+b18fa106
aardvark-dns
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+40133+32c21f88
2:1.10.1-2.module+el8.10.0+40133+32c21f88
aardvark-dns
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+1880+8e896d1b
2:1.10.1-2.module+el8.10.0+1880+8e896d1b
aardvark-dns
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+1874+ce489889
2:1.10.1-2.module+el8.10.0+1874+ce489889
aardvark-dns
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+2001+6a33db9f
2:1.10.1-2.module+el8.10.0+2001+6a33db9f
aardvark-dns
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4
2:1.10.1-2.module+el8.10.0+40047+0c0a73f4
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1874+ce489889
0:84.1-1.module+el8.10.0+1874+ce489889
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1880+8e896d1b
0:84.1-1.module+el8.10.0+1880+8e896d1b
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1948+4b5cd4a9
0:84.1-1.module+el8.10.0+1948+4b5cd4a9
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+2001+6a33db9f
0:84.1-1.module+el8.10.0+2001+6a33db9f
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1815+5fe7415e
0:84.1-1.module+el8.10.0+1815+5fe7415e
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1825+623b0c20
0:84.1-1.module+el8.10.0+1825+623b0c20
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1896+b18fa106
0:84.1-1.module+el8.10.0+1896+b18fa106
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1843+6892ab28
0:84.1-1.module+el8.10.0+1843+6892ab28
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+1872+2e18eb19
0:84.1-1.module+el8.10.0+1872+2e18eb19
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+40047+0c0a73f4
0:84.1-1.module+el8.10.0+40047+0c0a73f4
cockpit-podman
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:84.1-1.module+el8.10.0+40133+32c21f88
0:84.1-1.module+el8.10.0+40133+32c21f88
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+40047+0c0a73f4
3:2.1.10-1.module+el8.10.0+40047+0c0a73f4
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+1874+ce489889
3:2.1.10-1.module+el8.10.0+1874+ce489889
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+1880+8e896d1b
3:2.1.10-1.module+el8.10.0+1880+8e896d1b
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+1843+6892ab28
3:2.1.10-1.module+el8.10.0+1843+6892ab28
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+1815+5fe7415e
3:2.1.10-1.module+el8.10.0+1815+5fe7415e
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+2001+6a33db9f
3:2.1.10-1.module+el8.10.0+2001+6a33db9f
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+1896+b18fa106
3:2.1.10-1.module+el8.10.0+1896+b18fa106
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+40133+32c21f88
3:2.1.10-1.module+el8.10.0+40133+32c21f88
conmon
Rocky Linux:8
From an advisory covering 3 CVEs
 before 3:2.1.10-1.module+el8.10.0+1872+2e18eb19
3:2.1.10-1.module+el8.10.0+1872+2e18eb19
containernetworking-plugins
Rocky Linux:8
From an advisory covering 3 CVEs
 before 1:1.4.0-8.module+el8.10.0+40133+32c21f88
1:1.4.0-8.module+el8.10.0+40133+32c21f88
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+1880+8e896d1b
2:1-82.module+el8.10.0+1880+8e896d1b
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+1896+b18fa106
2:1-82.module+el8.10.0+1896+b18fa106
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+1948+4b5cd4a9
2:1-82.module+el8.10.0+1948+4b5cd4a9
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+40133+32c21f88
2:1-82.module+el8.10.0+40133+32c21f88
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+1843+6892ab28
2:1-82.module+el8.10.0+1843+6892ab28
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+2001+6a33db9f
2:1-82.module+el8.10.0+2001+6a33db9f
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+40047+0c0a73f4
2:1-82.module+el8.10.0+40047+0c0a73f4
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+1872+2e18eb19
2:1-82.module+el8.10.0+1872+2e18eb19
containers-common
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:1-82.module+el8.10.0+1874+ce489889
2:1-82.module+el8.10.0+1874+ce489889
container-selinux
Rocky Linux:8
From an advisory covering 3 CVEs
 before 2:2.229.0-3.module+el8.10.0+40223+e940a224
2:2.229.0-3.module+el8.10.0+40223+e940a224
criu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:3.18-5.module+el8.10.0+1880+8e896d1b
0:3.18-5.module+el8.10.0+1880+8e896d1b
criu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:3.18-5.module+el8.10.0+1874+ce489889
0:3.18-5.module+el8.10.0+1874+ce489889
criu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:3.18-5.module+el8.10.0+1948+4b5cd4a9
0:3.18-5.module+el8.10.0+1948+4b5cd4a9
criu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:3.18-5.module+el8.10.0+40047+0c0a73f4
0:3.18-5.module+el8.10.0+40047+0c0a73f4
criu
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:3.18-5.module+el8.10.0+1843+6892ab28
0:3.18-5.module+el8.10.0+1843+6892ab28
golang.org/x/crypto
Root:Go
 before v0.35.0-aikido.4
v0.35.0-aikido.4v0.48.0-aikido.2v0.37.0-aikido.5v0.37.0-aikido.6v0.40.0-aikido.8v0.40.0-aikido.9v0.32.0-aikido.6v0.47.0-aikido.1v0.47.0-aikido.2v0.49.0-aikido.3v0.49.0-aikido.4v0.45.0-aikido.1v0.49.0-aikido.1v0.31.0-aikido.8v0.46.0-aikido.1v0.37.0-aikido.3v0.35.0-aikido.3v0.45.0-aikido.2v0.40.0-aikido.5v0.40.0-aikido.6v0.46.0-aikido.2v0.36.0-aikido.3v0.31.0-aikido.12v0.31.0-aikido.10v0.36.0-aikido.2v0.31.0-aikido.11v0.36.0-aikido.1v0.32.0-aikido.1v0.32.0-aikido.2v0.32.0-aikido.3v0.32.0-aikido.4v0.40.0-aikido.7v0.37.0-aikido.4v0.49.0-aikido.2v0.32.0-aikido.5v0.31.0-aikido.9v0.46.0-aikido.3v0.35.0-aikido.5v0.45.0-aikido.3v0.27.0-aikido.1v0.21.0-aikido.1v0.35.0-aikido.6v0.38.0-aikido.1v0.27.0-aikido.2v0.21.0-aikido.2
rootio-golang.org/x/crypto
Root:Go
 before v0.35.0-root.io.4
v0.35.0-root.io.4v0.48.0-root.io.2v0.37.0-root.io.5v0.37.0-root.io.6v0.40.0-root.io.8v0.40.0-root.io.9v0.32.0-root.io.6v0.47.0-root.io.1v0.47.0-root.io.2v0.49.0-root.io.3v0.49.0-root.io.4v0.35.0-root.io.5v0.31.0-root.io.12v0.45.0-root.io.1v0.49.0-root.io.1v0.31.0-root.io.8v0.46.0-root.io.1v0.37.0-root.io.3v0.35.0-root.io.3v0.45.0-root.io.2v0.40.0-root.io.5v0.40.0-root.io.6v0.46.0-root.io.2v0.36.0-root.io.3v0.31.0-root.io.10v0.36.0-root.io.2v0.31.0-root.io.11v0.36.0-root.io.1v0.32.0-root.io.1v0.32.0-root.io.2v0.32.0-root.io.3v0.32.0-root.io.4v0.40.0-root.io.7v0.37.0-root.io.4v0.49.0-root.io.2v0.32.0-root.io.5v0.31.0-root.io.9v0.46.0-root.io.3v0.35.0-root.io.6v0.45.0-root.io.3v0.27.0-root.io.1v0.21.0-root.io.1v0.38.0-root.io.1v0.27.0-root.io.2v0.21.0-root.io.2
elemental-toolkit
SUSE:Linux Micro 6.0
From an advisory covering 19 CVEs
 before 2.1.6-1.1
2.1.6-1.1
elemental-toolkit
SUSE:Linux Micro 6.1
From an advisory covering 19 CVEs
 before 2.2.9-slfo.1.1_1.1
2.2.9-slfo.1.1_1.1
amazon-ssm-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 21 CVEs
 before 3.3.4624.0-160000.1.1
3.3.4624.0-160000.1.1
amazon-ssm-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 21 CVEs
 before 3.3.4624.0-160000.1.1
3.3.4624.0-160000.1.1
distribution
SUSE:Linux Enterprise Server 16.0
From an advisory covering 16 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
distribution
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 16 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
mcphost
SUSE:Linux Enterprise Server 16.0
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
mcphost
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
mcphost
SUSE:Linux Micro 6.2
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
google-osconfig-agent
SUSE:Linux Micro 6.0
From an advisory covering 23 CVEs
 before 20260615.01-1.1
20260615.01-1.1
google-osconfig-agent
SUSE:Linux Micro 6.1
From an advisory covering 22 CVEs
 before 20260615.01-slfo.1.1_1.1
20260615.01-slfo.1.1_1.1
google-guest-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 15 CVEs
 before 20260529.00-160000.1.1
20260529.00-160000.1.1
google-guest-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 15 CVEs
 before 20260529.00-160000.1.1
20260529.00-160000.1.1
google-guest-agent
SUSE:Linux Micro 6.0
From an advisory covering 15 CVEs
 before 20260529.00-1.1
20260529.00-1.1
google-guest-agent
SUSE:Linux Micro 6.1
From an advisory covering 15 CVEs
 before 20260529.00-slfo.1.1_1.1
20260529.00-slfo.1.1_1.1
podman
SUSE:Linux Micro 6.1
From an advisory covering 20 CVEs
 before 5.4.2-slfo.1.1_5.1
5.4.2-slfo.1.1_5.1
podman
SUSE:Linux Micro 6.0
From an advisory covering 22 CVEs
 before 4.9.5-12.1
4.9.5-12.1
google-osconfig-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
google-osconfig-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
alloy
SUSE:Linux Enterprise Server 16.0
From an advisory covering 26 CVEs
 before 1.17.0-160000.1.1
1.17.0-160000.1.1
alloy
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 26 CVEs
 before 1.17.0-160000.1.1
1.17.0-160000.1.1
cosign
SUSE:Linux Enterprise Server 16.0
From an advisory covering 19 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
cosign
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 19 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 21 CVEs
 before 3.3.4624.0-150000.5.37.1
3.3.4624.0-150000.5.37.1
amazon-ssm-agent
SUSE:Linux Enterprise Module for Public Cloud 12
From an advisory covering 21 CVEs
 before 3.3.4624.0-4.49.1
3.3.4624.0-4.49.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 12
From an advisory covering 22 CVEs
 before 20260529.00-1.61.1
20260529.00-1.61.1
apptainer
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 19 CVEs
 before 1.5.1-150600.4.24.1
1.5.1-150600.4.24.1
apptainer
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 19 CVEs
 before 1.5.1-150600.4.24.1
1.5.1-150600.4.24.1
google-osconfig-agent
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 16 CVEs
 before 20260615.01-150000.1.55.1
20260615.01-150000.1.55.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 16 CVEs
 before 20260615.01-150000.1.55.1
20260615.01-150000.1.55.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 16 CVEs
 before 20260615.01-150000.1.55.1
20260615.01-150000.1.55.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 16 CVEs
 before 20260615.01-150000.1.55.1
20260615.01-150000.1.55.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 16 CVEs
 before 20260615.01-150000.1.55.1
20260615.01-150000.1.55.1
google-guest-agent
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 22 CVEs
 before 20260529.00-150000.1.70.1
20260529.00-150000.1.70.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 22 CVEs
 before 20260529.00-150000.1.70.1
20260529.00-150000.1.70.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 22 CVEs
 before 20260529.00-150000.1.70.1
20260529.00-150000.1.70.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 22 CVEs
 before 20260529.00-150000.1.70.1
20260529.00-150000.1.70.1
google-guest-agent
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 22 CVEs
 before 20260529.00-150000.1.70.1
20260529.00-150000.1.70.1
google-osconfig-agent
SUSE:Linux Enterprise Module for Public Cloud 12
From an advisory covering 18 CVEs
 before 20260615.01-1.47.1
20260615.01-1.47.1
buildah
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 25 CVEs
 before 1.35.5-150400.3.68.1
1.35.5-150400.3.68.1
buildah
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 25 CVEs
 before 1.35.5-150400.3.68.1
1.35.5-150400.3.68.1
buildah
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 25 CVEs
 before 1.35.5-150400.3.68.1
1.35.5-150400.3.68.1
buildah
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 25 CVEs
 before 1.35.5-150400.3.68.1
1.35.5-150400.3.68.1
buildah
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 25 CVEs
 before 1.35.5-150500.3.62.1
1.35.5-150500.3.62.1
buildah
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 25 CVEs
 before 1.35.5-150500.3.62.1
1.35.5-150500.3.62.1
golang-go.crypto
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1:0.0~git20150608-11:0.0~git20151201.0.7b85b09-21:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm11:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm21:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3
 None known
lxd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.20-0ubuntu40.21-0ubuntu30.21-0ubuntu50.22-0ubuntu10.22-0ubuntu2
Show 45 moreShow less
0.23-0ubuntu10.23-0ubuntu20.23-0ubuntu30.24-0ubuntu20.24-0ubuntu30.24-0ubuntu40.25-0ubuntu10.26-0ubuntu20.26-0ubuntu30.27-0ubuntu10.27-0ubuntu22.0.0~beta1-0ubuntu32.0.0~beta1-0ubuntu42.0.0~beta2-0ubuntu12.0.0~beta2-0ubuntu22.0.0~beta3-0ubuntu12.0.0~beta3-0ubuntu22.0.0~beta3-0ubuntu32.0.0~beta3-0ubuntu42.0.0~beta4-0ubuntu12.0.0~beta4-0ubuntu22.0.0~beta4-0ubuntu32.0.0~beta4-0ubuntu42.0.0~beta4-0ubuntu52.0.0~beta4-0ubuntu62.0.0~beta4-0ubuntu72.0.0~rc1-0ubuntu12.0.0~rc1-0ubuntu22.0.0~rc1-0ubuntu32.0.0~rc2-0ubuntu22.0.0~rc2-0ubuntu32.0.0~rc3-0ubuntu12.0.0~rc3-0ubuntu22.0.0~rc3-0ubuntu32.0.0~rc3-0ubuntu42.0.0~rc4-0ubuntu12.0.0~rc5-0ubuntu12.0.0~rc6-0ubuntu12.0.0~rc6-0ubuntu22.0.0~rc7-0ubuntu12.0.0~rc7-0ubuntu22.0.0~rc8-0ubuntu12.0.0~rc8-0ubuntu22.0.0~rc8-0ubuntu32.0.0~rc8-0ubuntu5
 None known
snapd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.91.9.1.11.9.22.02.0.1
Show 45 moreShow less
2.0.22.0.32.0.52.0.82.0.92.0.102.11+0.16.042.12+0.16.042.132.14.2~16.042.15.2ubuntu12.16ubuntu32.17.1ubuntu12.20.1ubuntu12.212.22.22.22.32.22.62.23.12.24.12.252.26.102.27.52.28.52.29.4.22.32.3.22.32.92.33.1ubuntu22.34.22.34.2ubuntu0.12.37.42.37.4ubuntu0.12.382.39.22.39.2ubuntu0.22.402.42.12.45.12.45.1ubuntu0.22.46.12.47.12.482.48.32.54.3+16.04~esm22.54.3+16.04.0ubuntu0.1~esm3
 None known
google-guest-agent
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~16.04.020230426.00-0ubuntu2~16.04.320231004.02-0ubuntu1~16.04.120231004.02-0ubuntu1~16.04.220240716.00-0ubuntu1~16.04.020240716.00-0ubuntu1~16.04.0+esm120240716.00-0ubuntu1~16.04.0+esm220240716.00-0ubuntu1~16.04.0+esm3
 None known
lxd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.18-0ubuntu62.19-0ubuntu12.20-0ubuntu32.20-0ubuntu42.21-0ubuntu1
Show 18 moreShow less
2.21-0ubuntu22.21-0ubuntu32.21-0ubuntu43.0.0~beta2-0ubuntu33.0.0~beta3-0ubuntu33.0.0~beta5-0ubuntu23.0.0~beta7-0ubuntu13.0.0-0ubuntu13.0.0-0ubuntu23.0.0-0ubuntu33.0.0-0ubuntu43.0.1-0ubuntu1~18.04.13.0.2-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.23.0.3-0ubuntu1~18.04.2+esm13.0.3-0ubuntu1~18.04.2+esm23.0.3-0ubuntu1~18.04.2+esm3
 None known
snapd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.28.5+17.102.29.4.1+18.042.29.4.2+18.042.31.1+18.042.32+18.04~pre5
Show 37 moreShow less
2.32+18.04~pre62.32+18.042.32.3.2+18.042.32.5+18.042.32.8+18.042.32.9+18.042.33.1+18.04ubuntu22.34.2+18.042.34.2+18.04.12.37.1+18.042.37.1.1+18.042.37.4+18.042.37.4+18.04.12.38+18.042.39.2+18.042.40+18.042.42.1+18.042.45.1+18.042.45.1+18.04.22.46.1+18.042.47.1+18.042.48+18.042.48.3+18.042.49.2+18.042.51.1+18.042.54.2+18.04ubuntu12.54.3+18.042.54.3+18.04.2ubuntu0.12.54.3+18.04.2ubuntu0.22.55.5+18.042.57.5+18.042.57.5+18.04ubuntu0.12.58+18.042.58+18.04.12.61.4ubuntu0.18.04.1+esm12.61.4ubuntu0.18.04.1+esm22.61.4ubuntu0.18.04.1+esm4
 None known
golang-go.crypto
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:0.0~git20170629.0.5ef0053-1ubuntu11:0.0~git20170629.0.5ef0053-1ubuntu21:0.0~git20170629.0.5ef0053-21:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm11:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm21:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3
 None known
google-guest-agent
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~18.04.020210414.00-0ubuntu1~18.04.020210629.00-0ubuntu1~18.04.120220622.00-0ubuntu2~18.04.020220622.00-0ubuntu2~18.04.1
Show 8 moreShow less
20230426.00-0ubuntu2~18.04.020231004.02-0ubuntu1~18.04.220231004.02-0ubuntu1~18.04.320240716.00-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.0+esm120241011.01-0ubuntu1~18.04.0+esm220241011.01-0ubuntu1~18.04.0+esm3
 None known
google-guest-agent
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~20.04.020210414.00-0ubuntu1~20.04.020210629.00-0ubuntu1~20.04.020220622.00-0ubuntu2~20.04.020220622.00-0ubuntu2~20.04.2
Show 11 moreShow less
20230426.00-0ubuntu2~20.04.020231004.02-0ubuntu1~20.04.120231004.02-0ubuntu1~20.04.220231004.02-0ubuntu1~20.04.320231004.02-0ubuntu1~20.04.420240716.00-0ubuntu1~20.04.020241011.01-0ubuntu1~20.04.120250116.00-0ubuntu1~20.04.020250116.00-0ubuntu1~20.04.0+esm120250116.00-0ubuntu1~20.04.0+esm220250116.00-0ubuntu1~20.04.0+esm3
 None known
snapd
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.41+19.10.12.42.1+20.042.43.3+git1.8109f82.44~pre1+20.042.44+20.04
Show 30 moreShow less
2.44.2+20.042.44.3+20.042.45.1+20.042.45.1+20.04.22.46.1+20.042.47.1+20.042.48+20.042.48.3+20.042.49.2+20.042.51.1+20.04ubuntu22.54.2+20.04ubuntu22.54.3+20.042.54.3+20.04.12.54.3+20.04.1ubuntu0.12.54.3+20.04.1ubuntu0.22.54.3+20.04.1ubuntu0.32.55.5+20.042.57.5+20.042.57.5+20.04ubuntu0.12.58+20.042.58+20.04.12.61.3+20.042.62+20.042.63+20.042.63+20.04ubuntu0.12.65.3+20.042.66.1+20.042.67.1+20.042.67.1+20.04ubuntu1~esm12.67.1+20.04ubuntu1~esm3
 None known
golang-go.crypto
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:0.0~git20190701.4def268-21:0.0~git20200221.2aa609c-11:0.0~git20200221.2aa609c-1ubuntu0.1~esm11:0.0~git20200221.2aa609c-1ubuntu0.1~esm21:0.0~git20200221.2aa609c-1ubuntu0.1~esm3
 None known
google-guest-agent
Ubuntu:22.04:LTS
 All versions, plus listed versions
20210629.00-0ubuntu120210629.00-0ubuntu220220104.00-0ubuntu120220104.00-0ubuntu220220622.00-0ubuntu2~22.04.0
Show 14 moreShow less
20220622.00-0ubuntu2~22.04.120230426.00-0ubuntu2~22.04.020231004.02-0ubuntu1~22.04.120231004.02-0ubuntu1~22.04.220231004.02-0ubuntu1~22.04.320231004.02-0ubuntu1~22.04.420231004.02-0ubuntu1~22.04.520240716.00-0ubuntu1~22.04.020241011.01-0ubuntu1~22.04.020250116.00-0ubuntu1~22.04.020250116.00-0ubuntu1~22.04.120250116.00-0ubuntu1~22.04.220250116.00-0ubuntu1~22.04.320250116.00-0ubuntu1~22.04.4
 None known
snapd
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.53+21.10ubuntu12.54.2+22.04ubuntu12.54.2+22.04ubuntu22.54.2+22.04ubuntu32.54.3+git19.g868fc21+22.04
Show 31 moreShow less
2.54.3+git26.g360067e+22.042.55.2+22.042.55.2+22.04.12.55.3+22.042.55.3+22.04ubuntu12.55.5+22.042.56.2+22.04ubuntu12.57.4+22.042.57.5+22.042.57.5+22.04ubuntu0.12.58+22.042.58+22.04.12.61.3+22.042.62+22.042.63+22.042.63+22.04ubuntu0.12.65.3+22.042.66.1+22.042.67.1+22.042.68.5+ubuntu22.04.12.71+ubuntu22.042.72+ubuntu22.042.73+ubuntu22.042.73+ubuntu22.04.12.74.1+ubuntu22.04.42.75.2+ubuntu22.042.76+ubuntu22.042.76+ubuntu22.04.12.76.3+ubuntu22.042.76.3+ubuntu22.04.12.77.1+ubuntu22.04.1
 None known
golang-go.crypto
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1:0.0~git20201221.eec23a3-11:0.0~git20211202.5770296-11:0.0~git20211202.5770296-1ubuntu0.1~esm11:0.0~git20211202.5770296-1ubuntu0.1~esm21:0.0~git20211202.5770296-1ubuntu0.1~esm3
 None known
google-guest-agent
Ubuntu:24.04:LTS
 All versions, plus listed versions
20230426.00-0ubuntu320231004.02-0ubuntu120231004.02-0ubuntu320240213.00-0ubuntu120240213.00-0ubuntu2
Show 11 moreShow less
20240213.00-0ubuntu320240213.00-0ubuntu3.120240213.00-0ubuntu3.220240716.00-0ubuntu1~24.04.020240716.00-0ubuntu1~24.04.120241011.01-0ubuntu1~24.04.020250116.00-0ubuntu1~24.04.020250116.00-0ubuntu1~24.04.120250116.00-0ubuntu1~24.04.220250116.00-0ubuntu1~24.04.320250116.00-0ubuntu1~24.04.4
 None known
snapd
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.60.4+23.102.61.3+24.042.62+24.04build12.63+24.042.63+24.04ubuntu0.1
Show 16 moreShow less
2.63.1+24.042.65.3+24.042.66.1+24.042.67.1+24.042.68.5+ubuntu24.04.12.71+ubuntu24.042.72+ubuntu24.042.73+ubuntu24.042.73+ubuntu24.04.12.73+ubuntu24.04.22.74.1+ubuntu24.04.42.75.2+ubuntu24.042.76+ubuntu24.042.76+ubuntu24.04.12.76.3+ubuntu24.042.77.1+ubuntu24.04
 None known
golang-go.crypto
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
1:0.4.0-11:0.17.0-11:0.18.0-11:0.19.0-11:0.19.0-1ubuntu0.1~esm11:0.19.0-1ubuntu0.1~esm21:0.19.0-1ubuntu0.1~esm3
 None known
golang-go.crypto
Ubuntu:25.10
 All versions, plus listed versions
1:0.25.0-11:0.25.0-1ubuntu0.1
 None known
google-guest-agent
Ubuntu:25.10
 All versions, plus listed versions
20250116.00-0ubuntu220250506.01-0ubuntu120250506.01-0ubuntu1.120250506.01-0ubuntu1.2
 None known
snapd
Ubuntu:25.10
 All versions, plus listed versions
2.67.1+25.042.68.5+ubuntu25.10.22.71+ubuntu25.102.71.1+ubuntu25.10.12.72+ubuntu25.10.2
Show 4 moreShow less
2.73+ubuntu25.102.73+ubuntu25.10.12.74.1+ubuntu25.10.42.75.2+ubuntu25.10
 None known
golang-go.crypto
Ubuntu:26.10
 All versions, plus listed versions
1:0.47.0-11:0.55.0-1
 None known
google-guest-agent
Ubuntu:26.10
 All versions, plus listed versions
20250506.01-0ubuntu220250506.01-0ubuntu320260819.00+~20260819.00-0ubuntu1
 None known
snapd
Ubuntu:26.10
 All versions, plus listed versions
2.74.1+ubuntu26.04.42.76+ubuntu26.10.12.76+ubuntu26.10.22.76.3+ubuntu26.102.77.1+ubuntu26.10.1
 None known
google-guest-agent
Ubuntu:26.04:LTS
 All versions, plus listed versions
20250506.01-0ubuntu120250506.01-0ubuntu220250506.01-0ubuntu2.1
 None known
snapd
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.71.1+ubuntu25.10.12.72+ubuntu26.04.12.73+ubuntu26.04.12.74+ubuntu26.042.74.1+ubuntu26.04
Show 7 moreShow less
2.74.1+ubuntu26.04.32.74.1+ubuntu26.04.42.75.2+ubuntu26.04.22.76+ubuntu26.04.22.76+ubuntu26.04.32.76.3+ubuntu26.042.77.1+ubuntu26.04.2
 None known
golang-go.crypto
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
1:0.25.0-11:0.45.0-11:0.47.0-11:0.47.0-1ubuntu0.1~esm1
 None known
apptainer
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 1.4.5-5.1
1.4.5-5.1
mcphost
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 0.34.0-5.1
0.34.0-5.1
rclone
openSUSE:Tumbleweed
From an advisory covering 23 CVEs
 before 1.74.2-1.1
1.74.2-1.1
git-bug
openSUSE:Tumbleweed
From an advisory covering 15 CVEs
 before 0.10.1-5.1
0.10.1-5.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 49 CVEs
 before 0.7.0.4.git185.a5708584-2.1
0.7.0.4.git185.a5708584-2.1
kit
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 0.107.0-1.1
0.107.0-1.1
percona-toolkit
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 3.7.1.4-1.1
3.7.1.4-1.1
trivy
openSUSE:Leap 16.0
From an advisory covering 21 CVEs
 before 0.71.0-160000.1.1
0.71.0-160000.1.1
google-guest-agent
openSUSE:Leap 16.0
From an advisory covering 15 CVEs
 before 20260529.00-160000.1.1
20260529.00-160000.1.1
amazon-ssm-agent
openSUSE:Leap 16.0
From an advisory covering 21 CVEs
 before 3.3.4624.0-160000.1.1
3.3.4624.0-160000.1.1
distribution
openSUSE:Leap 16.0
From an advisory covering 16 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
mcphost
openSUSE:Leap 16.0
From an advisory covering 20 CVEs
 before 0.34.0-160000.2.1
0.34.0-160000.2.1
google-osconfig-agent
openSUSE:Leap 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
podman
openSUSE:Leap 16.0
From an advisory covering 20 CVEs
 before 5.4.2-160000.5.1
5.4.2-160000.5.1
alloy
openSUSE:Leap 16.0
From an advisory covering 26 CVEs
 before 1.17.0-160000.1.1
1.17.0-160000.1.1
cosign
openSUSE:Leap 16.0
From an advisory covering 19 CVEs
 before 3.1.1-160000.1.1
3.1.1-160000.1.1
rclone
openSUSE:Leap 16.0
From an advisory covering 37 CVEs
 before 1.74.4-bp160.1.1
1.74.4-bp160.1.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
 before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1
kubevirt1.8
openSUSE:Leap 16.0
From an advisory covering 25 CVEs
 before 1.8.4-160000.1.1
1.8.4-160000.1.1
glab
openSUSE:Leap 16.0
From an advisory covering 24 CVEs
 before 1.114.0-bp160.1.1
1.114.0-bp160.1.1
containerized-data-importer1.65
openSUSE:Leap 16.0
From an advisory covering 39 CVEs
 before 1.65.0-160000.3.1
1.65.0-160000.3.1
cloudflared
openSUSE:Leap 16.0
From an advisory covering 17 CVEs
 before 2026.9.1-bp160.1.1
2026.9.1-bp160.1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-39835 is a medium vulnerability (CVSS 5.3) in Golang Crypto, published May 22, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 43rd percentile. Fixed in golang.org/x/crypto 0.52.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 252 package rows, 32 versions and 2,149 references. The JSON record has them. Also not on the record: 1 alias. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 51 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open