CVE-2020-8945
GPGME Go wrapper contains Use After Free
CVE-2020-8945 is a high vulnerability (CVSS 7.5) in Gpgme Project Gpgme, published February 12, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.07%, the 92nd percentile. Fixed in github.com/proglottis/gpgme 0.1.1.
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
CVE-2020-8945- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
CVE-2020-8945- Updated
- 2026-11-02
EUVDEUVD-2021-1136 No score
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
EUVD-2021-1136- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m6wg-2mwg-4rfq
7.5
GPGME Go wrapper contains Use After Free
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
GHSA-m6wg-2mwg-4rfq- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
7.5
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
CVE-2020-8945- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-8945
7.5
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
DEBIAN-CVE-2020-8945- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 18 moreShow less
OSVGHSA-m6wg-2mwg-4rfq
7.5
GPGME Go wrapper contains Use After Free
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
GHSA-m6wg-2mwg-4rfq- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVRHBA-2020:1255
7.5
Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.10 packages update
- Record
RHBA-2020:1255- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:0679
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.3.5 skopeo security update
- Record
RHSA-2020:0679- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:0689
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.2.22 skopeo security update
- Record
RHSA-2020:0689- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:0697
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.1.38 skopeo security update
- Record
RHSA-2020:0697- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:0928
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.3.8 openshift-clients security update
- Record
RHSA-2020:0928- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1230
7.5
Red Hat Security Advisory: skopeo security and bug fix update
- Record
RHSA-2020:1230- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1231
7.5
Red Hat Security Advisory: buildah security and bug fix update
- Record
RHSA-2020:1231- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1234
7.5
Red Hat Security Advisory: docker security and bug fix update
- Record
RHSA-2020:1234- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1396
8.8
Red Hat Security Advisory: OpenShift Container Platform 4.3.12 podman security update
- Record
RHSA-2020:1396- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1937
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.4.3 cri-o security update
- Record
RHSA-2020:1937- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2027
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.2.33 openshift-clients security update
- Record
RHSA-2020:2027- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2117
8.8
Red Hat Security Advisory: podman security update
- Record
RHSA-2020:2117- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2413
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.5 package security update
- Record
RHSA-2020:2413- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2927
7.5
Red Hat Security Advisory: OpenShift Container Platform 4.4.13 machine-config-daemon and openshift security update
- Record
RHSA-2020:2927- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2992
7.5
Red Hat Security Advisory: OpenShift Container Platform 3.11 security update
- Record
RHSA-2020:2992- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-8945
7.5
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
- Record
UBUNTU-CVE-2020-8945- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGO-2021-0096 No score
Memory corruption or code execution in github.com/proglottis/gpgme
Due to improper setting of finalizers, memory passed to C may be freed before it is used, leading to crashes due to memory corruption or possible code execution.
- Record
GO-2021-0096- Updated
- 2026-11-02
Affected products
- gpgme project gpgme
- fedoraproject fedora
- redhat enterprise linux for ibm z systems
- redhat enterprise linux for power little endian
- redhat enterprise linux server
- redhat enterprise linux workstation
- redhat openshift container platform
- redhat openshift container platform for ibm z
- redhat openshift container platform for linuxone
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/proglottis/gpgmeGo |
before 0.1.1 | 0.1.1 |
golang-github-proglottis-gpgmeDebian:12 |
before 0.1.1-1 | 0.1.1-1 |
golang-github-proglottis-gpgmeDebian:13 |
before 0.1.1-1 | 0.1.1-1 |
golang-github-proglottis-gpgmeDebian:14 |
before 0.1.1-1 | 0.1.1-1 |
cri-oRed Hat:openshift:4.3::el7 |
before 0:1.16.4-1.dev.rhaos4.3.git9238eee.el7 | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el7 |
cri-o-debuginfoRed Hat:openshift:4.3::el7 |
before 0:1.16.4-1.dev.rhaos4.3.git9238eee.el7 | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el7 |
cri-oRed Hat:openshift:4.3::el8 |
before 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 |
cri-o-debuginfoRed Hat:openshift:4.3::el8 |
before 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 |
cri-o-debugsourceRed Hat:openshift:4.3::el8 |
before 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 | 0:1.16.4-1.dev.rhaos4.3.git9238eee.el8 |
containers-commonRed Hat:openshift:4.3::el8 |
before 1:0.1.40-4.rhaos.el8 | 1:0.1.40-4.rhaos.el8 |
Show 79 moreShow less
| Package | Affected | Fixed |
|---|---|---|
skopeoRed Hat:openshift:4.3::el8 |
before 1:0.1.40-4.rhaos.el8 | 1:0.1.40-4.rhaos.el8 |
skopeo-debuginfoRed Hat:openshift:4.3::el8 |
before 1:0.1.40-4.rhaos.el8 | 1:0.1.40-4.rhaos.el8 |
skopeo-debugsourceRed Hat:openshift:4.3::el8 |
before 1:0.1.40-4.rhaos.el8 | 1:0.1.40-4.rhaos.el8 |
skopeo-testsRed Hat:openshift:4.3::el8 |
before 1:0.1.40-4.rhaos.el8 | 1:0.1.40-4.rhaos.el8 |
containers-commonRed Hat:openshift:4.2::el8 |
before 1:0.1.32-7.git1715c90.rhaos4.2.el8 | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
skopeoRed Hat:openshift:4.2::el8 |
before 1:0.1.32-7.git1715c90.rhaos4.2.el8 | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
skopeo-debuginfoRed Hat:openshift:4.2::el8 |
before 1:0.1.32-7.git1715c90.rhaos4.2.el8 | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
skopeo-debugsourceRed Hat:openshift:4.2::el8 |
before 1:0.1.32-7.git1715c90.rhaos4.2.el8 | 1:0.1.32-7.git1715c90.rhaos4.2.el8 |
containers-commonRed Hat:openshift:4.1::el8 |
before 1:0.1.32-6.git1715c90.el8_0 | 1:0.1.32-6.git1715c90.el8_0 |
skopeoRed Hat:openshift:4.1::el8 |
before 1:0.1.32-6.git1715c90.el8_0 | 1:0.1.32-6.git1715c90.el8_0 |
skopeo-debuginfoRed Hat:openshift:4.1::el8 |
before 1:0.1.32-6.git1715c90.el8_0 | 1:0.1.32-6.git1715c90.el8_0 |
skopeo-debugsourceRed Hat:openshift:4.1::el8 |
before 1:0.1.32-6.git1715c90.el8_0 | 1:0.1.32-6.git1715c90.el8_0 |
openshift-clientsRed Hat:openshift:4.3::el7 |
before 0:4.3.7-202003130552.git.0.6027a27.el7 | 0:4.3.7-202003130552.git.0.6027a27.el7 |
openshift-clients-redistributableRed Hat:openshift:4.3::el7 |
before 0:4.3.7-202003130552.git.0.6027a27.el7 | 0:4.3.7-202003130552.git.0.6027a27.el7 |
openshift-clientsRed Hat:openshift:4.3::el8 |
before 0:4.3.7-202003130552.git.0.6027a27.el8 | 0:4.3.7-202003130552.git.0.6027a27.el8 |
openshift-clients-redistributableRed Hat:openshift:4.3::el8 |
before 0:4.3.7-202003130552.git.0.6027a27.el8 | 0:4.3.7-202003130552.git.0.6027a27.el8 |
containers-commonRed Hat:rhel_extras_other:7 |
before 1:0.1.40-7.el7_8 | 1:0.1.40-7.el7_8 |
skopeoRed Hat:rhel_extras_other:7 |
before 1:0.1.40-7.el7_8 | 1:0.1.40-7.el7_8 |
skopeo-debuginfoRed Hat:rhel_extras_other:7 |
before 1:0.1.40-7.el7_8 | 1:0.1.40-7.el7_8 |
buildahRed Hat:rhel_extras_other:7 |
before 0:1.11.6-8.el7_8 | 0:1.11.6-8.el7_8 |
buildah-debuginfoRed Hat:rhel_extras_other:7 |
before 0:1.11.6-8.el7_8 | 0:1.11.6-8.el7_8 |
dockerRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-clientRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-commonRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-debuginfoRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-logrotateRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-lvm-pluginRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-novolume-pluginRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-rhel-push-pluginRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
docker-v1.10-migratorRed Hat:rhel_extras_other:7 |
before 2:1.13.1-161.git64e9980.el7_8 | 2:1.13.1-161.git64e9980.el7_8 |
podmanRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
podman-debuginfoRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
podman-debugsourceRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
podman-dockerRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
podman-manpagesRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
podman-remoteRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
podman-remote-debuginfoRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
podman-testsRed Hat:openshift:4.3::el8 |
before 0:1.6.4-10.rhaos4.3.el8 | 0:1.6.4-10.rhaos4.3.el8 |
cri-oRed Hat:openshift:4.4::el7 |
before 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7 | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7 |
cri-o-debuginfoRed Hat:openshift:4.4::el7 |
before 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7 | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7 |
cri-oRed Hat:openshift:4.4::el8 |
before 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 |
cri-o-debuginfoRed Hat:openshift:4.4::el8 |
before 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 |
cri-o-debugsourceRed Hat:openshift:4.4::el8 |
before 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 | 0:1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 |
openshift-clientsRed Hat:openshift:4.2::el8 |
before 0:4.2.32-202005020632.git.1.1b0fab9.el8 | 0:4.2.32-202005020632.git.1.1b0fab9.el8 |
openshift-clients-redistributableRed Hat:openshift:4.2::el8 |
before 0:4.2.32-202005020632.git.1.1b0fab9.el8 | 0:4.2.32-202005020632.git.1.1b0fab9.el8 |
podmanRed Hat:rhel_extras_other:7 |
before 0:1.6.4-18.el7_8 | 0:1.6.4-18.el7_8 |
podman-debuginfoRed Hat:rhel_extras_other:7 |
before 0:1.6.4-18.el7_8 | 0:1.6.4-18.el7_8 |
podman-dockerRed Hat:rhel_extras_other:7 |
before 0:1.6.4-18.el7_8 | 0:1.6.4-18.el7_8 |
openshiftRed Hat:openshift:4.5::el7 |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
openshift-hyperkubeRed Hat:openshift:4.5::el7 |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
openshiftRed Hat:openshift:4.5::el8 |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |
openshift-hyperkubeRed Hat:openshift:4.5::el8 |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |
machine-config-daemonRed Hat:openshift:4.5::el8 |
before 0:4.5.0-202007012112.p0.git.2527.d12c3da.el8 | 0:4.5.0-202007012112.p0.git.2527.d12c3da.el8 |
openshiftRed Hat:openshift:4.4::el7 |
before 0:4.4.0-202007090832.p0.git.0.bc32fb1.el7 | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el7 |
openshift-hyperkubeRed Hat:openshift:4.4::el7 |
before 0:4.4.0-202007090832.p0.git.0.bc32fb1.el7 | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el7 |
openshiftRed Hat:openshift:4.4::el8 |
before 0:4.4.0-202007090832.p0.git.0.bc32fb1.el8 | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el8 |
openshift-hyperkubeRed Hat:openshift:4.4::el8 |
before 0:4.4.0-202007090832.p0.git.0.bc32fb1.el8 | 0:4.4.0-202007090832.p0.git.0.bc32fb1.el8 |
machine-config-daemonRed Hat:openshift:4.4::el8 |
before 0:4.4.0-202007092124.p0.git.2349.08d34d1.el8 | 0:4.4.0-202007092124.p0.git.2349.08d34d1.el8 |
cri-oRed Hat:openshift:3.11::el7 |
before 0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7 | 0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7 |
cri-o-debuginfoRed Hat:openshift:3.11::el7 |
before 0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7 | 0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7 |
atomic-openshift-web-consoleRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.1.cc96c2d.el7 | 0:3.11.248-1.git.1.cc96c2d.el7 |
atomic-openshiftRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-clientsRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-excluderRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-hyperkubeRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-hypershiftRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-masterRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-nodeRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-podRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
atomic-openshift-testsRed Hat:openshift:3.11::el7 |
before 0:3.11.248-1.git.0.92ee8ac.el7 | 0:3.11.248-1.git.0.92ee8ac.el7 |
singularity-containerUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.3.1-22.3.2-12.4.1-12.4.2-22.4.2-32.4.2-42.4.2-4ubuntu0.1~esm1 |
None known |
golang-github-proglottis-gpgmeUbuntu:20.04:LTS |
All versions, plus listed versions 0.0~git20181127.3b0be09-20.0~git20190226.8e0937a-10.1.0-1 |
None known |
singularity-containerUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 4.1.1+ds2-14.1.1+ds2-1build14.1.1+ds2-1ubuntu0.14.1.1+ds2-1ubuntu0.24.1.1+ds2-1ubuntu0.2+esm14.1.1+ds2-1ubuntu0.34.1.1+ds2-1ubuntu0.3+esm14.1.1+ds2-1ubuntu0.3+esm2 |
None known |
singularity-containerUbuntu:25.10 |
All versions, plus listed versions 4.1.5+ds4-1 |
None known |
singularity-containerUbuntu:26.04:LTS |
All versions, plus listed versions 4.1.5+ds4-1 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/proglottis/gpgme/pull/23
bugzilla.redhat.com/show_bug.cgi?id=1795838
github.com/proglottis/gpgme/compare/v0.1.0...v0.1.1
github.com/containers/image/commit/4c7a23f82ef09127b0ff28366d1cf31316dd6cc1
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6P6SSNKN4H6GSEVROHBDXA64PX7EOED
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDBT77KV3U7BESJX3P4S4MPVDGRTAQA2
Show 104 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXV7NZELYWRRCXATXU3FYD3G3WJT3WYM
access.redhat.com/errata/RHSA-2020:0679
access.redhat.com/errata/RHSA-2020:0689
access.redhat.com/errata/RHSA-2020:0697
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX
nvd.nist.gov/vuln/detail/CVE-2020-8945
github.com/proglottis/gpgme/commit/92153bcb59bd2f511e502262c46c7bd660e21733
lists.fedoraproject.org/archives/list/[email protected]/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX
lists.fedoraproject.org/archives/list/[email protected]/message/H6P6SSNKN4H6GSEVROHBDXA64PX7EOED
lists.fedoraproject.org/archives/list/[email protected]/message/KDBT77KV3U7BESJX3P4S4MPVDGRTAQA2
lists.fedoraproject.org/archives/list/[email protected]/message/WXV7NZELYWRRCXATXU3FYD3G3WJT3WYM
pkg.go.dev/vuln/GO-2021-0096
github.com/advisories/GHSA-m6wg-2mwg-4rfq
security-tracker.debian.org/tracker/CVE-2020-8945
github.com/proglottis/gpgme
access.redhat.com/errata/RHBA-2020:1255
bugzilla.redhat.com/show_bug.cgi?id=1816992
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_1255.json
access.redhat.com/security/cve/CVE-2020-8945
cve.org/CVERecord?id=CVE-2020-8945
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0679.json
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0689.json
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0697.json
access.redhat.com/errata/RHSA-2020:0928
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0928.json
access.redhat.com/errata/RHSA-2020:1230
bugzilla.redhat.com/show_bug.cgi?id=1752775
bugzilla.redhat.com/show_bug.cgi?id=1754905
bugzilla.redhat.com/show_bug.cgi?id=1812505
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1230.json
access.redhat.com/errata/RHSA-2020:1231
bugzilla.redhat.com/show_bug.cgi?id=1765469
bugzilla.redhat.com/show_bug.cgi?id=1791286
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1231.json
access.redhat.com/errata/RHSA-2020:1234
bugzilla.redhat.com/show_bug.cgi?id=1757214
bugzilla.redhat.com/show_bug.cgi?id=1784228
bugzilla.redhat.com/show_bug.cgi?id=1792796
bugzilla.redhat.com/show_bug.cgi?id=1795376
bugzilla.redhat.com/show_bug.cgi?id=1796451
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1234.json
access.redhat.com/security/cve/CVE-2019-16884
cve.org/CVERecord?id=CVE-2019-16884
nvd.nist.gov/vuln/detail/CVE-2019-16884
access.redhat.com/security/cve/CVE-2020-1702
cve.org/CVERecord?id=CVE-2020-1702
nvd.nist.gov/vuln/detail/CVE-2020-1702
access.redhat.com/errata/RHSA-2020:1396
bugzilla.redhat.com/show_bug.cgi?id=1817651
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1396.json
access.redhat.com/security/cve/CVE-2020-10696
cve.org/CVERecord?id=CVE-2020-10696
nvd.nist.gov/vuln/detail/CVE-2020-10696
access.redhat.com/errata/RHSA-2020:1937
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1937.json
access.redhat.com/errata/RHSA-2020:2027
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2027.json
access.redhat.com/errata/RHSA-2020:2117
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2117.json
access.redhat.com/errata/RHSA-2020:2413
bugzilla.redhat.com/show_bug.cgi?id=1819486
bugzilla.redhat.com/show_bug.cgi?id=1843358
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2413.json
access.redhat.com/security/cve/CVE-2019-11252
bugzilla.redhat.com/show_bug.cgi?id=1860158
cve.org/CVERecord?id=CVE-2019-11252
nvd.nist.gov/vuln/detail/CVE-2019-11252
access.redhat.com/security/cve/CVE-2019-11254
cve.org/CVERecord?id=CVE-2019-11254
nvd.nist.gov/vuln/detail/CVE-2019-11254
groups.google.com/forum
access.redhat.com/security/cve/CVE-2020-8558
cve.org/CVERecord?id=CVE-2020-8558
nvd.nist.gov/vuln/detail/CVE-2020-8558
groups.google.com/g/kubernetes-security-announce/c/B1VegbBDMTE
access.redhat.com/security/cve/CVE-2020-9283
bugzilla.redhat.com/show_bug.cgi?id=1804533
cve.org/CVERecord?id=CVE-2020-9283
nvd.nist.gov/vuln/detail/CVE-2020-9283
access.redhat.com/errata/RHSA-2020:2927
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2927.json
access.redhat.com/errata/RHSA-2020:2992
bugzilla.redhat.com/show_bug.cgi?id=1767665
bugzilla.redhat.com/show_bug.cgi?id=1772280
bugzilla.redhat.com/show_bug.cgi?id=1797909
bugzilla.redhat.com/show_bug.cgi?id=1813344
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2992.json
access.redhat.com/security/cve/CVE-2019-14891
cve.org/CVERecord?id=CVE-2019-14891
nvd.nist.gov/vuln/detail/CVE-2019-14891
capsule8.com/blog/oomypod-nothin-to-cri-o-bout
access.redhat.com/security/cve/CVE-2020-7598
cve.org/CVERecord?id=CVE-2020-7598
nvd.nist.gov/vuln/detail/CVE-2020-7598
snyk.io/vuln/SNYK-JS-MINIMIST-559764
access.redhat.com/security/cve/CVE-2020-8552
cve.org/CVERecord?id=CVE-2020-8552
nvd.nist.gov/vuln/detail/CVE-2020-8552
github.com/kubernetes/kubernetes/issues/89378
access.redhat.com/security/cve/CVE-2020-10715
cve.org/CVERecord?id=CVE-2020-10715
nvd.nist.gov/vuln/detail/CVE-2020-10715
ubuntu.com/security/CVE-2020-8945