CVE-2022-41715

golang-github-prometheus-prometheus: This update for golang-github-prometheus-prometheus fixes the following issues: - Require Go > 1.20 for building -...

CVE-2022-41715 is fixed in 68 products on 1 platform, first by DEBIAN-CVE-2022-41715, released October 14, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0173
77th percentile

This update for golang-github-prometheus-prometheus fixes the following issues: - Require Go > 1.20 for building - Bump go-retryablehttp to version 0.7.7 (CVE-2024-6104, bsc#1227038) - Migrate from `disabled` to `manual` service mode - Add0003-Bump-go-retryablehttp.patch - Update to 2.45.6 (jsc#PED-3577): * Security fixes in dependencies - Update to 2.45.5: * [BUGFIX] tsdb/agent: ensure that new series get written to WAL on rollback. * [BUGFIX] Remote write: Avoid a race condition when applying configuration. - Update to 2.45.4: * [BUGFIX] Remote read: Release querier resources before encoding the results. - Update to 2.45.3: * Security fixes in dependencies * [BUGFIX] TSDB: Remove double memory snapshot on shutdown. - Update to 2.45.2: * Security fixes in dependencies * [SECURITY] Updated otelhttp to version 0.46.1 (CVE-2023-45142, bsc#1228556) * [BUGFIX] TSDB: Fix PostingsForMatchers race with creating new series. - Update to 2.45.1: * [ENHANCEMENT] Hetzner SD: Support larger ID's that will be used by Hetzner in September. * [BUGFIX] Linode SD: Cast InstanceSpec values to int64 to avoid overflows on 386 architecture. * [BUGFIX] TSDB: Handle TOC parsing failures. - update to 2.45.0 (jsc#PED-5406): * [FEATURE] API: New limit parameter to limit the number of items returned by `/api/v1/status/tsdb` endpoint. * [FEATURE] Config: Add limits to global config. * [FEATURE] Consul SD: Added support for `path_prefix`. * [FEATURE] Native histograms: Add option to scrape both classic and native histograms. * [FEATURE] Native histograms: Added support for two more arithmetic operators `avg_over_time` and `sum_over_time`. * [FEATURE] Promtool: When providing the block id, only one block will be loaded and analyzed. * [FEATURE] Remote-write: New Azure ad configuration to support remote writing directly to Azure Monitor workspace. * [FEATURE] TSDB: Samples per chunk are now configurable with flag `storage.tsdb.samples-per-chunk`. By default set to its former value 120. * [ENHANCEMENT] Native histograms: bucket size can now be limited to avoid scrape fails. * [ENHANCEMENT] TSDB: Dropped series are now deleted from the WAL sooner. * [BUGFIX] Native histograms: ChunkSeries iterator now checks if a new sample can be appended to the open chunk. * [BUGFIX] Native histograms: Fix Histogram Appender `Appendable()` segfault. * [BUGFIX] Native histograms: Fix setting reset header to gauge histograms in seriesToChunkEncoder. * [BUGFIX] TSDB: Tombstone intervals are not modified after Get() call. * [BUGFIX] TSDB: Use path/filepath to set the WAL directory. - update to 2.44.0: * [FEATURE] Remote-read: Handle native histograms. * [FEATURE] Promtool: Health and readiness check of prometheus server in CLI. * [FEATURE] PromQL: Add `query_samples_total` metric, the total number of samples loaded by all queries. * [ENHANCEMENT] Storage: Optimise buffer used to iterate through samples. * [ENHANCEMENT] Scrape: Reduce memory allocations on target labels. * [ENHANCEMENT] PromQL: Use faster heap method for `topk()` / `bottomk()`. * [ENHANCEMENT] Rules API: Allow filtering by rule name. * [ENHANCEMENT] Native Histograms: Various fixes and improvements. * [ENHANCEMENT] UI: Search of scraping pools is now case-insensitive. * [ENHANCEMENT] TSDB: Add an affirmative log message for successful WAL repair. * [BUGFIX] TSDB: Block compaction failed when shutting down. * [BUGFIX] TSDB: Out-of-order chunks could be ignored if the write-behind log was deleted. - rebase patch 0001-Do-not-force-the-pure-Go-name-resolver.patch onto v2.44.0 - update to 2.43.1 * [BUGFIX] Labels: Set() after Del() would be ignored, which broke some relabeling rules. - update to 2.43.0: * [FEATURE] Promtool: Add HTTP client configuration to query commands. * [FEATURE] Scrape: Add `include_scrape_configs` to include scrape configs from different files. * [FEATURE] HTTP client: Add `no_proxy` to exclude URLs from proxied requests. * [FEATURE] HTTP client: Add `proxy_from_enviroment` to read proxies from env variables. * [ENHANCEMENT] API: Add support for setting lookback delta per query via the API. * [ENHANCEMENT] API: Change HTTP status code from 503/422 to 499 if a request is canceled. * [ENHANCEMENT] Scrape: Allow exemplars for all metric types. * [ENHANCEMENT] TSDB: Add metrics for head chunks and WAL folders size. * [ENHANCEMENT] TSDB: Automatically remove incorrect snapshot with index that is ahead of WAL. * [ENHANCEMENT] TSDB: Improve Prometheus parser error outputs to be more comprehensible. * [ENHANCEMENT] UI: Scope `group by` labels to metric in autocompletion. * [BUGFIX] Scrape: Fix `prometheus_target_scrape_pool_target_limit` metric not set before reloading. * [BUGFIX] TSDB: Correctly update `prometheus_tsdb_head_chunks_removed_total` and `prometheus_tsdb_head_chunks` metrics when reading WAL. * [BUGFIX] TSDB: Use the correct unit (seconds) when recording out-of-order append deltas in the `prometheus_tsdb_sample_ooo_delta` metric. - update to 2.42.0: This release comes with a bunch of feature coverage for native histograms and breaking changes. If you are trying native histograms already, we recommend you remove the `wal` directory when upgrading. Because the old WAL record for native histograms is not backward compatible in v2.42.0, this will lead to some data loss for the latest data. Additionally, if you scrape 'float histograms' or use recording rules on native histograms in v2.42.0 (which writes float histograms), it is a one-way street since older versions do not support float histograms. * [CHANGE] **breaking** TSDB: Changed WAL record format for the experimental native histograms. * [FEATURE] Add 'keep_firing_for' field to alerting rules. * [FEATURE] Promtool: Add support of selecting timeseries for TSDB dump. * [ENHANCEMENT] Agent: Native histogram support. * [ENHANCEMENT] Rules: Support native histograms in recording rules. * [ENHANCEMENT] SD: Add container ID as a meta label for pod targets for Kubernetes. * [ENHANCEMENT] SD: Add VM size label to azure service discovery. * [ENHANCEMENT] Support native histograms in federation. * [ENHANCEMENT] TSDB: Add gauge histogram support. * [ENHANCEMENT] TSDB/Scrape: Support FloatHistogram that represents buckets as float64 values. * [ENHANCEMENT] UI: Show individual scrape pools on /targets page. - update to 2.41.0: * [FEATURE] Relabeling: Add keepequal and dropequal relabel actions. * [FEATURE] Add support for HTTP proxy headers. * [ENHANCEMENT] Reload private certificates when changed on disk. * [ENHANCEMENT] Add max_version to specify maximum TLS version in tls_config. * [ENHANCEMENT] Add goos and goarch labels to prometheus_build_info. * [ENHANCEMENT] SD: Add proxy support for EC2 and LightSail SDs. * [ENHANCEMENT] SD: Add new metric prometheus_sd_file_watcher_errors_total. * [ENHANCEMENT] Remote Read: Use a pool to speed up marshalling. * [ENHANCEMENT] TSDB: Improve handling of tombstoned chunks in iterators. * [ENHANCEMENT] TSDB: Optimize postings offset table reading. * [BUGFIX] Scrape: Validate the metric name, label names, and label values after relabeling. * [BUGFIX] Remote Write receiver and rule manager: Fix error handling. - update to 2.40.7: * [BUGFIX] TSDB: Fix queries involving negative buckets of native histograms. - update to 2.40.5: * [BUGFIX] TSDB: Fix queries involving native histograms due to improper reset of iterators. - update to 2.40.3: * [BUGFIX] TSDB: Fix compaction after a deletion is called. - update to 2.40.2: * [BUGFIX] UI: Fix black-on-black metric name color in dark mode. - update to 2.40.1: * [BUGFIX] TSDB: Fix alignment for atomic int64 for 32 bit architecture. * [BUGFIX] Scrape: Fix accept headers. - update to 2.40.0: * [FEATURE] Add experimental support for native histograms. Enable with the flag --enable-feature=native-histograms. * [FEATURE] SD: Add service discovery for OVHcloud. * [ENHANCEMENT] Kubernetes SD: Use protobuf encoding. * [ENHANCEMENT] TSDB: Use golang.org/x/exp/slices for improved sorting speed. * [ENHANCEMENT] Consul SD: Add enterprise admin partitions. Adds __meta_consul_partition label. Adds partition config in consul_sd_config. * [BUGFIX] API: Fix API error codes for /api/v1/labels and /api/v1/series. - update to 2.39.1: * [BUGFIX] Rules: Fix notifier relabel changing the labels on active alerts. - update to 2.39.0: * [FEATURE] experimental TSDB: Add support for ingesting out-of-order samples. This is configured via out_of_order_time_window field in the config file; check config file docs for more info. * [ENHANCEMENT] API: /-/healthy and /-/ready API calls now also respond to a HEAD request on top of existing GET support. * [ENHANCEMENT] PuppetDB SD: Add __meta_puppetdb_query label. * [ENHANCEMENT] AWS EC2 SD: Add __meta_ec2_region label. * [ENHANCEMENT] AWS Lightsail SD: Add __meta_lightsail_region label. * [ENHANCEMENT] Scrape: Optimise relabeling by re-using memory. * [ENHANCEMENT] TSDB: Improve WAL replay timings. * [ENHANCEMENT] TSDB: Optimise memory by not storing unnecessary data in the memory. * [ENHANCEMENT] TSDB: Allow overlapping blocks by default. --storage.tsdb.allow-overlapping-blocks now has no effect. * [ENHANCEMENT] UI: Click to copy label-value pair from query result to clipboard. * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a memory leak. * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus startup. * [BUGFIX] PromQL: Properly close file descriptor when logging unfinished queries. * [BUGFIX] Agent: Fix validation of flag options and prevent WAL from growing more than desired. - update to 2.38.0: * [FEATURE]: Web: Add a /api/v1/format_query HTTP API endpoint that allows pretty-formatting PromQL expressions. * [FEATURE]: UI: Add support for formatting PromQL expressions in the UI. * [FEATURE]: DNS SD: Support MX records for discovering targets. * [FEATURE]: Templates: Add toTime() template function that allows converting sample timestamps to Go time.Time values. * [ENHANCEMENT]: Kubernetes SD: Add __meta_kubernetes_service_port_number meta label indicating the service port number. * [ENHANCEMENT]: Kubernetes SD: Add __meta_kubernetes_pod_container_image meta label indicating the container image. * [ENHANCEMENT]: PromQL: When a query panics, also log the query itself alongside the panic message. * [ENHANCEMENT]: UI: Tweak colors in the dark theme to improve the contrast ratio. * [ENHANCEMENT]: Web: Speed up calls to /api/v1/rules by avoiding locks and using atomic types instead. * [ENHANCEMENT]: Scrape: Add a no-default-scrape-port feature flag, which omits or removes any default HTTP (:80) or HTTPS (:443) ports in the target's scrape address. * [BUGFIX]: TSDB: In the WAL watcher metrics, expose the type='exemplar' label instead of type='unknown' for exemplar records. * [BUGFIX]: TSDB: Fix race condition around allocating series IDs during chunk snapshot loading. - Remove npm_licenses.tar.bz2 during 'make clean' - Remove web-ui archives during 'make clean'. * [SECURITY] CVE-2022-41715: Limit memory used by parsing regexps (bsc#1204023). - Fix uncontrolled resource consumption by updating Go to version 1.20.1 (CVE-2022-41723, bsc#1208298)

Where it's fixed

ProductFixed inFixReleased
Linux
aardvark-dns · RHEL 8 2:1.10.0-1.module+el8.10.0+21209+52deeb51 RHSA-2024:3254 May 22, 2024
aardvark-dns · almalinux 8 2:1.10.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
aardvark-dns · ol 8 2:1.10.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
aardvark-dns · rocky 8 2:1.10.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
buildah · RHEL 8 2:1.33.7-1.module+el8.10.0+21590+d7d75709 RHSA-2024:3254 May 22, 2024
buildah · almalinux 8 2:1.33.7-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
buildah · ol 8 2:1.33.7-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
buildah · rocky 8 1:1.24.6-7.module+el8.9.0+1445+07728297 RLSA-2024:0121 May 7, 2025
buildah-tests · RHEL 8 2:1.33.7-1.module+el8.10.0+21590+d7d75709 RHSA-2024:3254 May 22, 2024
buildah-tests · almalinux 8 2:1.33.7-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
buildah-tests · ol 8 2:1.33.7-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
cockpit-composer · ol 8 0:45-1.0.1.el8_8 ELSA-2023-2780 May 24, 2023
cockpit-composer · ol 9 0:45-1.0.1.el9_2 ELSA-2023-2204 May 15, 2023
cockpit-podman · RHEL 8 0:84.1-1.module+el8.10.0+21373+0d273fdf RHSA-2024:3254 May 22, 2024
cockpit-podman · almalinux 8 84.1-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
cockpit-podman · ol 8 0:84.1-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
cockpit-podman · rocky 8 0:84.1-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
conmon · RHEL 8 3:2.1.10-1.module+el8.10.0+21077+98b84d8a RHSA-2024:3254 May 22, 2024
conmon · almalinux 8 3:2.1.10-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
conmon · ol 8 3:2.1.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
conmon · rocky 8 3:2.1.10-1.module+el8.10.0+1896+b18fa106 RLSA-2024:2988 May 7, 2025
container-selinux · RHEL 8 2:2.229.0-2.module+el8.10.0+21196+3f0abbca RHSA-2024:3254 May 22, 2024
container-selinux · almalinux 8 2:2.229.0-2.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
container-selinux · ol 8 2:2.229.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
container-selinux · rocky 8 2:2.229.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
containernetworking-plugins · RHEL 8 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 RHSA-2024:3254 May 22, 2024
containernetworking-plugins · almalinux 8 1:1.4.0-2.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
containernetworking-plugins · ol 8 1:1.4.0-2.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
containernetworking-plugins · rocky 8 1:1.4.0-2.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
containers-common · RHEL 8 2:1-81.module+el8.10.0+21340+c6c7475a RHSA-2024:3254 May 22, 2024
containers-common · almalinux 8 2:1-81.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
containers-common · ol 8 2:1-81.0.1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
containers-common · rocky 8 2:1-81.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
crit · RHEL 8 0:3.18-5.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
crit · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
crit · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
criu · RHEL 8 0:3.18-5.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
criu · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
criu · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
criu · rocky 8 0:3.15-3.module+el8.9.0+1445+07728297 RLSA-2024:0121 May 7, 2025
criu-devel · RHEL 8 0:3.18-5.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
criu-devel · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
criu-devel · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
criu-libs · RHEL 8 0:3.18-5.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
criu-libs · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
criu-libs · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
crun · RHEL 8 0:1.14.3-2.module+el8.10.0+21340+c6c7475a RHSA-2024:3254 May 22, 2024
crun · almalinux 8 1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
crun · ol 8 0:1.14.3-2.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
crun · rocky 8 0:1.14.3-2.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
delve · RHEL 8 0:1.8.3-1.module+el8.7.0+15126+0e0a42d9 RHSA-2023:0446 Jan 25, 2023
delve · almalinux 8 1.8.3-1.module_el8.7.0+3280+24dc9c5d ALSA-2023:0446 Jan 25, 2023
delve · ol 8 0:1.9.1-1.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
delve · rocky 8 0:1.8.3-1.module+el8.7.0+1073+99e3b3cd RLSA-2023:0446 Jan 25, 2023
fuse-overlayfs · RHEL 8 0:1.13-1.module+el8.10.0+20412+95ee28e2 RHSA-2024:3254 May 22, 2024
fuse-overlayfs · almalinux 8 1.13-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
fuse-overlayfs · ol 8 0:1.13-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
fuse-overlayfs · rocky 8 0:1.13-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
git-lfs · RHEL 8 0:3.2.0-2.el8 RHSA-2023:2866 May 16, 2023
git-lfs · RHEL 9 0:3.2.0-1.el9 RHSA-2023:2357 May 9, 2023
git-lfs · almalinux 8 3.2.0-2.el8 ALSA-2023:2866 May 16, 2023
git-lfs · almalinux 9 3.2.0-1.el9 ALSA-2023:2357 May 9, 2023
git-lfs · ol 8 0:3.2.0-2.el8 ELSA-2023-2866 May 24, 2023
git-lfs · ol 9 0:3.2.0-1.el9 ELSA-2023-2357 May 15, 2023
go-toolset · RHEL 8 0:1.18.9-1.module+el8.7.0+17845+708ebe87 RHSA-2023:0446 Jan 25, 2023
go-toolset · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
go-toolset · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
go-toolset · ol 8 0:1.19.4-1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
go-toolset · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
go-toolset · rocky 8 0:1.18.9-1.module+el8.7.0+1133+56289a01 RLSA-2023:0446 Jan 25, 2023
go-toolset · rocky 9 0:1.18.9-1.el9_1 RLSA-2023:0328 Jan 23, 2023
golang · RHEL 8 0:1.18.9-1.module+el8.7.0+17640+84246675 RHSA-2023:0446 Jan 25, 2023
golang · RHEL 9 0:1.18.9-1.el9_1 RHSA-2023:0328 Jan 23, 2023
golang · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
golang · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
golang · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang · ol 8 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
golang · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
golang · rocky 8 0:1.18.9-1.module+el8.7.0+1133+56289a01 RLSA-2023:0446 Jan 25, 2023
golang · rocky 9 0:1.18.9-1.el9_1 RLSA-2023:0328 Jan 23, 2023
golang-1.18 · Ubuntu 18.04.6 LTS (bionic) 1.18.1-1ubuntu1~18.04.4 golang-1.18 1.18.1-1ubuntu1~18.04.4 Apr 6, 2023
golang-1.18 · Ubuntu 20.04 LTS (focal) 1.18.1-1ubuntu1~20.04.2 golang-1.18 1.18.1-1ubuntu1~20.04.2 Apr 6, 2023
golang-1.18 · Ubuntu 22.04.1 LTS (jammy) 1.18.1-1ubuntu1.1 golang-1.18 1.18.1-1ubuntu1.1 Apr 6, 2023
golang-1.18-go · Ubuntu 18.04.6 LTS (bionic) 1.18.1-1ubuntu1~18.04.4 golang-1.18-go 1.18.1-1ubuntu1~18.04.4 Apr 6, 2023
golang-1.18-go · Ubuntu 20.04 LTS (focal) 1.18.1-1ubuntu1~20.04.2 golang-1.18-go 1.18.1-1ubuntu1~20.04.2 Apr 6, 2023
golang-1.18-go · Ubuntu 22.04.1 LTS (jammy) 1.18.1-1ubuntu1.1 golang-1.18-go 1.18.1-1ubuntu1.1 Apr 6, 2023
golang-1.18-src · Ubuntu 18.04.6 LTS (bionic) 1.18.1-1ubuntu1~18.04.4 golang-1.18-src 1.18.1-1ubuntu1~18.04.4 Apr 6, 2023
golang-1.18-src · Ubuntu 20.04 LTS (focal) 1.18.1-1ubuntu1~20.04.2 golang-1.18-src 1.18.1-1ubuntu1~20.04.2 Apr 6, 2023
golang-1.18-src · Ubuntu 22.04.1 LTS (jammy) 1.18.1-1ubuntu1.1 golang-1.18-src 1.18.1-1ubuntu1.1 Apr 6, 2023
golang-1.19 · Debian 12.15 (bookworm) 1.19.2-1 DEBIAN-CVE-2022-41715 Oct 14, 2022
golang-bin · RHEL 8 0:1.18.9-1.module+el8.7.0+17640+84246675 RHSA-2023:0446 Jan 25, 2023
golang-bin · RHEL 9 0:1.18.9-1.el9_1 RHSA-2023:0328 Jan 23, 2023
golang-bin · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
golang-bin · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
golang-bin · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang-bin · ol 8 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
golang-bin · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
golang-docs · RHEL 8 0:1.18.9-1.module+el8.7.0+17640+84246675 RHSA-2023:0446 Jan 25, 2023
golang-docs · RHEL 9 0:1.18.9-1.el9_1 RHSA-2023:0328 Jan 23, 2023
golang-docs · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
golang-docs · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
golang-docs · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang-docs · ol 8 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
golang-docs · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
golang-github-cpuguy83-md2man · RHEL 9 0:2.0.2-4.el9 RHSA-2023:2592 May 9, 2023
golang-github-cpuguy83-md2man · almalinux 9 2.0.2-4.el9 ALSA-2023:2592 May 9, 2023
golang-github-cpuguy83-md2man · ol 9 0:2.0.2-4.el9 ELSA-2023-2592 May 15, 2023
golang-github-prometheus-prometheus · opensuse-leap 15.6 2.45.6-150100.4.20.1 SUSE-SU-2024:3288-1 Sep 17, 2024
golang-github-prometheus-prometheus · sles 15.6 2.45.6-150100.4.20.1 SUSE-SU-2024:3288-1 Sep 17, 2024
golang-misc · RHEL 8 0:1.18.9-1.module+el8.7.0+17640+84246675 RHSA-2023:0446 Jan 25, 2023
golang-misc · RHEL 9 0:1.18.9-1.el9_1 RHSA-2023:0328 Jan 23, 2023
golang-misc · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
golang-misc · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
golang-misc · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang-misc · ol 8 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
golang-misc · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
golang-race · RHEL 8 0:1.18.9-1.module+el8.7.0+17640+84246675 RHSA-2023:0446 Jan 25, 2023
golang-race · RHEL 9 0:1.18.9-1.el9_1 RHSA-2023:0328 Jan 23, 2023
golang-race · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
golang-race · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
golang-race · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang-race · ol 8 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
golang-race · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
golang-shared · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang-src · RHEL 8 0:1.18.9-1.module+el8.7.0+17640+84246675 RHSA-2023:0446 Jan 25, 2023
golang-src · RHEL 9 0:1.18.9-1.el9_1 RHSA-2023:0328 Jan 23, 2023
golang-src · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
golang-src · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
golang-src · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang-src · ol 8 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
golang-src · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
golang-tests · RHEL 8 0:1.18.9-1.module+el8.7.0+17640+84246675 RHSA-2023:0446 Jan 25, 2023
golang-tests · RHEL 9 0:1.18.9-1.el9_1 RHSA-2023:0328 Jan 23, 2023
golang-tests · almalinux 8 1.18.9-1.module_el8.7.0+3397+4350156d ALSA-2023:0446 Jan 25, 2023
golang-tests · almalinux 9 1.18.9-1.el9_1 ALSA-2023:0328 Jan 23, 2023
golang-tests · amzn 2023 1.19.3-2.amzn2023.0.2 ALAS2023-2023-048 Feb 17, 2023
golang-tests · ol 8 0:1.19.4-2.0.1.module+el8.7.0+20922+47ac84ba ELSA-2023-18908 Mar 7, 2023
golang-tests · ol 9 0:1.18.9-1.el9_1 ELSA-2023-0328 Jan 24, 2023
golist · amzn 2023 0.10.1-11.amzn2023.0.3 ALAS2023-2023-046 Feb 17, 2023
golist-debuginfo · amzn 2023 0.10.1-11.amzn2023.0.3 ALAS2023-2023-046 Feb 17, 2023
golist-debugsource · amzn 2023 0.10.1-11.amzn2023.0.3 ALAS2023-2023-046 Feb 17, 2023
grafana · RHEL 8 0:7.5.15-4.el8 RHSA-2023:2784 May 16, 2023
grafana · RHEL 9 0:9.0.9-2.el9 RHSA-2023:2167 May 9, 2023
grafana · almalinux 8 7.5.15-4.el8 ALSA-2023:2784 May 16, 2023
grafana · almalinux 9 9.0.9-2.el9 ALSA-2023:2167 May 9, 2023
grafana · ol 8 0:7.5.15-4.el8 ELSA-2023-2784 May 24, 2023
grafana · ol 9 0:9.0.9-2.el9 ELSA-2023-2167 May 15, 2023
libslirp · RHEL 8 0:4.4.0-2.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
libslirp · almalinux 8 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
libslirp · ol 8 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
libslirp · rocky 8 0:4.4.0-1.module+el8.9.0+1445+07728297 RLSA-2024:2988 May 7, 2025
libslirp-devel · RHEL 8 0:4.4.0-2.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
libslirp-devel · almalinux 8 4.4.0-2.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
libslirp-devel · ol 8 0:4.4.0-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
netavark · RHEL 8 2:1.10.3-1.module+el8.10.0+21306+6be40ce7 RHSA-2024:3254 May 22, 2024
netavark · almalinux 8 2:1.10.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
netavark · ol 8 2:1.10.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
netavark · rocky 8 2:1.10.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
oci-seccomp-bpf-hook · RHEL 8 0:1.2.10-1.module+el8.10.0+20565+a40ba0e5 RHSA-2024:3254 May 22, 2024
oci-seccomp-bpf-hook · almalinux 8 1.2.10-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
oci-seccomp-bpf-hook · ol 8 0:1.2.10-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
oci-seccomp-bpf-hook · rocky 8 0:1.2.10-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
osbuild · ol 8 0:81-1.el8 ELSA-2023-2780 May 24, 2023
osbuild · ol 9 0:81-1.el9 ELSA-2023-2204 May 15, 2023
osbuild-composer · RHEL 8 0:75-1.el8 RHSA-2023:2780 May 16, 2023
osbuild-composer · RHEL 9 0:76-2.el9_2 RHSA-2023:2204 May 9, 2023
osbuild-composer · almalinux 8 75-1.el8.alma ALSA-2023:2780 May 16, 2023
osbuild-composer · almalinux 9 76-2.el9_2.alma ALSA-2023:2204 May 9, 2023
osbuild-composer · ol 8 0:75-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-composer · ol 9 0:76-2.el9_2 ELSA-2023-2204 May 15, 2023
osbuild-composer-core · RHEL 8 0:75-1.el8 RHSA-2023:2780 May 16, 2023
osbuild-composer-core · RHEL 9 0:76-2.el9_2 RHSA-2023:2204 May 9, 2023
osbuild-composer-core · almalinux 8 75-1.el8.alma ALSA-2023:2780 May 16, 2023
osbuild-composer-core · almalinux 9 76-2.el9_2.alma ALSA-2023:2204 May 9, 2023
osbuild-composer-core · ol 8 0:75-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-composer-core · ol 9 0:76-2.el9_2 ELSA-2023-2204 May 15, 2023
osbuild-composer-dnf-json · RHEL 8 0:75-1.el8 RHSA-2023:2780 May 16, 2023
osbuild-composer-dnf-json · RHEL 9 0:76-2.el9_2 RHSA-2023:2204 May 9, 2023
osbuild-composer-dnf-json · almalinux 8 75-1.el8.alma ALSA-2023:2780 May 16, 2023
osbuild-composer-dnf-json · almalinux 9 76-2.el9_2.alma ALSA-2023:2204 May 9, 2023
osbuild-composer-dnf-json · ol 8 0:75-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-composer-dnf-json · ol 9 0:76-2.el9_2 ELSA-2023-2204 May 15, 2023
osbuild-composer-worker · RHEL 8 0:75-1.el8 RHSA-2023:2780 May 16, 2023
osbuild-composer-worker · RHEL 9 0:76-2.el9_2 RHSA-2023:2204 May 9, 2023
osbuild-composer-worker · almalinux 8 75-1.el8.alma ALSA-2023:2780 May 16, 2023
osbuild-composer-worker · almalinux 9 76-2.el9_2.alma ALSA-2023:2204 May 9, 2023
osbuild-composer-worker · ol 8 0:75-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-composer-worker · ol 9 0:76-2.el9_2 ELSA-2023-2204 May 15, 2023
osbuild-luks2 · ol 8 0:81-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-luks2 · ol 9 0:81-1.el9 ELSA-2023-2204 May 15, 2023
osbuild-lvm2 · ol 8 0:81-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-lvm2 · ol 9 0:81-1.el9 ELSA-2023-2204 May 15, 2023
osbuild-ostree · ol 8 0:81-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-ostree · ol 9 0:81-1.el9 ELSA-2023-2204 May 15, 2023
osbuild-selinux · ol 8 0:81-1.el8 ELSA-2023-2780 May 24, 2023
osbuild-selinux · ol 9 0:81-1.el9 ELSA-2023-2204 May 15, 2023
podman · RHEL 8 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:3254 May 22, 2024
podman · almalinux 8 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
podman · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman · rocky 8 4:4.9.4-1.module+el8.10.0+1815+5fe7415e RLSA-2024:3254 Jun 14, 2024
podman-catatonit · RHEL 8 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:3254 May 22, 2024
podman-catatonit · almalinux 8 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
podman-catatonit · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-docker · RHEL 8 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:3254 May 22, 2024
podman-docker · almalinux 8 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
podman-docker · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-gvproxy · RHEL 8 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:3254 May 22, 2024
podman-gvproxy · almalinux 8 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
podman-gvproxy · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-plugins · RHEL 8 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:3254 May 22, 2024
podman-plugins · almalinux 8 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
podman-plugins · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-remote · RHEL 8 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:3254 May 22, 2024
podman-remote · almalinux 8 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
podman-remote · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
podman-tests · RHEL 8 4:4.9.4-1.module+el8.10.0+21632+761e0d34 RHSA-2024:3254 May 22, 2024
podman-tests · almalinux 8 4:4.9.4-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
podman-tests · ol 8 4:4.9.4-1.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
python-podman · rocky 8 0:4.9.0-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
python3-criu · RHEL 8 0:3.18-5.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
python3-criu · almalinux 8 3.18-5.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
python3-criu · ol 8 0:3.18-5.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
python3-osbuild · ol 8 0:81-1.el8 ELSA-2023-2780 May 24, 2023
python3-osbuild · ol 9 0:81-1.el9 ELSA-2023-2204 May 15, 2023
python3-podman · RHEL 8 0:4.9.0-1.module+el8.10.0+21196+3f0abbca RHSA-2024:3254 May 22, 2024
python3-podman · almalinux 8 4.9.0-1.module_el8.10.0+3792+03eaed9c ALSA-2024:3254 May 22, 2024
python3-podman · ol 8 0:4.9.0-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
runc · RHEL 8 1:1.1.12-1.module+el8.10.0+21251+62b7388c RHSA-2024:3254 May 22, 2024
runc · almalinux 8 1:1.1.12-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
runc · ol 8 1:1.1.12-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
runc · rocky 8 1:1.1.12-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
skopeo · RHEL 8 2:1.14.3-2.module+el8.10.0+21728+a1d9b0ab RHSA-2024:3254 May 22, 2024
skopeo · almalinux 8 2:1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
skopeo · ol 8 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
skopeo · rocky 8 2:1.6.2-9.module+el8.9.0+1578+aa900b44 RLSA-2024:0121 May 7, 2025
skopeo-tests · RHEL 8 2:1.14.3-2.module+el8.10.0+21728+a1d9b0ab RHSA-2024:3254 May 22, 2024
skopeo-tests · almalinux 8 2:1.14.3-2.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
skopeo-tests · ol 8 2:1.14.3-2.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
slirp4netns · RHEL 8 0:1.2.3-1.module+el8.10.0+21306+6be40ce7 RHSA-2024:3254 May 22, 2024
slirp4netns · almalinux 8 1.2.3-1.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
slirp4netns · ol 8 0:1.2.3-1.module+el8.10.0+90298+77a9814d ELSA-2024-3254 May 29, 2024
slirp4netns · rocky 8 0:1.2.3-1.module+el8.10.0+1815+5fe7415e RLSA-2024:2988 May 7, 2025
toolbox · RHEL 8 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 RHSA-2024:3254 May 22, 2024
toolbox · almalinux 8 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
toolbox · rocky 8 0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 RLSA-2024:2988 May 7, 2025
toolbox-tests · RHEL 8 0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 RHSA-2024:3254 May 22, 2024
toolbox-tests · almalinux 8 0.0.99.5-2.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
udica · RHEL 8 0:0.2.6-21.module+el8.10.0+21672+01ba06ae RHSA-2024:3254 May 22, 2024
udica · almalinux 8 0.2.6-21.module_el8.10.0+3845+87b84552 ALSA-2024:3254 May 22, 2024
udica · ol 8 0:0.2.6-21.module+el8.10.0+90337+0d7b6e74 ELSA-2024-3254 May 29, 2024
udica · rocky 8 0:0.2.6-4.module+el8.9.0+1445+07728297 RLSA-2024:0121 May 7, 2025
weldr-client · RHEL 8 0:35.9-2.el8 RHSA-2023:2780 May 16, 2023
weldr-client · RHEL 9 0:35.9-1.el9 RHSA-2023:2204 May 9, 2023
weldr-client · almalinux 8 35.9-2.el8 ALSA-2023:2780 May 16, 2023
weldr-client · almalinux 9 35.9-1.el9 ALSA-2023:2204 May 9, 2023
weldr-client · ol 8 0:35.9-2.el8 ELSA-2023-2780 May 24, 2023
weldr-client · ol 9 0:35.9-1.el9 ELSA-2023-2204 May 15, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.