The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade podman-dockerUpgrade criu-libsUpgrade aardvark-dnsUpgrade buildahUpgrade cockpit-podmanUpgrade buildah-testsUpgrade libslirpUpgrade podman-gvproxyUpgrade container-selinuxUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-develUpgrade slirp4netnsUpgrade conmonUpgrade udicaUpgrade critUpgrade python3-podmanUpgrade netavarkUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade skopeoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-remoteUpgrade podman-pluginsUpgrade crunUpgrade criuUpgrade podmanUpgrade criu-develUpgrade fuse-overlayfsUpgrade runcUpgrade toolbox-tests | May 8, 2024 | Mar 9, 2024 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade containerd-stressUpgrade containerd-debuginfoUpgrade containerdUpgrade nerdctlUpgrade nerdctl-debuginfo | Aug 14, 2024 | Mar 9, 2024 |
| Amazon_linux_2023 | — | Upgrade nerdctl | Feb 17, 2025 | Mar 9, 2024 |
| Debian | — | Upgrade golang-gopkg-square-go-jose.v2Upgrade golang-github-go-jose-go-jose | May 15, 2025 | Mar 9, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Freebsd | — | Upgrade oauth2-proxy | Oct 22, 2024 | Oct 18, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade cockpit-podmanUpgrade buildahUpgrade podmanUpgrade podman-dockerUpgrade critUpgrade slirp4netnsUpgrade criuUpgrade buildah-testsUpgrade conmonUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade udicaUpgrade libslirpUpgrade podman-remoteUpgrade aardvark-dnsUpgrade podman-testsUpgrade runcUpgrade netavarkUpgrade python3-criuUpgrade container-selinuxUpgrade podman-pluginsUpgrade criu-develUpgrade skopeoUpgrade libslirp-develUpgrade skopeo-testsUpgrade crunUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade containers-common | May 7, 2024 | Mar 9, 2024 |
| Redhat Openshift | — | Upgrade cri-oUpgrade skopeoUpgrade podmanUpgrade openshift-clients | Mar 28, 2024 | Mar 9, 2024 |
| Redhat_linux | — | Upgrade criu-debugsourceUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade criu-libsUpgrade podman-testsUpgrade critUpgrade podman-remoteUpgrade runc-debuginfoUpgrade libslirp-develUpgrade skopeo-debuginfoUpgrade libslirpUpgrade aardvark-dnsUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade criu-develUpgrade python3-criuUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade runcUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade buildah-debugsourceUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade udicaUpgrade criuUpgrade toolbox-testsUpgrade podman-catatonitUpgrade netavarkUpgrade crunUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade podman-pluginsUpgrade toolboxUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoNo solution existsUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade skopeoUpgrade criu-libs-debuginfo | May 1, 2024 | Mar 9, 2024 |
| Rocky_linux | — | Upgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirpUpgrade buildah-tests-debuginfoUpgrade containers-commonUpgrade runc-debuginfoUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade buildahUpgrade netavarkUpgrade runc-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade libslirp-develUpgrade conmonUpgrade criu-libsUpgrade skopeo-testsUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-pluginsUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade podman-debuginfoUpgrade crunUpgrade criuUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade podman-plugins-debuginfoUpgrade runcUpgrade slirp4netnsUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-testsUpgrade critUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade criu-develUpgrade podman-remoteUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade podman | May 13, 2024 | Mar 9, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3 | Sep 30, 2025 | Mar 9, 2024 |
| Suse | — | Upgrade docker-rootless-extrasUpgrade apptainer-sle15_5Upgrade libgpg-error0-32bitUpgrade skopeo-fish-completionUpgrade apptainerUpgrade velociraptorUpgrade docker-zsh-completionUpgrade buildahUpgrade grafanaUpgrade libgpg-error0Upgrade skopeo-bash-completionUpgrade system-user-velociraptorUpgrade velociraptor-clientUpgrade apptainer-leapUpgrade skopeoUpgrade apptainer-sle15_6Upgrade dockerUpgrade skopeo-zsh-completionUpgrade docker-fish-completionUpgrade docker-bash-completionUpgrade libgpg-error-devel | Jun 12, 2024 | Mar 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub