The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golangUpgrade buildah-testsUpgrade golang-testsUpgrade skopeoUpgrade grafana-selinuxUpgrade golang-docsUpgrade podmanUpgrade podman-remoteUpgrade golang-raceUpgrade golang-binUpgrade podman-dockerUpgrade golang-miscUpgrade podman-testsUpgrade buildahUpgrade grafanaUpgrade osbuild-composer-coreUpgrade go-toolsetUpgrade golang-srcUpgrade image-builderUpgrade skopeo-testsUpgrade delveUpgrade osbuild-composerUpgrade osbuild-composer-workerUpgrade podman-plugins | Nov 21, 2025 | Nov 20, 2025 |
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-miscUpgrade nerdctlUpgrade rcloneUpgrade golang-testsUpgrade golang-docsUpgrade cni-pluginsUpgrade runfinch-finchUpgrade cri-tools-debuginfoUpgrade runcUpgrade dockerUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golangUpgrade containerd-stressUpgrade golang-srcUpgrade rclone-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golang-sharedUpgrade ecs-initUpgrade soci-snapshotterUpgrade golistUpgrade docker-debuginfoUpgrade containerdUpgrade amazon-cloudwatch-agentUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade cni-plugins-debuginfoUpgrade oci-add-hooksUpgrade amazon-ssm-agentUpgrade nerdctl-debuginfoUpgrade cri-toolsUpgrade golist-debuginfoUpgrade containerd-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debugsourceUpgrade soci-snapshotterUpgrade libcap-develUpgrade containerd-debuginfoUpgrade dockerUpgrade golang-miscUpgrade golist-debugsourceUpgrade oci-add-hooksUpgrade containerd-debugsourceUpgrade containerdUpgrade libcap-staticUpgrade golistUpgrade libcapUpgrade captreeUpgrade golang-testsUpgrade golang-binUpgrade nerdctlUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade libcap-debugsourceUpgrade cni-plugins-debugsourceUpgrade captree-debuginfoUpgrade amazon-ssm-agentUpgrade golang-srcUpgrade docker-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade containerd-stress-debuginfoUpgrade runfinch-finchUpgrade golang-docsUpgrade cni-plugins-debuginfoUpgrade containerd-stressUpgrade amazon-ecr-credential-helperUpgrade docker-debuginfoUpgrade golang-sharedUpgrade runcUpgrade libcap-debuginfoUpgrade golangUpgrade runc-debugsourceUpgrade cni-pluginsUpgrade runc-debuginfoUpgrade ecs-init | Oct 31, 2025 | Oct 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade containernetworking-pluginsUpgrade critUpgrade image-builderUpgrade runcUpgrade podmanUpgrade python3-criuUpgrade golang-testsUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade golang-miscUpgrade libslirp-develUpgrade grafana-selinuxUpgrade golang-binUpgrade golangUpgrade containers-commonUpgrade skopeo-testsUpgrade criu-libsUpgrade delveUpgrade osbuild-composerUpgrade osbuild-composer-coreUpgrade podman-pluginsUpgrade skopeoUpgrade netavarkUpgrade podman-remoteUpgrade golang-srcUpgrade criuUpgrade podman-catatonitUpgrade udicaUpgrade python3-podmanUpgrade slirp4netnsUpgrade osbuild-composer-workerUpgrade golang-raceUpgrade go-toolsetUpgrade podman-gvproxyUpgrade grafanaUpgrade buildah-testsUpgrade buildahUpgrade container-selinuxUpgrade cockpit-podmanUpgrade crunUpgrade conmonUpgrade libslirpUpgrade podman-dockerUpgrade podman-testsUpgrade golang-docsUpgrade fuse-overlayfs | Nov 28, 2025 | Oct 29, 2025 |
| Redhat Openshift | — | Upgrade skopeoUpgrade openshiftUpgrade podmanUpgrade cri-o | Aug 10, 2026 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade golang-miscUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade grafana-selinuxUpgrade osbuild-composer-tests-debuginfoUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade criuUpgrade podman-catatonit-debuginfoUpgrade buildah-debuginfoUpgrade criu-libsUpgrade python3-podmanUpgrade image-builderUpgrade cockpit-podmanUpgrade delve-debuginfoUpgrade image-builder-debugsourceUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade golangUpgrade libslirpUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade podmanUpgrade podman-catatonitUpgrade skopeoUpgrade podman-gvproxyUpgrade osbuild-composer-coreUpgrade crun-debugsourceUpgrade slirp4netnsUpgrade toolbox-testsUpgrade golang-testsUpgrade toolboxUpgrade fuse-overlayfsUpgrade netavarkUpgrade golang-srcUpgrade skopeo-debugsourceUpgrade osbuild-composer-debuginfoUpgrade libslirp-develUpgrade buildahUpgrade osbuild-composer-core-debuginfoUpgrade golang-raceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade buildah-testsUpgrade golang-docsUpgrade containernetworking-plugins-debuginfoUpgrade golang-binUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade criu-libs-debuginfoUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade delveUpgrade podman-debugsourceUpgrade osbuild-composer-workerUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade osbuild-composerUpgrade image-builder-debuginfoUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade skopeo-testsUpgrade osbuild-composer-debugsourceUpgrade container-selinuxUpgrade podman-pluginsUpgrade toolbox-debugsourceNo solution existsUpgrade podman-testsUpgrade go-toolsetUpgrade toolbox-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-debuginfoUpgrade podman-tests-debuginfoUpgrade grafanaUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade grafana-debugsourceUpgrade runc-debuginfoUpgrade udicaUpgrade osbuild-composer-dnf-jsonUpgrade podman-remote-debuginfoUpgrade skopeo-debuginfoUpgrade conmon-debuginfoUpgrade criu-devel | Nov 21, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade conmon-debugsourceUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-tests-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade python3-criuUpgrade osbuild-composer-debuginfoUpgrade buildah-testsUpgrade grafanaUpgrade criuUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade criu-debugsourceUpgrade grafana-debuginfoUpgrade libslirp-debuginfoUpgrade skopeo-debuginfoUpgrade golangUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade crun-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade slirp4netnsUpgrade osbuild-composerUpgrade go-toolsetUpgrade delve-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-debugsourceUpgrade image-builder-debugsourceUpgrade osbuild-composer-coreUpgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade criu-libsUpgrade runc-debuginfoUpgrade podmanUpgrade image-builderUpgrade delve-debugsourceUpgrade criu-develUpgrade containers-commonUpgrade libslirpUpgrade crun-debugsourceUpgrade podman-testsUpgrade osbuild-composer-workerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-testsUpgrade grafana-selinuxUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade conmonUpgrade toolboxUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade image-builder-debuginfoUpgrade grafana-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-binUpgrade critUpgrade toolbox-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade delve | Feb 5, 2026 | Dec 23, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25-docUpgrade go1.25-raceUpgrade go1.24-raceUpgrade go1.24Upgrade go1.25Upgrade go1.24-doc | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub