tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-srcUpgrade osbuild-composer-coreUpgrade go-toolsetUpgrade grafanaUpgrade podman-pluginsUpgrade delveUpgrade image-builderUpgrade osbuild-composer-workerUpgrade skopeo-testsUpgrade osbuild-composerUpgrade buildahUpgrade grafana-selinuxUpgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade podman-remoteUpgrade skopeoUpgrade podman-testsUpgrade podman-dockerUpgrade golang-binUpgrade podmanUpgrade golang-miscUpgrade buildah-testsUpgrade golang | Nov 21, 2025 | Nov 20, 2025 |
| Alpine Linux | — | Upgrade go | Oct 31, 2025 | Oct 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golist-debuginfoUpgrade containerdUpgrade oci-add-hooksUpgrade cri-toolsUpgrade amazon-cloudwatch-agentUpgrade amazon-ecr-credential-helperUpgrade soci-snapshotterUpgrade containerd-debuginfoUpgrade nerdctl-debuginfoUpgrade golistUpgrade docker-debuginfoUpgrade cni-plugins-debuginfoUpgrade rclone-debuginfoUpgrade ecs-initUpgrade golang-sharedUpgrade amazon-ssm-agentUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade golang-srcUpgrade nerdctlUpgrade dockerUpgrade containerd-stressUpgrade cni-pluginsUpgrade rcloneUpgrade golang-testsUpgrade runcUpgrade runfinch-finchUpgrade cri-tools-debuginfoUpgrade golang-miscUpgrade golang-docsUpgrade golang-binUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libcap-develUpgrade soci-snapshotterUpgrade libcap-staticUpgrade golang-binUpgrade oci-add-hooks-debugsourceUpgrade libcapUpgrade golist-debugsourceUpgrade captreeUpgrade golang-miscUpgrade oci-add-hooksUpgrade containerd-debugsourceUpgrade dockerUpgrade golang-testsUpgrade containerdUpgrade golistUpgrade containerd-debuginfoUpgrade golist-debuginfoUpgrade amazon-ecr-credential-helperUpgrade docker-debuginfoUpgrade runc-debuginfoUpgrade runcUpgrade libcap-debugsourceUpgrade ecs-initUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade libcap-debuginfoUpgrade golangUpgrade golang-sharedUpgrade captree-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade cni-plugins-debugsourceUpgrade amazon-ssm-agentUpgrade docker-debugsourceUpgrade containerd-stress-debuginfoUpgrade golang-srcUpgrade runfinch-finchUpgrade golang-docsUpgrade cni-plugins-debuginfoUpgrade containerd-stressUpgrade runc-debugsourceUpgrade cni-plugins | Oct 31, 2025 | Oct 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade golang-docsUpgrade python3-podmanUpgrade buildahUpgrade criuUpgrade go-toolsetUpgrade podman-gvproxyUpgrade udicaUpgrade podman-testsUpgrade libslirpUpgrade osbuild-composer-workerUpgrade conmonUpgrade container-selinuxUpgrade slirp4netnsUpgrade grafanaUpgrade buildah-testsUpgrade golang-raceUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade crunUpgrade podman-dockerUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade criu-libsUpgrade golang-testsUpgrade criu-develUpgrade delveUpgrade grafana-selinuxUpgrade golang-srcUpgrade golangUpgrade golang-binUpgrade containers-commonUpgrade libslirp-develUpgrade podman-remoteUpgrade aardvark-dnsUpgrade golang-miscUpgrade python3-criuUpgrade podmanUpgrade image-builderUpgrade critUpgrade runcUpgrade skopeo-testsUpgrade skopeo | Nov 28, 2025 | Oct 29, 2025 |
| Redhat Openshift | — | Upgrade cri-oUpgrade podmanUpgrade openshiftUpgrade skopeo | Aug 10, 2026 | Oct 29, 2025 |
| Redhat_linux | — | Upgrade criu-libs-debuginfoUpgrade go-toolsetNo solution existsUpgrade podman-testsUpgrade osbuild-composer-dnf-jsonUpgrade podman-plugins-debuginfoUpgrade podman-tests-debuginfoUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade golang-docsUpgrade grafanaUpgrade delveUpgrade runcUpgrade toolbox-debugsourceUpgrade osbuild-composer-workerUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debuginfoUpgrade critUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-develUpgrade libslirp-debuginfoUpgrade golang-binUpgrade image-builder-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade udicaUpgrade conmon-debuginfoUpgrade osbuild-composer-debugsourceUpgrade skopeo-testsUpgrade crunUpgrade container-selinuxUpgrade osbuild-composer-worker-debuginfoUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade grafana-debugsourceUpgrade skopeo-debugsourceUpgrade grafana-debuginfoUpgrade podman-gvproxyUpgrade image-builderUpgrade osbuild-composer-core-debuginfoUpgrade python3-podmanUpgrade delve-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade delve-debugsourceUpgrade criu-debugsourceUpgrade containers-commonUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade osbuild-composer-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade golang-miscUpgrade grafana-selinuxUpgrade crun-debugsourceUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade golang-srcUpgrade golang-testsUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade toolboxUpgrade slirp4netnsUpgrade osbuild-composer-tests-debuginfoUpgrade buildah-tests-debuginfoUpgrade image-builder-debugsourceUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade criu-libsUpgrade crun-debuginfoUpgrade criuUpgrade podman-catatonitUpgrade conmonUpgrade buildah-debuginfoUpgrade buildahUpgrade golang-raceUpgrade podmanUpgrade golang | Nov 21, 2025 | Oct 29, 2025 |
| Rocky_linux | — | Upgrade criu-libsUpgrade critUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade libslirpUpgrade osbuild-composer-workerUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade crunUpgrade crun-debugsourceUpgrade runcUpgrade podman-testsUpgrade skopeo-testsUpgrade image-builderUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade runc-debuginfoUpgrade containers-commonUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade skopeoUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade golang-binUpgrade grafana-debugsourceUpgrade image-builder-debuginfoUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade toolboxUpgrade containernetworking-pluginsUpgrade osbuild-composer-worker-debuginfoUpgrade podman-pluginsUpgrade podman-remoteUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade osbuild-composerUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade python3-criuUpgrade golangUpgrade netavarkUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade osbuild-composer-coreUpgrade image-builder-debugsourceUpgrade toolbox-debugsourceUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade conmon-debugsourceUpgrade podman-tests-debuginfoUpgrade grafanaUpgrade criuUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade grafana-debuginfoUpgrade criu-libs-debuginfoUpgrade delve-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade go-toolsetUpgrade buildah-testsUpgrade buildahUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade osbuild-composer-debuginfoUpgrade fuse-overlayfs-debugsource | Feb 5, 2026 | Dec 23, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.3 | Jul 30, 2026 | Oct 29, 2025 |
| Suse | — | Upgrade go1.25-docUpgrade go1.24Upgrade go1.25-raceUpgrade go1.24-docUpgrade go1.25Upgrade go1.24-race | Dec 5, 2025 | Oct 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 29, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub