archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade criu-libsUpgrade criu-develUpgrade skopeoUpgrade containernetworking-pluginsUpgrade toolboxUpgrade python3-podmanUpgrade grafana-selinuxUpgrade netavarkUpgrade libslirp-develUpgrade conmonUpgrade golang-raceUpgrade runcUpgrade crunUpgrade skopeo-testsUpgrade golang-binUpgrade containers-commonUpgrade osbuild-composer-workerUpgrade podman-pluginsUpgrade golang-testsUpgrade golang-docsUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade go-toolsetUpgrade osbuild-composerUpgrade toolbox-testsUpgrade buildah-testsUpgrade golang-srcUpgrade critUpgrade python3-criuUpgrade cockpit-podmanUpgrade criuUpgrade podman-dockerUpgrade golang-miscUpgrade container-selinuxUpgrade buildahUpgrade udicaUpgrade grafanaUpgrade slirp4netnsUpgrade golangUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade osbuild-composer-coreUpgrade libslirpUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade podman-tests | Feb 17, 2026 | Feb 16, 2026 |
| Alpine Linux | — | Upgrade goUpgrade opentofu | Jan 29, 2026 | Jan 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-cpuguy83-go-md2manUpgrade amazon-ecr-credential-helper-debuginfoUpgrade oci-add-hooksUpgrade nerdctl-debuginfoUpgrade golang-srcUpgrade docker-debuginfoUpgrade golangUpgrade cri-toolsUpgrade cni-plugins-debuginfoUpgrade soci-snapshotterUpgrade golistUpgrade runfinch-finchUpgrade golist-debuginfoUpgrade dockerUpgrade golang-testsUpgrade golang-miscUpgrade containerdUpgrade cni-pluginsUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade nerdctlUpgrade containerd-stressUpgrade oci-add-hooks-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade golang-docsUpgrade containerd-debuginfoUpgrade golang-binUpgrade cri-tools-debuginfoUpgrade ecs-initUpgrade runc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-docsUpgrade golang-github-burntsushi-toml-test-develUpgrade captreeUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-burntsushi-toml-testUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade libcap-staticUpgrade containerd-debugsourceUpgrade golang-miscUpgrade libcapUpgrade dockerUpgrade git-lfs-debuginfoUpgrade containerd-stressUpgrade soci-snapshotterUpgrade oci-add-hooks-debugsourceUpgrade runcUpgrade golist-debugsourceUpgrade containerd-stress-debuginfoUpgrade golang-github-burntsushi-toml-debugsourceUpgrade ecs-initUpgrade golang-github-burntsushi-toml-develUpgrade runc-debugsourceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade amazon-ecr-credential-helperUpgrade amazon-cloudwatch-agentUpgrade captree-debuginfoUpgrade golang-srcUpgrade runc-debuginfoUpgrade libcap-debugsourceUpgrade cni-plugins-debugsourceUpgrade libcap-debuginfoUpgrade golang-github-burntsushi-toml-debuginfoUpgrade golang-github-burntsushi-tomlUpgrade git-lfs-debugsourceUpgrade libcap-develUpgrade docker-debuginfoUpgrade cni-pluginsUpgrade golang-github-burntsushi-toml-test-debugsourceUpgrade git-lfsUpgrade oci-add-hooks-debuginfoUpgrade cni-plugins-debuginfoUpgrade containerdUpgrade golang-github-burntsushi-toml-test-debuginfoUpgrade docker-debugsourceUpgrade oci-add-hooksUpgrade nerdctlUpgrade golist-debuginfoUpgrade golistUpgrade containerd-debuginfoUpgrade runfinch-finchUpgrade golang-shared | Feb 10, 2026 | Jan 28, 2026 |
| Oracle_linux | — | Upgrade aardvark-dnsUpgrade podman-testsUpgrade buildahUpgrade container-selinuxUpgrade buildah-testsUpgrade golang-docsUpgrade podman-dockerUpgrade golangUpgrade python3-criuUpgrade critUpgrade grafanaUpgrade golang-srcUpgrade slirp4netnsUpgrade libslirpUpgrade podman-gvproxyUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade udicaUpgrade cockpit-podmanUpgrade osbuild-composerUpgrade osbuild-composer-workerUpgrade go-toolsetUpgrade podman-catatonitUpgrade runcUpgrade criuUpgrade conmonUpgrade podmanUpgrade grafana-selinuxUpgrade delveUpgrade skopeoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade golang-raceUpgrade containers-commonUpgrade podman-pluginsUpgrade crunUpgrade libslirp-develUpgrade python3-podmanUpgrade golang-testsUpgrade criu-develUpgrade skopeo-testsUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade criu-libs | Feb 24, 2026 | Jan 28, 2026 |
| Redhat Openshift | — | Upgrade podman | Aug 10, 2026 | Jan 28, 2026 |
| Redhat_linux | — | Upgrade osbuild-composer-debuginfoUpgrade runc-debugsourceUpgrade netavarkUpgrade osbuild-composerUpgrade podman-tests-debuginfoUpgrade slirp4netnsUpgrade python3-podmanUpgrade criu-debugsourceUpgrade golang-miscUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade buildahUpgrade toolbox-testsUpgrade podman-catatonitUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade delve-debuginfoUpgrade osbuild-composer-coreUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade toolbox-debugsourceUpgrade cockpit-podmanUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade golang-binUpgrade golang-raceUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade golang-srcNo solution existsUpgrade criuUpgrade podman-dockerUpgrade podmanUpgrade buildah-testsUpgrade golang-testsUpgrade grafana-debuginfoUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade go-toolsetUpgrade osbuild-composer-workerUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade runcUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade runc-debuginfoUpgrade criu-libsUpgrade osbuild-composer-debugsourceUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade crun-debugsourceUpgrade grafana-selinuxUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade crun-debuginfoUpgrade critUpgrade golang-docsUpgrade osbuild-composer-worker-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade grafana-debugsourceUpgrade skopeo-testsUpgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade delve-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-plugins-debuginfoUpgrade conmonUpgrade delveUpgrade crunUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade podman-debugsource | Feb 17, 2026 | Jan 28, 2026 |
| Rocky_linux | — | Upgrade grafanaUpgrade libslirp-debuginfoUpgrade runc-debuginfoUpgrade criu-develUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade podman-remoteUpgrade containers-commonUpgrade grafana-debugsourceUpgrade criu-libsUpgrade podman-gvproxyUpgrade slirp4netns-debugsourceUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade aardvark-dnsUpgrade osbuild-composer-debuginfoUpgrade podman-debuginfoUpgrade osbuild-composer-workerUpgrade skopeo-testsUpgrade go-toolsetUpgrade slirp4netnsUpgrade buildah-testsUpgrade runcUpgrade conmon-debuginfoUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade osbuild-composerUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade podman-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade netavarkUpgrade golangUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-coreUpgrade golang-raceUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade podman-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade grafana-debuginfoUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade grafana-selinuxUpgrade golang-binUpgrade delve-debuginfoUpgrade conmonUpgrade podman-catatonitUpgrade osbuild-composer-core-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade crunUpgrade criu | Feb 19, 2026 | Feb 17, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub