CVE catalog

CVE-2024-45337

Google Guest Agent vulnerability

[CVE catalog]

Severity
High · CVSS 8.2CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
3.18% · Oct 25, 2026

Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to authenticate." Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-go.cryptosid1:0.58.0-1fixed
Debiangolang-go.cryptoforky1:0.58.0-1fixed
Debiangolang-go.cryptotrixie1:0.25.0-1vulnerable
Debiangolang-go.cryptobookworm1:0.4.0-1vulnerable
Ubuntugolang-go.cryptonobleNot reportedvulnerable
Ubuntugoogle-guest-agentnoble20250116.00-0ubuntu1~24.04.2fixed
Ubuntugolang-go.cryptonoble1:0.19.0-1ubuntu0.1~esm1fixed
Ubuntugolang-golang-x-crypto-devnoble1:0.19.0-1ubuntu0.1~esm1fixed
Gogolang.org/x/cryptoNot reported0.31.0fixed
Opensusegitea-tealeap 16.00.15.1-bp160.1.1fixed
Opensusevexctlleap 16.00.4.4+git20.5d61136-160000.1.1fixed
Ubuntugolang-go.cryptopro1:0.4.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.17.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.18.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.19.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.19.0-1ubuntu0.1~esm1fixed
Ubuntugoogle-guest-agentpro20201217.02-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20210414.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20210629.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20220622.00-0ubuntu2~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20220622.00-0ubuntu2~20.04.2vulnerable
Ubuntugoogle-guest-agentpro20230426.00-0ubuntu2~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.1vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.2vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.3vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.4vulnerable
Ubuntugoogle-guest-agentpro20240716.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20241011.01-0ubuntu1~20.04.1vulnerable
Ubuntugoogle-guest-agentpro20250116.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20250116.00-0ubuntu1~20.04.0+esm1fixed
Ubuntulxdpro2.18-0ubuntu6vulnerable
Ubuntulxdpro2.19-0ubuntu1vulnerable
Ubuntulxdpro2.20-0ubuntu3vulnerable
Ubuntulxdpro2.20-0ubuntu4vulnerable
Ubuntulxdpro2.21-0ubuntu1vulnerable
Ubuntulxdpro2.21-0ubuntu2vulnerable
Ubuntulxdpro2.21-0ubuntu3vulnerable
Ubuntulxdpro2.21-0ubuntu4vulnerable
Ubuntulxdpro3.0.0~beta2-0ubuntu3vulnerable
Ubuntulxdpro3.0.0~beta3-0ubuntu3vulnerable
Ubuntulxdpro3.0.0~beta5-0ubuntu2vulnerable
Ubuntulxdpro3.0.0~beta7-0ubuntu1vulnerable
Ubuntulxdpro3.0.0-0ubuntu1vulnerable
Ubuntulxdpro3.0.0-0ubuntu2vulnerable
Ubuntulxdpro3.0.0-0ubuntu3vulnerable
Ubuntulxdpro3.0.0-0ubuntu4vulnerable
Ubuntulxdpro3.0.1-0ubuntu1~18.04.1vulnerable
Ubuntulxdpro3.0.2-0ubuntu1~18.04.1vulnerable
Ubuntulxdpro3.0.3-0ubuntu1~18.04.1vulnerable
Ubuntulxdpro3.0.3-0ubuntu1~18.04.2vulnerable
Ubuntulxdpro3.0.3-0ubuntu1~18.04.2+esm1vulnerable
Ubuntulxdpro3.0.3-0ubuntu1~18.04.2+esm2vulnerable
Ubuntulxdpro3.0.3-0ubuntu1~18.04.2+esm3vulnerable
Ubuntugoogle-guest-agent22.0420210629.00-0ubuntu1vulnerable
Ubuntugoogle-guest-agent22.0420210629.00-0ubuntu2vulnerable
Ubuntugoogle-guest-agent22.0420220104.00-0ubuntu1vulnerable
Ubuntugoogle-guest-agent22.0420220104.00-0ubuntu2vulnerable
Ubuntugoogle-guest-agent22.0420220622.00-0ubuntu2~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420220622.00-0ubuntu2~22.04.1vulnerable
Ubuntugoogle-guest-agent22.0420230426.00-0ubuntu2~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.1vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.2vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.3vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.4vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.5vulnerable
Ubuntugoogle-guest-agent22.0420240716.00-0ubuntu1~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420241011.01-0ubuntu1~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420250116.00-0ubuntu1~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420250116.00-0ubuntu1~22.04.1fixed
Ubuntugoogle-guest-agent24.0420230426.00-0ubuntu3vulnerable
Ubuntugoogle-guest-agent24.0420231004.02-0ubuntu1vulnerable
Ubuntugoogle-guest-agent24.0420231004.02-0ubuntu3vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu1vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu2vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu3vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu3.1vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu3.2vulnerable
Ubuntugoogle-guest-agent24.0420240716.00-0ubuntu1~24.04.0vulnerable
Ubuntugoogle-guest-agent24.0420240716.00-0ubuntu1~24.04.1vulnerable
Ubuntugoogle-guest-agent24.0420241011.01-0ubuntu1~24.04.0vulnerable
Ubuntugoogle-guest-agent24.0420250116.00-0ubuntu1~24.04.0vulnerable
Ubuntugoogle-guest-agent24.0420250116.00-0ubuntu1~24.04.1vulnerable
Ubuntugoogle-guest-agent24.0420250116.00-0ubuntu1~24.04.2fixed
Ubuntugolang-go.crypto25.101:0.25.0-1vulnerable
Ubuntugolang-go.crypto25.101:0.25.0-1ubuntu0.1vulnerable
Ubuntugolang-go.cryptopro1:0.4.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.17.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.18.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.19.0-1vulnerable
Ubuntugolang-go.cryptopro1:0.19.0-1ubuntu0.1~esm1fixed
Ubuntugoogle-guest-agentpro20201217.02-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20210414.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20210629.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20220622.00-0ubuntu2~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20220622.00-0ubuntu2~20.04.2vulnerable
Ubuntugoogle-guest-agentpro20230426.00-0ubuntu2~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.1vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.2vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.3vulnerable
Ubuntugoogle-guest-agentpro20231004.02-0ubuntu1~20.04.4vulnerable
Ubuntugoogle-guest-agentpro20240716.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20241011.01-0ubuntu1~20.04.1vulnerable
Ubuntugoogle-guest-agentpro20250116.00-0ubuntu1~20.04.0vulnerable
Ubuntugoogle-guest-agentpro20250116.00-0ubuntu1~20.04.0+esm1fixed
Ubuntugoogle-guest-agent22.0420210629.00-0ubuntu1vulnerable
Ubuntugoogle-guest-agent22.0420210629.00-0ubuntu2vulnerable
Ubuntugoogle-guest-agent22.0420220104.00-0ubuntu1vulnerable
Ubuntugoogle-guest-agent22.0420220104.00-0ubuntu2vulnerable
Ubuntugoogle-guest-agent22.0420220622.00-0ubuntu2~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420220622.00-0ubuntu2~22.04.1vulnerable
Ubuntugoogle-guest-agent22.0420230426.00-0ubuntu2~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.1vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.2vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.3vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.4vulnerable
Ubuntugoogle-guest-agent22.0420231004.02-0ubuntu1~22.04.5vulnerable
Ubuntugoogle-guest-agent22.0420240716.00-0ubuntu1~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420241011.01-0ubuntu1~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420250116.00-0ubuntu1~22.04.0vulnerable
Ubuntugoogle-guest-agent22.0420250116.00-0ubuntu1~22.04.1fixed
Ubuntugoogle-guest-agent24.0420230426.00-0ubuntu3vulnerable
Ubuntugoogle-guest-agent24.0420231004.02-0ubuntu1vulnerable
Ubuntugoogle-guest-agent24.0420231004.02-0ubuntu3vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu1vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu2vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu3vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu3.1vulnerable
Ubuntugoogle-guest-agent24.0420240213.00-0ubuntu3.2vulnerable
Ubuntugoogle-guest-agent24.0420240716.00-0ubuntu1~24.04.0vulnerable
Ubuntugoogle-guest-agent24.0420240716.00-0ubuntu1~24.04.1vulnerable
Ubuntugoogle-guest-agent24.0420241011.01-0ubuntu1~24.04.0vulnerable
Ubuntugoogle-guest-agent24.0420250116.00-0ubuntu1~24.04.0vulnerable
Ubuntugoogle-guest-agent24.0420250116.00-0ubuntu1~24.04.1vulnerable
Ubuntugoogle-guest-agent24.0420250116.00-0ubuntu1~24.04.2fixed
Opensusevexctltumbleweed0.4.1+git78.f951e3a-1.1fixed
Opensusegit-bugleap 16.00.10.1-bp160.1.1fixed
Opensuseminikubetumbleweed1.36.0-2.1fixed
Susekubevirtlinux enterprise module for containers 15 sp71.5.2-150700.3.5.2fixed
Susehelmlinux micro 6.13.17.2-slfo.1.1_1.1fixed
Susekubevirtlinux enterprise module for containers 15 sp61.4.1-150600.5.24.1fixed
Opensusekubevirtleap 15.61.4.1-150600.5.24.1fixed
Susehelmlinux micro 6.03.17.2-1.1fixed
Opensusevexctlleap 15.60.4.1+git78.f951e3a-150000.1.11.1fixed
Susegovulncheck-vulndblinux enterprise module for package hub 15 sp60.0.20250226T025151-150000.1.35.1fixed
Opensusegovulncheck-vulndbleap 15.60.0.20250226T025151-150000.1.35.1fixed
Opensuseteleporttumbleweed17.0.5-1.1fixed
Opensuserclonetumbleweed1.69.0-1.1fixed
Susebriselinux enterprise module for desktop applications 15 sp620230603+git.5fdd2d6-150600.3.8.1fixed
Opensusebriseleap 15.620230603+git.5fdd2d6-150600.3.8.1fixed
Opensusevelerotumbleweed1.15.1-1.1fixed
Opensusegolang-github-prometheus-prometheustumbleweed3.1.0-1.1fixed
Susegoogle-guest-agentlinux enterprise micro 5.520250327.01-150000.1.60.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp320250327.01-150000.1.60.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp420250327.01-150000.1.60.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp520250327.01-150000.1.60.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 15 sp620250327.01-150000.1.60.1fixed
Opensusegoogle-guest-agentleap 15.620250327.01-150000.1.60.1fixed
Opensusetraefik2tumbleweed2.11.16-1.1fixed
Opensusecloudflaredtumbleweed2024.12.1-1.1fixed
Opensusetraefiktumbleweed3.2.3-1.1fixed
Opensusetailscaletumbleweed1.78.3-2.1fixed
Opensusegit-bugtumbleweed0.8.0+git.1733745604.d499b6e-1.1fixed
Opensusegrafanatumbleweed11.3.0-4.1fixed
Susecheatpackage hub 15 sp64.4.2-bp156.3.3.1fixed
Opensusecheatleap 15.64.4.2-bp156.3.3.1fixed
Opensusegitleakstumbleweed8.24.2-1.1fixed
Opensusegopasstumbleweed1.15.16-1.1fixed
Opensusegoogle-guest-agenttumbleweed20250327.01-1.1fixed
Susegitea-teapackage hub 15 sp60.9.2-bp156.5.1fixed
Opensusegitea-tealeap 15.60.9.2-bp156.5.1fixed
Opensuserime-plum-gotumbleweed1.0.3-1.1fixed
Susegoogle-guest-agentlinux enterprise module for public cloud 1220250327.01-1.50.1fixed
Susehelmlinux enterprise micro 5.53.17.1-150000.1.41.1fixed
Susehelmlinux enterprise module for containers 15 sp63.17.1-150000.1.41.1fixed
Susehelmlinux enterprise module for package hub 15 sp63.17.1-150000.1.41.1fixed
Susehelmlinux enterprise high performance computing 15 sp3-ltss3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise high performance computing 15 sp4-espos3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise high performance computing 15 sp4-ltss3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise high performance computing 15 sp5-espos3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise high performance computing 15 sp5-ltss3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise server 15 sp3-ltss3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise server 15 sp4-ltss3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise server 15 sp5-ltss3.17.1-150000.1.41.1fixed
Susehelmlinux enterprise server for sap applications 15 sp33.17.1-150000.1.41.1fixed
Susehelmlinux enterprise server for sap applications 15 sp43.17.1-150000.1.41.1fixed
Susehelmlinux enterprise server for sap applications 15 sp53.17.1-150000.1.41.1fixed
Susehelmenterprise storage 7.13.17.1-150000.1.41.1fixed
Opensusehelmleap 15.63.17.1-150000.1.41.1fixed
Opensuselokitumbleweed3.3.2-1.1fixed
Opensusehelmtumbleweed3.16.4-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-go.cryptosourcesid1:0.42.0-1not yet assignedNot reported[1089754]
Debiangolang-go.cryptosourceforky1:0.42.0-1not yet assignedNot reported[1089754]
Debiangolang-go.cryptosourcetrixie(unfixed)not yet assignedNot reported[1089754]
Debiangolang-go.cryptosourcebookworm(unfixed)not yet assignedNot reported[1089754]
Ubuntugoogle-guest-agentdebnoble20250116.00-0ubuntu1~24.04.2Not reportedNot reportedNot reported
Ubuntugolang-go.cryptodebnoble1:0.19.0-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntugolang-golang-x-crypto-devdebnoble1:0.19.0-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Gogolang.org/x/cryptoGoNot reported0.31.0Not reportedGHSA-V778-237X-GJRCNot reported
Opensusegitea-tearpmleap 16.00.15.1-bp160.1.1Not reportedOPENSUSE-SU-2026:21603-1Not reported
Opensusevexctlrpmleap 16.00.4.4+git20.5d61136-160000.1.1Not reportedOPENSUSE-SU-2026:21481-1Not reported
Ubuntugolang-go.cryptodebpro1:0.19.0-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2024-45337Not reported
Ubuntugoogle-guest-agentdebpro20250116.00-0ubuntu1~20.04.0+esm1Not reportedUBUNTU-CVE-2024-45337Not reported
Ubuntugoogle-guest-agentdeb22.0420250116.00-0ubuntu1~22.04.1Not reportedUBUNTU-CVE-2024-45337Not reported
Ubuntugoogle-guest-agentdeb24.0420250116.00-0ubuntu1~24.04.2Not reportedUBUNTU-CVE-2024-45337Not reported
Ubuntugolang-go.cryptodebpro1:0.19.0-1ubuntu0.1~esm1Not reportedUSN-7839-1Not reported
Ubuntugoogle-guest-agentdebpro20250116.00-0ubuntu1~20.04.0+esm1Not reportedUSN-7839-2Not reported
Ubuntugoogle-guest-agentdeb22.0420250116.00-0ubuntu1~22.04.1Not reportedUSN-7839-2Not reported
Ubuntugoogle-guest-agentdeb24.0420250116.00-0ubuntu1~24.04.2Not reportedUSN-7839-2Not reported
Opensusevexctlrpmtumbleweed0.4.1+git78.f951e3a-1.1Not reportedOPENSUSE-SU-2026:10230-1Not reported
Opensusegit-bugrpmleap 16.00.10.1-bp160.1.1Not reportedOPENSUSE-SU-2025:20143-1Not reported
Opensuseminikuberpmtumbleweed1.36.0-2.1Not reportedOPENSUSE-SU-2025:15463-1Not reported
Susekubevirtrpmlinux enterprise module for containers 15 sp71.5.2-150700.3.5.2Not reportedSUSE-SU-2025:02581-1Not reported
Susehelmrpmlinux micro 6.13.17.2-slfo.1.1_1.1Not reportedSUSE-SU-2025:20278-1Not reported
Susekubevirtrpmlinux enterprise module for containers 15 sp61.4.1-150600.5.24.1Not reportedSUSE-SU-2025:03278-1Not reported
Opensusekubevirtrpmleap 15.61.4.1-150600.5.24.1Not reportedSUSE-SU-2025:03278-1Not reported
Susehelmrpmlinux micro 6.03.17.2-1.1Not reportedSUSE-SU-2025:20196-1Not reported
Opensusevexctlrpmleap 15.60.4.1+git78.f951e3a-150000.1.11.1Not reportedSUSE-SU-2026:0592-1Not reported
Susegovulncheck-vulndbrpmlinux enterprise module for package hub 15 sp60.0.20250226T025151-150000.1.35.1Not reportedSUSE-SU-2025:0770-1Not reported
Opensusegovulncheck-vulndbrpmleap 15.60.0.20250226T025151-150000.1.35.1Not reportedSUSE-SU-2025:0770-1Not reported
Opensuseteleportrpmtumbleweed17.0.5-1.1Not reportedOPENSUSE-SU-2024:14573-1Not reported
Opensuserclonerpmtumbleweed1.69.0-1.1Not reportedOPENSUSE-SU-2025:14641-1Not reported
Susebriserpmlinux enterprise module for desktop applications 15 sp620230603+git.5fdd2d6-150600.3.8.1Not reportedSUSE-SU-2025:0601-1Not reported
Opensusebriserpmleap 15.620230603+git.5fdd2d6-150600.3.8.1Not reportedSUSE-SU-2025:0601-1Not reported
Opensusevelerorpmtumbleweed1.15.1-1.1Not reportedOPENSUSE-SU-2025:14613-1Not reported
Opensusegolang-github-prometheus-prometheusrpmtumbleweed3.1.0-1.1Not reportedOPENSUSE-SU-2025:14660-1Not reported
Susegoogle-guest-agentrpmlinux enterprise micro 5.520250327.01-150000.1.60.1Not reportedSUSE-SU-2025:1143-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp320250327.01-150000.1.60.1Not reportedSUSE-SU-2025:1143-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp420250327.01-150000.1.60.1Not reportedSUSE-SU-2025:1143-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp520250327.01-150000.1.60.1Not reportedSUSE-SU-2025:1143-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 15 sp620250327.01-150000.1.60.1Not reportedSUSE-SU-2025:1143-1Not reported
Opensusegoogle-guest-agentrpmleap 15.620250327.01-150000.1.60.1Not reportedSUSE-SU-2025:1143-1Not reported
Opensusetraefik2rpmtumbleweed2.11.16-1.1Not reportedOPENSUSE-SU-2024:14595-1Not reported
Opensusecloudflaredrpmtumbleweed2024.12.1-1.1Not reportedOPENSUSE-SU-2024:14585-1Not reported
Opensusetraefikrpmtumbleweed3.2.3-1.1Not reportedOPENSUSE-SU-2024:14590-1Not reported
Opensusetailscalerpmtumbleweed1.78.3-2.1Not reportedOPENSUSE-SU-2024:14602-1Not reported
Opensusegit-bugrpmtumbleweed0.8.0+git.1733745604.d499b6e-1.1Not reportedOPENSUSE-SU-2024:14592-1Not reported
Opensusegrafanarpmtumbleweed11.3.0-4.1Not reportedOPENSUSE-SU-2025:14633-1Not reported
Susecheatrpmpackage hub 15 sp64.4.2-bp156.3.3.1Not reportedOPENSUSE-SU-2025:0025-1Not reported
Opensusecheatrpmleap 15.64.4.2-bp156.3.3.1Not reportedOPENSUSE-SU-2025:0025-1Not reported
Opensusegitleaksrpmtumbleweed8.24.2-1.1Not reportedOPENSUSE-SU-2025:14920-1Not reported
Opensusegopassrpmtumbleweed1.15.16-1.1Not reportedOPENSUSE-SU-2025:15013-1Not reported
Opensusegoogle-guest-agentrpmtumbleweed20250327.01-1.1Not reportedOPENSUSE-SU-2025:14969-1Not reported
Susegitea-tearpmpackage hub 15 sp60.9.2-bp156.5.1Not reportedOPENSUSE-SU-2025:0094-1Not reported
Opensusegitea-tearpmleap 15.60.9.2-bp156.5.1Not reportedOPENSUSE-SU-2025:0094-1Not reported
Opensuserime-plum-gorpmtumbleweed1.0.3-1.1Not reportedOPENSUSE-SU-2025:14902-1Not reported
Susegoogle-guest-agentrpmlinux enterprise module for public cloud 1220250327.01-1.50.1Not reportedSUSE-SU-2025:1142-1Not reported
Susehelmrpmlinux enterprise micro 5.53.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise module for containers 15 sp63.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise module for package hub 15 sp63.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise high performance computing 15 sp3-ltss3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise high performance computing 15 sp4-espos3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise high performance computing 15 sp4-ltss3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise high performance computing 15 sp5-espos3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise high performance computing 15 sp5-ltss3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise server 15 sp3-ltss3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise server 15 sp4-ltss3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise server 15 sp5-ltss3.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise server for sap applications 15 sp33.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise server for sap applications 15 sp43.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmlinux enterprise server for sap applications 15 sp53.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Susehelmrpmenterprise storage 7.13.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Opensusehelmrpmleap 15.63.17.1-150000.1.41.1Not reportedSUSE-SU-2025:0602-1Not reported
Opensuselokirpmtumbleweed3.3.2-1.1Not reportedOPENSUSE-SU-2024:14604-1Not reported
Opensusehelmrpmtumbleweed3.16.4-1.1Not reportedOPENSUSE-SU-2024:14593-1Not reported

[Debian bug #1089754]

Notes

[trixie] golang-go.crypto: Minor issue [bookworm] golang-go.crypto: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [golang-golang-x-crypto-dev]Affected

    Source package: [golang-go.crypto]

    Details (4)

    • 1:0.4.0-1 · all · bookworm

      Affected

      usn · golang-go.crypto · debian · bookworm; usn · golang-go.crypto · debian · 12

    • 1:0.4.0-1 · all · bookworm

      Affected

      usn · golang-go.crypto · debian · bookworm; usn · golang-go.crypto · debian · 12

    • 1:0.25.0-1~bpo12+1 · all · bookworm-backports

      Affected

      usn · golang-go.crypto · debian · bookworm; usn · golang-go.crypto · debian · 12

    • 1:0.25.0-1~bpo12+1 · all · bookworm-backports

      Affected

      usn · golang-go.crypto · debian · bookworm; usn · golang-go.crypto · debian · 12

[Debian 13 (Trixie)]

  • [golang-golang-x-crypto-dev]Affected

    Source package: [golang-go.crypto]

    Details (4)

    • 1:0.25.0-1 · all · trixie

      Affected

      usn · golang-go.crypto · debian · 13

    • 1:0.25.0-1 · all · trixie

      Affected

      usn · golang-go.crypto · debian · 13

    • 1:0.52.0-1~bpo13+1 · all · trixie-backports

      Affected

      usn · golang-go.crypto · debian · 13

    • 1:0.52.0-1~bpo13+1 · all · trixie-backports

      Affected

      usn · golang-go.crypto · debian · 13

[openSUSE Tumbleweed]

  • [git-bug-bash-completion]Unknown

    Source package: [git-bug]

    Details (1)

    • 0.10.1-6.3 · noarch · tumbleweed

      Unknown · Fixed: 0.8.0+git.1733745604.d499b6e-1.1

      Version impact unknown

      usn · git-bug · opensuse · tumbleweed

  • [git-bug-fish-completion]Unknown

    Source package: [git-bug]

    Details (1)

    • 0.10.1-6.3 · noarch · tumbleweed

      Unknown · Fixed: 0.8.0+git.1733745604.d499b6e-1.1

      Version impact unknown

      usn · git-bug · opensuse · tumbleweed

  • [git-bug-zsh-completion]Unknown

    Source package: [git-bug]

    Details (1)

    • 0.10.1-6.3 · noarch · tumbleweed

      Unknown · Fixed: 0.8.0+git.1733745604.d499b6e-1.1

      Version impact unknown

      usn · git-bug · opensuse · tumbleweed

  • [gitleaks-bash-completion]Unknown

    Source package: [gitleaks]

    Details (1)

    • 8.30.1-1.4 · noarch · tumbleweed

      Unknown · Fixed: 8.24.2-1.1

      Version impact unknown

      usn · gitleaks · opensuse · tumbleweed

  • [gitleaks-fish-completion]Unknown

    Source package: [gitleaks]

    Details (1)

    • 8.30.1-1.4 · noarch · tumbleweed

      Unknown · Fixed: 8.24.2-1.1

      Version impact unknown

      usn · gitleaks · opensuse · tumbleweed

  • [gitleaks-zsh-completion]Unknown

    Source package: [gitleaks]

    Details (1)

    • 8.30.1-1.4 · noarch · tumbleweed

      Unknown · Fixed: 8.24.2-1.1

      Version impact unknown

      usn · gitleaks · opensuse · tumbleweed

  • [gopass-bash-completion]Unknown

    Source package: [gopass]

    Details (1)

    • 1.16.1-1.7 · noarch · tumbleweed

      Unknown · Fixed: 1.15.16-1.1

      Version impact unknown

      usn · gopass · opensuse · tumbleweed

  • [gopass-fish-completion]Unknown

    Source package: [gopass]

    Details (1)

    • 1.16.1-1.7 · noarch · tumbleweed

      Unknown · Fixed: 1.15.16-1.1

      Version impact unknown

      usn · gopass · opensuse · tumbleweed

  • [gopass-impersonate-pass]Unknown

    Source package: [gopass]

    Details (1)

    • 1.16.1-1.7 · noarch · tumbleweed

      Unknown · Fixed: 1.15.16-1.1

      Version impact unknown

      usn · gopass · opensuse · tumbleweed

  • [gopass-zsh-completion]Unknown

    Source package: [gopass]

    Details (1)

    • 1.16.1-1.7 · noarch · tumbleweed

      Unknown · Fixed: 1.15.16-1.1

      Version impact unknown

      usn · gopass · opensuse · tumbleweed

  • [helm-bash-completion]Unknown

    Source package: [helm]

    Details (1)

    • 4.2.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 3.16.4-1.1

      Version impact unknown

      usn · helm · opensuse · tumbleweed

  • [helm-fish-completion]Unknown

    Source package: [helm]

    Details (1)

    • 4.2.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 3.16.4-1.1

      Version impact unknown

      usn · helm · opensuse · tumbleweed

  • [helm-zsh-completion]Unknown

    Source package: [helm]

    Details (1)

    • 4.2.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 3.16.4-1.1

      Version impact unknown

      usn · helm · opensuse · tumbleweed

  • [logcli]Unknown

    Source package: [loki]

    Details (1)

    • 3.7.6-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.3.2-1.1

      Version impact unknown

      usn · loki · opensuse · tumbleweed

  • [lokitool]Unknown

    Source package: [loki]

    Details (1)

    • 3.7.6-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.3.2-1.1

      Version impact unknown

      usn · loki · opensuse · tumbleweed

  • [minikube-bash-completion]Unknown

    Source package: [minikube]

    Details (1)

    • 1.38.1-1.4 · noarch · tumbleweed

      Unknown · Fixed: 1.36.0-2.1

      Version impact unknown

      usn · minikube · opensuse · tumbleweed

  • [minikube-fish-completion]Unknown

    Source package: [minikube]

    Details (1)

    • 1.38.1-1.4 · noarch · tumbleweed

      Unknown · Fixed: 1.36.0-2.1

      Version impact unknown

      usn · minikube · opensuse · tumbleweed

  • [minikube-zsh-completion]Unknown

    Source package: [minikube]

    Details (1)

    • 1.38.1-1.4 · noarch · tumbleweed

      Unknown · Fixed: 1.36.0-2.1

      Version impact unknown

      usn · minikube · opensuse · tumbleweed

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]