Fedora 46 : rootlesskit (2026-ec725c24c1)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ec725c24c1 advisory. Automatic update for rootlesskit-3.2.0-1.fc46. Changelog Sun Sep 20 2026 Bradley G Smith - 3.2.0-1 - Update to release v3.2.0 - Resolves: rhbz253087...

SUSE SLES15 Security Update : rootlesskit (SUSE-SU-2026:3785-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3785-1 advisory. This update for rootlesskit rebuilds it against the current go security release. Tenable has extracted the preceding description block...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: multus-cni, multus-cni-fips, k3s, buildah, containerd-fips, rootlesskit, nerdctl, containerd, nerdctl-fips, buildkitd, flannel-fips, amazon-k8s-cni-fips, flannel, calico, buildkitd-fips, rootlesskit-fips, datadog-agent-fips, rke2-runtime, docker, istio-fips,...

GO-2025-4222 vulnerabilities

Vulnerabilities for packages: nerdctl, flannel, multus-cni, docker, podman, istio, k3s, containerd, calico, azure-ipam, buildah, buildkitd, kuma, datadog-agent, rootlesskit...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: nfpm, timoni, configmap-reload, go-licenses, delve, swagger, ini-file, container-object-storage-interface, octo-sts, trillian, gptscript, cluster-api-helm-controller, whereabouts, amass, harbor, cortex, stern, rancher-helm, q, stakater-reloader, sigstore-scaffolding,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, cluster-api-gcp-controller, distribution, mesosphere-vsphere-csi, cfssl, oauth2-proxy, conjur-cli, fscrypt, gke-gcloud-auth-plugin, timoni, kubernetes-csi-driver-hostpath, configmap-reload, go-licenses, delve, slsa-verifier, restic,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, cluster-api-gcp-controller, distribution, mesosphere-vsphere-csi, cfssl, oauth2-proxy, conjur-cli, fscrypt, gke-gcloud-auth-plugin, timoni, kubernetes-csi-driver-hostpath, configmap-reload, go-licenses, delve, slsa-verifier, restic,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, cluster-api-gcp-controller, distribution, mesosphere-vsphere-csi, cfssl, oauth2-proxy, conjur-cli, fscrypt, gke-gcloud-auth-plugin, timoni, kubernetes-csi-driver-hostpath, configmap-reload, go-licenses, delve, slsa-verifier, restic,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, cluster-api-gcp-controller, distribution, mesosphere-vsphere-csi, cfssl, oauth2-proxy, conjur-cli, fscrypt, gke-gcloud-auth-plugin, timoni, kubernetes-csi-driver-hostpath, configmap-reload, go-licenses, delve, slsa-verifier, restic,...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: configmap-reload, go-licenses, kube-fluentd-operator, delve, ini-file, paranoia, aws-application-networking-k8s, trillian, hubble, whereabouts, amass, cortex, stern, rancher-helm, jaeger-operator, stakater-reloader, sigstore-scaffolding, hivemind, flannel,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: nfpm, timoni, gitea, consul-k8s, configmap-reload, kube-fluentd-operator, delve, swagger, aws-application-networking-k8s, container-object-storage-interface, octo-sts, trillian, whereabouts, amass, buildah, datadog-agent, gitaly, cortex, stern, kserve-rest-proxy, q,...

GO-2026-5856 vulnerabilities

Vulnerabilities for packages: nfpm, timoni, gitea, consul-k8s, kube-fluentd-operator, delve, rqlite, aws-application-networking-k8s, container-object-storage-interface, octo-sts, trillian, gptscript, cluster-api-helm-controller, hubble, whereabouts, amass, buildah, datadog-agent, gitaly, harbor,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: nfpm, timoni, gitea, consul-k8s, configmap-reload, kube-fluentd-operator, delve, swagger, aws-application-networking-k8s, container-object-storage-interface, octo-sts, trillian, whereabouts, amass, buildah, datadog-agent, gitaly, cortex, stern, kserve-rest-proxy, q,...

GO-2026-5018 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, nfpm, fscrypt, gitea, kubescape, cosign, slsa-verifier, flux-kustomize-controller, mattermost, melange, flux-notification-controller, tekton-chains, gptscript, buildah, buildkitd, tkn, datadog-agent, tflint, kargo, vault-benchmark,...

GO-2026-5019 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, nfpm, fscrypt, gitea, kubescape, cosign, slsa-verifier, flux-kustomize-controller, mattermost, melange, flux-notification-controller, tekton-chains, gptscript, buildah, buildkitd, tkn, datadog-agent, tflint, kargo, vault-benchmark,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, nfpm, fscrypt, gitea, kubescape, cosign, slsa-verifier, flux-kustomize-controller, mattermost, melange, flux-notification-controller, src, gptscript, tekton-chains, buildah, buildkitd, tkn, datadog-agent, sealed-secrets, tflint,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: nfpm, fscrypt, gitea, kubescape, mattermost, melange, gptscript, buildkitd, datadog-agent, kubernetes, skaffold, scorecard, chisel, zarf, pulumi-kubernetes-operator, minio, apko, rootlesskit, nerdctl, prometheus-operator, guac, osv-scanner, podman, istio, gitlab-kas,...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: nfpm, fscrypt, gitea, kubescape, mattermost, melange, gptscript, buildkitd, datadog-agent, kubernetes, skaffold, scorecard, chisel, zarf, pulumi-kubernetes-operator, minio, apko, rootlesskit, nerdctl, prometheus-operator, guac, osv-scanner, podman, istio, gitlab-kas,...

GO-2025-3563 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, timoni, go-licenses, kube-fluentd-operator, swagger, ini-file, paranoia, aws-application-networking-k8s, octo-sts, gptscript, amass, buildah, cortex, kserve-rest-proxy, jaeger-operator, q, lvm-driver, hivemind, nri-postgresql, elvis...

GO-2025-3595 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, timoni, gitea, go-licenses, kube-fluentd-operator, aws-application-networking-k8s, octo-sts, gptscript, cluster-api-helm-controller, hubble, whereabouts, amass, buildah, kargo, cortex, kserve-rest-proxy, jaeger-operator, q,...