Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Security update for aactl and related packages

published 9 months ago
Summary

A security issue affects aactl, amass, aws-flb-cloudwatch and 71 more (Chainguard). The advisory does not describe the issue in detail. Update to 0.4.12-r5 or later. See the linked advisory for details.

What to do
  • Update chainguard aactl to version 0.4.12-r5.
  • Update chainguard amass to version 4.2.0-r3.
  • Update chainguard aws-flb-cloudwatch to version 1.9.4-r6.
  • Update chainguard aws-flb-firehose to version 1.7.2-r6.
  • Update chainguard aws-flb-kinesis to version 1.10.2-r6.
  • Update chainguard bank-vaults-fips to version 1.20.4-r3.
  • Update chainguard cass-operator to version 1.18.2-r3.
  • Update chainguard cass-operator-fips to version 1.18.2-r1.
  • Update chainguard cni-plugins to version 1.4.0-r1.
  • Update chainguard cni-plugins-fips to version 1.4.0-r1.
  • Update chainguard configmap-reload to version 0.12.0-r3.
  • Update chainguard configmap-reload-fips to version 0.12.0-r2.
  • Update chainguard configmap-reload-fips-0.11 to version 0.11.1-r3.
  • Update chainguard cortex to version 1.16.0-r1.
  • Update chainguard ctop to version 0.7.7-r10.
  • Update chainguard dgraph to version 23.1.0-r4.
  • Update chainguard docker-cli to version 24.0.6-r1.
  • Update chainguard docker-credential-ecr-login to version 0.7.1-r8.
  • Update chainguard falco to version 0.37.1-r0.
  • Update chainguard falco-dev to version 0.37.1-r0.
  • Update chainguard falco-src to version 0.37.1-r0.
  • Update chainguard flannel-cni-plugin to version 1.2.0-r5.
  • Update chainguard fulcio-fips to version 1.4.3-r1.
  • Update chainguard gke-gcloud-auth-plugin to version 0.0.2-r6.
  • Update chainguard go-bindata to version 3.1.3-r15.
  • Update chainguard go-licenses to version 1.6.0-r8.
  • Update chainguard go-md2man to version 2.0.3-r1.
  • Update chainguard gobuster to version 3.6.0-r4.
  • Update chainguard gops to version 0.3.28-r4.
  • Update chainguard gosu to version 1.17-r2.
  • Update chainguard grpcurl to version 1.8.9-r2.
  • Update chainguard helm-push to version 0.10.4-r1.
  • Update chainguard hey to version 0.1.4-r9.
  • Update chainguard hubble-ui-backend to version 0.13.3-r1.
  • Update chainguard influx to version 2.7.3-r8.
  • Update chainguard ip-masq-agent to version 2.9.3-r6.
  • Update chainguard jsonnet-bundler to version 0.5.1-r1.
  • Update chainguard k3d to version 5.6.0-r5.
  • Update chainguard katib-suggestion-optuna-enas to version 0.19.0-r31.
  • Update chainguard kind to version 0.21.0-r0.
  • Update chainguard kube-logging-logging-operator-4.1 to version 4.1.0-r3.
  • Update chainguard kubernetes-csi-livenessprobe-2.10 to version 2.10.0-r4.
  • Update chainguard kubernetes-csi-livenessprobe-fips to version 2.11.0-r4.
  • Update chainguard kubernetes-csi-livenessprobe-fips-2.10 to version 2.10.0-r4.
  • Update chainguard kubernetes-dashboard-metrics-scraper to version 1.0.9-r10.
  • Update chainguard kubernetes-dashboard-metrics-scraper-compat to version 1.0.9-r10.
  • Update chainguard local-path-provisioner to version 0.0.26-r2.
  • Update chainguard mage to version 1.15.0-r4.
  • Update chainguard metrics-server to version 0.6.4-r8.
  • Update chainguard nats to version 0.1.1-r4.
  • Update chainguard nri-discovery-kubernetes to version 1.7.2-r2.
  • Update chainguard nsc to version 2.8.5-r1.
  • Update chainguard oras to version 1.1.0-r4.
  • Update chainguard petname to version 2.11-r3.
  • Update chainguard prometheus-adapter-fips-0.10 to version 0.10.1-r2.
  • Update chainguard prometheus-beat-exporter-fips to version 0.4.0-r1.
  • Update chainguard prometheus-bind-exporter to version 0.7.0-r5.
  • Update chainguard prometheus-stackdriver-exporter to version 0.14.1-r7.
  • Update chainguard prometheus-statsd-exporter-fips-0.22 to version 0.22.8-r1.
  • Update chainguard protoc-gen-go-grpc to version 1.3.0-r7.
  • Update chainguard render-template to version 1.0.6-r1.
  • Update chainguard sbom-scorecard to version 0.0.7-r6.
  • Update chainguard scorecard to version 4.13.1-r1.
  • Update chainguard slsa-verifier to version 2.4.1-r1.
  • Update chainguard smarter-device-manager to version 1.20.11-r3.
  • Update chainguard smarter-device-manager-fips to version 1.20.11-r2.
  • Update chainguard sonobuoy to version 0.57.1-r1.
  • Update chainguard sops to version 3.8.1-r1.
  • Update chainguard stakater-reloader-0.0.119 to version 0.0.119-r4.
  • Update chainguard stakater-reloader-0.0.128 to version 0.0.128-r3.
  • Update chainguard tigera-operator-1.28 to version 1.28.15-r2.
  • Update chainguard tigera-operator-1.29 to version 1.29.8-r1.
  • Update chainguard vertical-pod-autoscaler to version 1.0.0-r2.
  • Update chainguard wait-for-port to version 1.0.7-r1.
  • Update wolfi aactl to version 0.4.12-r5.
  • Update wolfi amass to version 4.2.0-r3.
  • Update wolfi aws-flb-cloudwatch to version 1.9.4-r6.
  • Update wolfi aws-flb-firehose to version 1.7.2-r6.
  • Update wolfi aws-flb-kinesis to version 1.10.2-r6.
  • Update wolfi cass-operator to version 1.18.2-r3.
  • Update wolfi cni-plugins to version 1.4.0-r1.
  • Update wolfi configmap-reload to version 0.12.0-r3.
  • Update wolfi cortex to version 1.16.0-r1.
  • Update wolfi ctop to version 0.7.7-r10.
  • Update wolfi dgraph to version 23.1.0-r4.
  • Update wolfi docker-cli to version 24.0.6-r1.
  • Update wolfi docker-credential-ecr-login to version 0.7.1-r8.
  • Update wolfi falco to version 0.37.1-r0.
  • Update wolfi falco-dev to version 0.37.1-r0.
  • Update wolfi falco-src to version 0.37.1-r0.
  • Update wolfi flannel-cni-plugin to version 1.2.0-r5.
  • Update wolfi gke-gcloud-auth-plugin to version 0.0.2-r6.
  • Update wolfi go-bindata to version 3.1.3-r15.
  • Update wolfi go-licenses to version 1.6.0-r8.
  • Update wolfi go-md2man to version 2.0.3-r1.
  • Update wolfi gobuster to version 3.6.0-r4.
  • Update wolfi gops to version 0.3.28-r4.
  • Update wolfi gosu to version 1.17-r2.
  • Update wolfi grpcurl to version 1.8.9-r2.
  • Update wolfi helm-push to version 0.10.4-r1.
  • Update wolfi hey to version 0.1.4-r9.
  • Update wolfi hubble-ui-backend to version 0.13.3-r1.
  • Update wolfi influx to version 2.7.3-r8.
  • Update wolfi ip-masq-agent to version 2.9.3-r6.
  • Update wolfi k3d to version 5.6.0-r5.
  • Update wolfi katib-suggestion-optuna-enas to version 0.19.0-r31.
  • Update wolfi kind to version 0.21.0-r0.
  • Update wolfi kubernetes-dashboard-metrics-scraper to version 1.0.9-r10.
  • Update wolfi kubernetes-dashboard-metrics-scraper-compat to version 1.0.9-r10.
  • Update wolfi local-path-provisioner to version 0.0.26-r2.
  • Update wolfi mage to version 1.15.0-r4.
  • Update wolfi metrics-server to version 0.6.4-r8.
  • Update wolfi nats to version 0.1.1-r4.
  • Update wolfi nri-discovery-kubernetes to version 1.7.2-r2.
  • Update wolfi nsc to version 2.8.5-r1.
  • Update wolfi oras to version 1.1.0-r4.
  • Update wolfi petname to version 2.11-r3.
  • Update wolfi protoc-gen-go-grpc to version 1.3.0-r7.
  • Update wolfi render-template to version 1.0.6-r1.
  • Update wolfi sbom-scorecard to version 0.0.7-r6.
  • Update wolfi scorecard to version 4.13.1-r1.
  • Update wolfi slsa-verifier to version 2.4.1-r1.
  • Update wolfi smarter-device-manager to version 1.20.11-r3.
  • Update wolfi sonobuoy to version 0.57.1-r1.
  • Update wolfi sops to version 3.8.1-r1.
  • Update wolfi vertical-pod-autoscaler to version 1.0.0-r2.
  • Update wolfi wait-for-port to version 1.0.7-r1.
Affected software
Ecosystem VendorProductAffected versions
Chainguard chainguard aactl < 0.4.12-r5
Fix: upgrade to 0.4.12-r5
Chainguard chainguard amass < 4.2.0-r3
Fix: upgrade to 4.2.0-r3
Chainguard chainguard aws-flb-cloudwatch < 1.9.4-r6
Fix: upgrade to 1.9.4-r6
Chainguard chainguard aws-flb-firehose < 1.7.2-r6
Fix: upgrade to 1.7.2-r6
Chainguard chainguard aws-flb-kinesis < 1.10.2-r6
Fix: upgrade to 1.10.2-r6
Chainguard chainguard bank-vaults-fips < 1.20.4-r3
Fix: upgrade to 1.20.4-r3
Chainguard chainguard cass-operator < 1.18.2-r3
Fix: upgrade to 1.18.2-r3
Chainguard chainguard cass-operator-fips < 1.18.2-r1
Fix: upgrade to 1.18.2-r1
Chainguard chainguard cni-plugins < 1.4.0-r1
Fix: upgrade to 1.4.0-r1
Chainguard chainguard cni-plugins-fips < 1.4.0-r1
Fix: upgrade to 1.4.0-r1
Chainguard chainguard configmap-reload < 0.12.0-r3
Fix: upgrade to 0.12.0-r3
Chainguard chainguard configmap-reload-fips < 0.12.0-r2
Fix: upgrade to 0.12.0-r2
Chainguard chainguard configmap-reload-fips-0.11 < 0.11.1-r3
Fix: upgrade to 0.11.1-r3
Chainguard chainguard cortex < 1.16.0-r1
Fix: upgrade to 1.16.0-r1
Chainguard chainguard ctop < 0.7.7-r10
Fix: upgrade to 0.7.7-r10
Chainguard chainguard dgraph < 23.1.0-r4
Fix: upgrade to 23.1.0-r4
Chainguard chainguard docker-cli < 24.0.6-r1
Fix: upgrade to 24.0.6-r1
Chainguard chainguard docker-credential-ecr-login < 0.7.1-r8
Fix: upgrade to 0.7.1-r8
Chainguard chainguard falco < 0.37.1-r0
Fix: upgrade to 0.37.1-r0
Chainguard chainguard falco-dev < 0.37.1-r0
Fix: upgrade to 0.37.1-r0
Chainguard chainguard falco-src < 0.37.1-r0
Fix: upgrade to 0.37.1-r0
Chainguard chainguard flannel-cni-plugin < 1.2.0-r5
Fix: upgrade to 1.2.0-r5
Chainguard chainguard fulcio-fips < 1.4.3-r1
Fix: upgrade to 1.4.3-r1
Chainguard chainguard gke-gcloud-auth-plugin < 0.0.2-r6
Fix: upgrade to 0.0.2-r6
Chainguard chainguard go-bindata < 3.1.3-r15
Fix: upgrade to 3.1.3-r15
Chainguard chainguard go-licenses < 1.6.0-r8
Fix: upgrade to 1.6.0-r8
Chainguard chainguard go-md2man < 2.0.3-r1
Fix: upgrade to 2.0.3-r1
Chainguard chainguard gobuster < 3.6.0-r4
Fix: upgrade to 3.6.0-r4
Chainguard chainguard gops < 0.3.28-r4
Fix: upgrade to 0.3.28-r4
Chainguard chainguard gosu < 1.17-r2
Fix: upgrade to 1.17-r2
Chainguard chainguard grpcurl < 1.8.9-r2
Fix: upgrade to 1.8.9-r2
Chainguard chainguard helm-push < 0.10.4-r1
Fix: upgrade to 0.10.4-r1
Chainguard chainguard hey < 0.1.4-r9
Fix: upgrade to 0.1.4-r9
Chainguard chainguard hubble-ui-backend < 0.13.3-r1
Fix: upgrade to 0.13.3-r1
Chainguard chainguard influx < 2.7.3-r8
Fix: upgrade to 2.7.3-r8
Chainguard chainguard ip-masq-agent < 2.9.3-r6
Fix: upgrade to 2.9.3-r6
Chainguard chainguard jsonnet-bundler < 0.5.1-r1
Fix: upgrade to 0.5.1-r1
Chainguard chainguard k3d < 5.6.0-r5
Fix: upgrade to 5.6.0-r5
Chainguard chainguard katib-suggestion-optuna-enas < 0.19.0-r31
Fix: upgrade to 0.19.0-r31
Chainguard chainguard kind < 0.21.0-r0
Fix: upgrade to 0.21.0-r0
Chainguard chainguard kube-logging-logging-operator-4.1 < 4.1.0-r3
Fix: upgrade to 4.1.0-r3
Chainguard chainguard kubernetes-csi-livenessprobe-2.10 < 2.10.0-r4
Fix: upgrade to 2.10.0-r4
Chainguard chainguard kubernetes-csi-livenessprobe-fips < 2.11.0-r4
Fix: upgrade to 2.11.0-r4
Chainguard chainguard kubernetes-csi-livenessprobe-fips-2.10 < 2.10.0-r4
Fix: upgrade to 2.10.0-r4
Chainguard chainguard kubernetes-dashboard-metrics-scraper < 1.0.9-r10
Fix: upgrade to 1.0.9-r10
Chainguard chainguard kubernetes-dashboard-metrics-scraper-compat < 1.0.9-r10
Fix: upgrade to 1.0.9-r10
Chainguard chainguard local-path-provisioner < 0.0.26-r2
Fix: upgrade to 0.0.26-r2
Chainguard chainguard mage < 1.15.0-r4
Fix: upgrade to 1.15.0-r4
Chainguard chainguard metrics-server < 0.6.4-r8
Fix: upgrade to 0.6.4-r8
Chainguard chainguard nats < 0.1.1-r4
Fix: upgrade to 0.1.1-r4
Showing 50 of 127. Show the rest
Ecosystem VendorProductAffected versions
Chainguard chainguard nri-discovery-kubernetes < 1.7.2-r2
Fix: upgrade to 1.7.2-r2
Chainguard chainguard nsc < 2.8.5-r1
Fix: upgrade to 2.8.5-r1
Chainguard chainguard oras < 1.1.0-r4
Fix: upgrade to 1.1.0-r4
Chainguard chainguard petname < 2.11-r3
Fix: upgrade to 2.11-r3
Chainguard chainguard prometheus-adapter-fips-0.10 < 0.10.1-r2
Fix: upgrade to 0.10.1-r2
Chainguard chainguard prometheus-beat-exporter-fips < 0.4.0-r1
Fix: upgrade to 0.4.0-r1
Chainguard chainguard prometheus-bind-exporter < 0.7.0-r5
Fix: upgrade to 0.7.0-r5
Chainguard chainguard prometheus-stackdriver-exporter < 0.14.1-r7
Fix: upgrade to 0.14.1-r7
Chainguard chainguard prometheus-statsd-exporter-fips-0.22 < 0.22.8-r1
Fix: upgrade to 0.22.8-r1
Chainguard chainguard protoc-gen-go-grpc < 1.3.0-r7
Fix: upgrade to 1.3.0-r7
Chainguard chainguard render-template < 1.0.6-r1
Fix: upgrade to 1.0.6-r1
Chainguard chainguard sbom-scorecard < 0.0.7-r6
Fix: upgrade to 0.0.7-r6
Chainguard chainguard scorecard < 4.13.1-r1
Fix: upgrade to 4.13.1-r1
Chainguard chainguard slsa-verifier < 2.4.1-r1
Fix: upgrade to 2.4.1-r1
Chainguard chainguard smarter-device-manager < 1.20.11-r3
Fix: upgrade to 1.20.11-r3
Chainguard chainguard smarter-device-manager-fips < 1.20.11-r2
Fix: upgrade to 1.20.11-r2
Chainguard chainguard sonobuoy < 0.57.1-r1
Fix: upgrade to 0.57.1-r1
Chainguard chainguard sops < 3.8.1-r1
Fix: upgrade to 3.8.1-r1
Chainguard chainguard stakater-reloader-0.0.119 < 0.0.119-r4
Fix: upgrade to 0.0.119-r4
Chainguard chainguard stakater-reloader-0.0.128 < 0.0.128-r3
Fix: upgrade to 0.0.128-r3
Chainguard chainguard tigera-operator-1.28 < 1.28.15-r2
Fix: upgrade to 1.28.15-r2
Chainguard chainguard tigera-operator-1.29 < 1.29.8-r1
Fix: upgrade to 1.29.8-r1
Chainguard chainguard vertical-pod-autoscaler < 1.0.0-r2
Fix: upgrade to 1.0.0-r2
Chainguard chainguard wait-for-port < 1.0.7-r1
Fix: upgrade to 1.0.7-r1
Wolfi wolfi aactl < 0.4.12-r5
Fix: upgrade to 0.4.12-r5
Wolfi wolfi amass < 4.2.0-r3
Fix: upgrade to 4.2.0-r3
Wolfi wolfi aws-flb-cloudwatch < 1.9.4-r6
Fix: upgrade to 1.9.4-r6
Wolfi wolfi aws-flb-firehose < 1.7.2-r6
Fix: upgrade to 1.7.2-r6
Wolfi wolfi aws-flb-kinesis < 1.10.2-r6
Fix: upgrade to 1.10.2-r6
Wolfi wolfi cass-operator < 1.18.2-r3
Fix: upgrade to 1.18.2-r3
Wolfi wolfi cni-plugins < 1.4.0-r1
Fix: upgrade to 1.4.0-r1
Wolfi wolfi configmap-reload < 0.12.0-r3
Fix: upgrade to 0.12.0-r3
Wolfi wolfi cortex < 1.16.0-r1
Fix: upgrade to 1.16.0-r1
Wolfi wolfi ctop < 0.7.7-r10
Fix: upgrade to 0.7.7-r10
Wolfi wolfi dgraph < 23.1.0-r4
Fix: upgrade to 23.1.0-r4
Wolfi wolfi docker-cli < 24.0.6-r1
Fix: upgrade to 24.0.6-r1
Wolfi wolfi docker-credential-ecr-login < 0.7.1-r8
Fix: upgrade to 0.7.1-r8
Wolfi wolfi falco < 0.37.1-r0
Fix: upgrade to 0.37.1-r0
Wolfi wolfi falco-dev < 0.37.1-r0
Fix: upgrade to 0.37.1-r0
Wolfi wolfi falco-src < 0.37.1-r0
Fix: upgrade to 0.37.1-r0
Wolfi wolfi flannel-cni-plugin < 1.2.0-r5
Fix: upgrade to 1.2.0-r5
Wolfi wolfi gke-gcloud-auth-plugin < 0.0.2-r6
Fix: upgrade to 0.0.2-r6
Wolfi wolfi go-bindata < 3.1.3-r15
Fix: upgrade to 3.1.3-r15
Wolfi wolfi go-licenses < 1.6.0-r8
Fix: upgrade to 1.6.0-r8
Wolfi wolfi go-md2man < 2.0.3-r1
Fix: upgrade to 2.0.3-r1
Wolfi wolfi gobuster < 3.6.0-r4
Fix: upgrade to 3.6.0-r4
Wolfi wolfi gops < 0.3.28-r4
Fix: upgrade to 0.3.28-r4
Wolfi wolfi gosu < 1.17-r2
Fix: upgrade to 1.17-r2
Wolfi wolfi grpcurl < 1.8.9-r2
Fix: upgrade to 1.8.9-r2
Wolfi wolfi helm-push < 0.10.4-r1
Fix: upgrade to 0.10.4-r1
Wolfi wolfi hey < 0.1.4-r9
Fix: upgrade to 0.1.4-r9
Wolfi wolfi hubble-ui-backend < 0.13.3-r1
Fix: upgrade to 0.13.3-r1
Wolfi wolfi influx < 2.7.3-r8
Fix: upgrade to 2.7.3-r8
Wolfi wolfi ip-masq-agent < 2.9.3-r6
Fix: upgrade to 2.9.3-r6
Wolfi wolfi k3d < 5.6.0-r5
Fix: upgrade to 5.6.0-r5
Wolfi wolfi katib-suggestion-optuna-enas < 0.19.0-r31
Fix: upgrade to 0.19.0-r31
Wolfi wolfi kind < 0.21.0-r0
Fix: upgrade to 0.21.0-r0
Wolfi wolfi kubernetes-dashboard-metrics-scraper < 1.0.9-r10
Fix: upgrade to 1.0.9-r10
Wolfi wolfi kubernetes-dashboard-metrics-scraper-compat < 1.0.9-r10
Fix: upgrade to 1.0.9-r10
Wolfi wolfi local-path-provisioner < 0.0.26-r2
Fix: upgrade to 0.0.26-r2
Wolfi wolfi mage < 1.15.0-r4
Fix: upgrade to 1.15.0-r4
Wolfi wolfi metrics-server < 0.6.4-r8
Fix: upgrade to 0.6.4-r8
Wolfi wolfi nats < 0.1.1-r4
Fix: upgrade to 0.1.1-r4
Wolfi wolfi nri-discovery-kubernetes < 1.7.2-r2
Fix: upgrade to 1.7.2-r2
Wolfi wolfi nsc < 2.8.5-r1
Fix: upgrade to 2.8.5-r1
Wolfi wolfi oras < 1.1.0-r4
Fix: upgrade to 1.1.0-r4
Wolfi wolfi petname < 2.11-r3
Fix: upgrade to 2.11-r3
Wolfi wolfi protoc-gen-go-grpc < 1.3.0-r7
Fix: upgrade to 1.3.0-r7
Wolfi wolfi render-template < 1.0.6-r1
Fix: upgrade to 1.0.6-r1
Wolfi wolfi sbom-scorecard < 0.0.7-r6
Fix: upgrade to 0.0.7-r6
Wolfi wolfi scorecard < 4.13.1-r1
Fix: upgrade to 4.13.1-r1
Wolfi wolfi slsa-verifier < 2.4.1-r1
Fix: upgrade to 2.4.1-r1
Wolfi wolfi smarter-device-manager < 1.20.11-r3
Fix: upgrade to 1.20.11-r3
Wolfi wolfi sonobuoy < 0.57.1-r1
Fix: upgrade to 0.57.1-r1
Wolfi wolfi sops < 3.8.1-r1
Fix: upgrade to 3.8.1-r1
Wolfi wolfi vertical-pod-autoscaler < 1.0.0-r2
Fix: upgrade to 1.0.0-r2
Wolfi wolfi wait-for-port < 1.0.7-r1
Fix: upgrade to 1.0.7-r1
Original advisory text
CGA-fxmm-m535-wqj5
Timeline
Published29 Jan 2026
Updated15 Jul 2026
First seen15 Jul 2026
Track software like this
Free during beta