Security updates¶
This page lists the F5 vulnerability bugs of this release.
CVE Fixes¶
| CVE Number | Bug IDs | Image Names | Package Name |
|---|---|---|---|
| CVE-2005-2541 | 2010441 | postgresql | tar |
| CVE-2007-5686 | 2010421 | postgresql | login |
| CVE-2010-4756 | 2010245 | postgresql | libc-bin |
| CVE-2011-3374 | 2010209 | postgresql | apt |
| CVE-2011-3389 | 2010285 | postgresql | libgnutls30 |
| CVE-2011-4116 | 2010345 | postgresql | libperl5.36 |
| CVE-2013-4392 | 2010365 | postgresql | libsystemd0 |
| CVE-2015-3276 | 2010293 | postgresql | libldap-2.5-0 |
| CVE-2015-9019 | 2010413 | postgresql | libxslt1.1 |
| CVE-2016-2781 | 2010221, 2101641, 2101821, 2101869, 2101945 | crdupdater, dnsx-img, f5-bdosd, f5-cert-client, postgresql | coreutils |
| CVE-2017-11164 | 2010321 | postgresql | libpcre3 |
| CVE-2017-13716 | 2011037, 2064625, 2138829 | f5-fluentd | binutils |
| CVE-2017-14159 | 2010297 | postgresql | libldap-2.5-0 |
| CVE-2017-16231 | 2010325 | postgresql | libpcre3 |
| CVE-2017-17740 | 2010301 | postgresql | libldap-2.5-0 |
| CVE-2017-18018 | 2010225 | postgresql | coreutils |
| CVE-2017-7245 | 2010329 | postgresql | libpcre3 |
| CVE-2017-7246 | 2010333 | postgresql | libpcre3 |
| CVE-2018-20796 | 2010249 | postgresql | libc-bin |
| CVE-2018-6829 | 2010277 | postgresql | libgcrypt20 |
| CVE-2019-1010022 | 2010253 | postgresql | libc-bin |
| CVE-2019-1010023 | 2010257 | postgresql | libc-bin |
| CVE-2019-1010024 | 2010261 | postgresql | libc-bin |
| CVE-2019-1010025 | 2010265 | postgresql | libc-bin |
| CVE-2019-20838 | 2010337 | postgresql | libpcre3 |
| CVE-2019-9192 | 2010269 | postgresql | libc-bin |
| CVE-2020-15719 | 2010305 | postgresql | libldap-2.5-0 |
| CVE-2021-45346 | 2010357 | postgresql | libsqlite3-0 |
| CVE-2022-0563 | 2010217 | postgresql | bsdutils |
| CVE-2022-27943 | 2010229 | postgresql | gcc-12-base |
| CVE-2022-3219 | 2010237 | postgresql | gpgv |
| CVE-2023-2953 | 2010289 | postgresql | libldap-2.5-0 |
| CVE-2023-31437 | 2010369 | postgresql | libsystemd0 |
| CVE-2023-31438 | 2010373 | postgresql | libsystemd0 |
| CVE-2023-31439 | 2010377 | postgresql | libsystemd0 |
| CVE-2023-31484 | 2010341 | postgresql | libperl5.36 |
| CVE-2023-31486 | 2010349 | postgresql | libperl5.36 |
| CVE-2023-4016 | 2010353 | postgresql | libproc2-0 |
| CVE-2023-40403 | 2009277, 2138445 | postgresql | libxslt1.1 |
| CVE-2023-45853 | 2010449 | postgresql | zlib1g |
| CVE-2023-50495 | 2010309 | postgresql | libncursesw6 |
| CVE-2024-10041 | 2010313 | postgresql | libpam-modules |
| CVE-2024-22365 | 2010281 | postgresql | libgcrypt20 |
| CVE-2024-25621 | 2210173 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2024-28180 | 2010173, 2011065 | crd-conversion, f5-downloader | gopkg.in/square/go-jose.v2 |
| CVE-2024-35195 | 2011045, 2064737, 2138785 | f5-fluentd | python3-pip |
| CVE-2024-41996 | 2011257, 2139093 | baseos | libssl3t64 |
| CVE-2024-56433 | 2010429 | postgresql | login |
| CVE-2024-58251 | 2209461, 2209681, 2211189 | f5dr-img-init, vault, vault-init | busybox |
| CVE-2024-7254 | 2010949 | f5-l4p-engine | libprotobuf32t64 |
| CVE-2025-0913 | 2009461, 2009585, 2009641, 2010517, 2010545, 2010761, 2010785, 2101993, 2138761, 2138981 | cert-manager-startupapicheck, cert-manager-webhook, f5-fqdn-resolver, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, opentelemetry-collector-contrib, rabbit | stdlib |
| CVE-2025-10148 | 2101753, 2138893 | vault-init | curl |
| CVE-2025-10543 | 2209357, 2209977, 2210161, 2210217, 2210381 | crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, spk-cwc | github.com/eclipse/paho.mqtt.golang |
| CVE-2025-10911 | 2101649 | postgresql | libxslt1.1 |
| CVE-2025-1147 | 2064745, 2138789 | f5-fluentd | binutils |
| CVE-2025-1148 | 2064749, 2138793 | f5-fluentd | binutils |
| CVE-2025-11731 | 2138637 | postgresql | libxslt1.1 |
| CVE-2025-12817 | 2210661 | postgresql | postgresql |
| CVE-2025-12818 | 2210633 | postgresql | postgresql |
| CVE-2025-13151 | 2210637, 2211125 | baseos, postgresql | libtasn1-6 |
| CVE-2025-13281 | 2209997, 2210737 | crd-installer, f5-dssm-upgrader | k8s.io/kubernetes |
| CVE-2025-13836 | 2210829, 2210841, 2210853, 2210861, 2210869, 2210877, 2210905, 2210941, 2210949, 2210985, 2210993, 2211001, 2211009, 2211021, 2211029, 2211037, 2211045, 2211053, 2211061, 2211069, 2211077, 2211085, 2211113 | crd-conversion, crdupdater, dnsx-img, f5-analyzer, f5-bdosd, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-fluentd, f5-ipam-controller, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, spk-csrc, spk-cwc, tmrouted-img | libpython3.12-minimal |
| CVE-2025-14104 | 2210641 | postgresql | bsdutils |
| CVE-2025-15281 | 2210645 | postgresql | libc-bin |
| CVE-2025-22868 | 2009149, 2009345, 2009413, 2009457, 2009477, 2009669 | cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-downloader, f5-node-labeler, f5ing-tmm-pod-manager | golang.org/x/oauth2 |
| CVE-2025-22869 | 2010505, 2010749 | cert-manager-startupapicheck, cert-manager-webhook | golang.org/x/crypto |
| CVE-2025-22870 | 2010509, 2010753 | cert-manager-startupapicheck, cert-manager-webhook | golang.org/x/net |
| CVE-2025-22871 | 2010521, 2010549, 2010765, 2010789, 2065185, 2101997, 2138765 | cert-manager-startupapicheck, cert-manager-webhook, f5-fqdn-resolver, f5-node-labeler, opentelemetry-collector-contrib, rabbit | stdlib |
| CVE-2025-22872 | 2010149, 2010189, 2010513, 2010537, 2010757, 2010961, 2011017, 2011061, 2065189, 2102001, 2138985 | cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-downloader, f5-dwbld, f5-fqdn-resolver, f5-l4p-engine, f5-license-proxy, f5-node-labeler, opentelemetry-collector-contrib | golang.org/x/net |
| CVE-2025-22874 | 2009637, 2010541, 2138753, 2138857 | f5-csm-qkview, f5-fqdn-resolver, f5-lifecycle-operator, opentelemetry-collector-contrib | stdlib |
| CVE-2025-27587 | 2010009 | postgresql | libssl3 |
| CVE-2025-29088 | 2009233 | postgresql | libsqlite3-0 |
| CVE-2025-30204 | 2009489, 2010169, 2010773, 2011057, 2064973, 2138973 | crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, f5-license-proxy | github.com/golang-jwt/jwt |
| CVE-2025-30258 | 2010241 | postgresql | gpgv |
| CVE-2025-3198 | 2064757, 2138797 | f5-fluentd | binutils |
| CVE-2025-40909 | 2009225 | postgresql | libperl5.36 |
| CVE-2025-4563 | 2009325, 2139057 | crd-installer | k8s.io/kubernetes |
| CVE-2025-4565 | 2010953 | f5-l4p-engine | libprotobuf32t64 |
| CVE-2025-46327 | 2010533 | opentelemetry-collector-contrib | github.com/snowflakedb/gosnowflake |
| CVE-2025-46394 | 2209517, 2209733, 2211237 | f5dr-img-init, vault, vault-init | busybox |
| CVE-2025-4673 | 2009469, 2009597, 2009645, 2010525, 2010553, 2010769, 2102005, 2138773, 2138869, 2138989 | cert-manager-startupapicheck, cert-manager-webhook, f5-csm-qkview, f5-fqdn-resolver, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, opentelemetry-collector-contrib | stdlib |
| CVE-2025-47273 | 2064761, 2138801 | f5-fluentd | python3-pip |
| CVE-2025-47906 | 2064709, 2065013, 2065061, 2065161, 2065177, 2065193, 2065317, 2101609, 2101733, 2101757, 2101833, 2101885, 2102009, 2138349, 2138717, 2138777, 2138837, 2138897, 2138993, 2139033, 2139041, 2210281 | cert-manager-startupapicheck, cert-manager-webhook, crd-installer, f5-analyzer, f5-cert-client, f5-coremond, f5-dwbld, f5-fqdn-resolver, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5-node-labeler, f5-toda-observer, opentelemetry-collector-contrib, vault, vault-init | stdlib |
| CVE-2025-47907 | 2101605, 2101729, 2101737, 2101749, 2101785, 2101829, 2138345, 2138709, 2138757, 2138781, 2138833, 2138861, 2138889, 2138953, 2138977, 2139029, 2139037, 2210269 | crd-installer, f5-analyzer, f5-cert-client, f5-coremond, f5-csm-qkview, f5-dwbld, f5-fluentd, f5-fqdn-resolver, f5-license-helper, f5-license-proxy, f5-toda-observer, vault, vault-init | stdlib |
| CVE-2025-47912 | 2209217, 2209281, 2209361, 2209465, 2209529, 2209585, 2209633, 2209685, 2209765, 2209821, 2209877, 2209933, 2210001, 2210049, 2210109, 2210221, 2210285, 2210333, 2210385, 2210441, 2210489, 2210537, 2210585, 2210689, 2210741, 2210789, 2211193 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-47914 | 2209201, 2209221, 2209265, 2209285, 2209369, 2209469, 2209533, 2209689, 2209769, 2209825, 2209981, 2210053, 2210113, 2210165, 2210177, 2210193, 2210225, 2210389, 2211197 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5dr-img-init, f5ingress, opentelemetry-collector-contrib, spk-cwc, vault, vault-init | golang.org/x/crypto |
| CVE-2025-4802 | 2009185 | postgresql | libc-bin |
| CVE-2025-49794 | 2009245 | postgresql | libxml2 |
| CVE-2025-49796 | 2009249 | postgresql | libxml2 |
| CVE-2025-5187 | 2065221, 2139045 | crd-installer | k8s.io/kubernetes |
| CVE-2025-5244 | 2064765, 2138809 | f5-fluentd | binutils |
| CVE-2025-5245 | 2064769, 2138813 | f5-fluentd | binutils |
| CVE-2025-5278 | 2009181 | postgresql | coreutils |
| CVE-2025-54410 | 2009629, 2138361 | f5-lifecycle-operator | github.com/docker/docker |
| CVE-2025-55198 | 2065201, 2138353 | f5-lifecycle-operator | helm.sh/helm/v3 |
| CVE-2025-55199 | 2065205, 2138357 | f5-lifecycle-operator | helm.sh/helm/v3 |
| CVE-2025-58058 | 2065373, 2138841 | f5-coremond | github.com/ulikunitz/xz |
| CVE-2025-58181 | 2209205, 2209225, 2209269, 2209289, 2209373, 2209473, 2209537, 2209693, 2209773, 2209829, 2209985, 2210057, 2210117, 2210169, 2210181, 2210197, 2210229, 2210393, 2211201 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-fluentd, f5-ipam-controller, f5-license-helper, f5-license-proxy, f5-lifecycle-operator, f5dr-img-init, f5ingress, opentelemetry-collector-contrib, spk-cwc, vault, vault-init | golang.org/x/crypto |
| CVE-2025-58183 | 2209209, 2209273, 2209341, 2209449, 2209521, 2209577, 2209625, 2209673, 2209749, 2209813, 2209869, 2209925, 2209989, 2210041, 2210097, 2210209, 2210273, 2210325, 2210373, 2210433, 2210481, 2210529, 2210577, 2210681, 2210729, 2210781, 2211185 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-58185 | 2209229, 2209293, 2209377, 2209477, 2209541, 2209589, 2209637, 2209697, 2209777, 2209833, 2209881, 2209937, 2210005, 2210061, 2210121, 2210233, 2210289, 2210337, 2210397, 2210445, 2210493, 2210541, 2210589, 2210693, 2210745, 2210793, 2211205 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-58186 | 2209233, 2209297, 2209385, 2209481, 2209545, 2209593, 2209641, 2209701, 2209781, 2209837, 2209885, 2209941, 2210009, 2210065, 2210125, 2210237, 2210293, 2210341, 2210401, 2210449, 2210497, 2210545, 2210593, 2210697, 2210749, 2210797, 2211209 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-58187 | 2209237, 2209301, 2209333, 2209393, 2209485, 2209549, 2209597, 2209645, 2209705, 2209785, 2209841, 2209889, 2209945, 2210013, 2210069, 2210129, 2210201, 2210241, 2210297, 2210345, 2210405, 2210453, 2210501, 2210549, 2210597, 2210701, 2210753, 2210801, 2211213 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-csm-qkview, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-58188 | 2209241, 2209305, 2209401, 2209489, 2209553, 2209601, 2209649, 2209709, 2209789, 2209845, 2209893, 2209949, 2210017, 2210073, 2210133, 2210245, 2210301, 2210349, 2210409, 2210457, 2210505, 2210553, 2210601, 2210705, 2210757, 2210805, 2211217 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-58189 | 2209245, 2209309, 2209409, 2209493, 2209557, 2209605, 2209653, 2209713, 2209793, 2209849, 2209897, 2209953, 2210021, 2210077, 2210137, 2210249, 2210305, 2210353, 2210413, 2210461, 2210509, 2210557, 2210605, 2210709, 2210761, 2210809, 2211221 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-6020 | 2009221 | postgresql | libpam-modules |
| CVE-2025-6021 | 2009261 | postgresql | libxml2 |
| CVE-2025-6069 | 2009349, 2009381, 2009509, 2010781, 2065049, 2065209, 2065257, 2065413 | f5-bdosd, f5-cert-client, f5-lifecycle-operator, f5-nsec-ips-daemon, rabbit, spk-csrc | libpython3.12-minimal |
| CVE-2025-6141 | 2009217 | postgresql | libncursesw6 |
| CVE-2025-6170 | 2009265 | postgresql | libxml2 |
| CVE-2025-61723 | 2209249, 2209313, 2209417, 2209497, 2209561, 2209609, 2209657, 2209717, 2209797, 2209853, 2209901, 2209957, 2210025, 2210081, 2210141, 2210253, 2210309, 2210357, 2210417, 2210465, 2210513, 2210561, 2210609, 2210713, 2210765, 2210813, 2211225 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-61724 | 2209253, 2209317, 2209425, 2209501, 2209565, 2209613, 2209661, 2209721, 2209801, 2209857, 2209905, 2209961, 2210029, 2210085, 2210145, 2210257, 2210313, 2210361, 2210421, 2210469, 2210517, 2210565, 2210613, 2210717, 2210769, 2210817, 2211229 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-61725 | 2209257, 2209321, 2209433, 2209505, 2209569, 2209617, 2209665, 2209725, 2209805, 2209861, 2209909, 2209965, 2210033, 2210089, 2210149, 2210261, 2210317, 2210365, 2210425, 2210473, 2210521, 2210569, 2210617, 2210721, 2210773, 2210821, 2211233 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, vault, vault-init | stdlib |
| CVE-2025-61727 | 2209261, 2209325, 2209337, 2209441, 2209509, 2209573, 2209621, 2209669, 2209729, 2209745, 2209809, 2209865, 2209913, 2209921, 2209969, 2210037, 2210093, 2210153, 2210205, 2210265, 2210321, 2210369, 2210429, 2210477, 2210525, 2210573, 2210621, 2210725, 2210777, 2210825 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-csm-qkview, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2025-61729 | 2209213, 2209277, 2209329, 2209349, 2209453, 2209525, 2209581, 2209629, 2209677, 2209737, 2209753, 2209817, 2209873, 2209917, 2209929, 2209993, 2210045, 2210101, 2210189, 2210213, 2210277, 2210329, 2210377, 2210437, 2210485, 2210533, 2210581, 2210685, 2210733, 2210785 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-installer, crdupdater, f5-analyzer, f5-blobd, f5-cert-client, f5-csm-qkview, f5-debug-sidecar, f5-dssm-store, f5-dssm-upgrader, f5-dwbld, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-license-proxy, f5-node-labeler, f5-nsec-ips-daemon, f5-toda-observer, f5-toda-tmstatsd, f5dr-img, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc, tmrouted-img, vault, vault-init | stdlib |
| CVE-2025-62408 | 2209513 | vault-init | c-ares |
| CVE-2025-6297 | 2010013, 2101645, 2101685, 2101717, 2101825, 2101949, 2101969, 2139101 | baseos, crdupdater, f5-bdosd, f5-cert-client, f5-fluentbit, f5-nsec-ips-daemon, postgresql | dpkg |
| CVE-2025-63811 | 2209457, 2209741, 2209757 | opentelemetry-collector-contrib, vault, vault-init | github.com/dvsekhvalnov/jose2go |
| CVE-2025-64329 | 2210185 | f5-lifecycle-operator | github.com/containerd/containerd |
| CVE-2025-65637 | 2209973, 2210105, 2210157 | crd-conversion, f5-downloader, f5-license-proxy | github.com/sirupsen/logrus |
| CVE-2025-68156 | 2209761 | opentelemetry-collector-contrib | github.com/expr-lang/expr |
| CVE-2025-68972 | 2210649 | postgresql | gpgv |
| CVE-2025-68973 | 2210625, 2211121 | baseos, postgresql | gpgv |
| CVE-2025-6965 | 2009229 | postgresql | libsqlite3-0 |
| CVE-2025-7424 | 2009269, 2138429 | postgresql | libxslt1.1 |
| CVE-2025-7425 | 2009273 | postgresql | libxslt1.1 |
| CVE-2025-7458 | 2009237 | postgresql | libsqlite3-0 |
| CVE-2025-7545 | 2064777, 2138817 | f5-fluentd | binutils |
| CVE-2025-7546 | 2064781, 2138821 | f5-fluentd | binutils |
| CVE-2025-7709 | 2064905, 2065169, 2065213, 2065261, 2065417 | f5-cert-client, f5-lifecycle-operator, postgresql, rabbit, spk-csrc | libsqlite3-0 |
| CVE-2025-8058 | 2009189 | postgresql | libc-bin |
| CVE-2025-8114 | 2138741, 2138941, 2139061 | crd-installer, f5-debug-sidecar, f5-fluentbit | libssh-4 |
| CVE-2025-8225 | 2064793, 2138825 | f5-fluentd | binutils |
| CVE-2025-8713 | 2064933, 2138661 | postgresql | postgresql |
| CVE-2025-8714 | 2138437 | postgresql | postgresql |
| CVE-2025-8715 | 2138441 | postgresql | postgresql |
| CVE-2025-8732 | 2064937 | postgresql | libxml2 |
| CVE-2025-8941 | 2101637, 2101677, 2101709, 2101817, 2101865, 2101941 | crdupdater, dnsx-img, f5-bdosd, f5-cert-client, f5-fluentbit, f5-nsec-ips-daemon | libpam-modules |
| CVE-2025-9086 | 2101761, 2138901 | vault-init | curl |
| CVE-2025-9230 | 2101653, 2101765, 2101837, 2101953, 2101965, 2138905, 2139077 | baseos, f5dr-img-init, postgresql, vault, vault-init | libcrypto3 |
| CVE-2025-9231 | 2101769, 2101841, 2101957, 2138909 | f5dr-img-init, vault, vault-init | libcrypto3 |
| CVE-2025-9232 | 2101657, 2101773, 2101845, 2101961, 2138913 | f5dr-img-init, postgresql, vault, vault-init | libcrypto3 |
| CVE-2025-9714 | 2064913 | postgresql | libxml2 |
| CVE-2025-9820 | 2210677 | postgresql | libgnutls30 |
| CVE-2026-0861 | 2210629 | postgresql | libc-bin |
| CVE-2026-0915 | 2210653 | postgresql | libc-bin |
| CVE-2026-0989 | 2210665 | postgresql | libxml2 |
| CVE-2026-0990 | 2210657 | postgresql | libxml2 |
| CVE-2026-0992 | 2210669 | postgresql | libxml2 |
| CVE-2026-22185 | 2210673 | postgresql | libldap-2.5-0 |
| DSA-5979-2 | 2101661 | postgresql | libxslt1.1 |
| DSA-5990-1 | 2064945 | postgresql | libxml2 |
| GHSA-2464-8J7C-4CJM | 2065001 | f5-debug-sidecar | github.com/go-viper/mapstructure/v2 |
| GHSA-fv92-fjc5-jj9h | 2010025, 2010529 | opentelemetry-collector-contrib, spk-cwc | github.com/go-viper/mapstructure/v2 |