The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade criu-develUpgrade buildah-testsUpgrade podman-remoteUpgrade golang-binUpgrade crunUpgrade python3-criuUpgrade skopeo-testsUpgrade udicaUpgrade container-selinuxUpgrade aardvark-dnsUpgrade critUpgrade cockpit-podmanUpgrade libslirp-develUpgrade grafanaUpgrade go-toolsetUpgrade containernetworking-pluginsUpgrade delveUpgrade runcUpgrade containers-commonUpgrade podman-gvproxyUpgrade golang-srcUpgrade buildahUpgrade golang-testsUpgrade conmonUpgrade golang-miscUpgrade podman-pluginsUpgrade skopeoUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade podmanUpgrade slirp4netnsUpgrade criu-libsUpgrade toolbox-testsUpgrade podman-dockerUpgrade podman-testsUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade libslirpUpgrade golangUpgrade criuUpgrade golang-race | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-raceUpgrade go-rpm-macrosUpgrade runcUpgrade golang-github-gorilla-context-develUpgrade golang-docsUpgrade golang-googlecode-net-develUpgrade go-rpm-templatesUpgrade golang-github-syndtr-gocapability-develUpgrade go-srpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade golang-binUpgrade golang-github-godbus-dbus-develUpgrade go-filesystemUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade runc-debuginfoUpgrade golang-github-kr-pty-develUpgrade golang-srcUpgrade golist-debuginfoUpgrade golistUpgrade golang-googlecode-sqlite-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2manUpgrade golistUpgrade golang-miscUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-binUpgrade golang-raceUpgrade golang | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade delveUpgrade runc-debuginfoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade skopeoUpgrade toolboxUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade podman-testsUpgrade delve-debugsourceUpgrade udicaUpgrade cockpit-podmanUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debuginfoUpgrade criu-develUpgrade podman-dockerUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade skopeo-testsUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade python3-podmanUpgrade toolbox-testsUpgrade golang-raceUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade buildahUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade python3-criuUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade runcUpgrade criu-debugsourceUpgrade container-selinuxUpgrade podman-debuginfoUpgrade golangUpgrade critUpgrade aardvark-dnsUpgrade golang-binUpgrade delve-debuginfoUpgrade containers-commonUpgrade golang-srcUpgrade go-toolsetUpgrade golang-miscUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade grafana | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golang-raceUpgrade skopeo-testsUpgrade criu-develUpgrade golang-binUpgrade container-selinuxUpgrade podman-gvproxyUpgrade critUpgrade udicaUpgrade grafanaUpgrade podman-dockerUpgrade slirp4netnsUpgrade crunUpgrade golang-docsUpgrade skopeoUpgrade conmonUpgrade libslirpUpgrade podmanUpgrade libslirp-develUpgrade podman-testsUpgrade runcUpgrade python3-criuUpgrade podman-pluginsUpgrade delveUpgrade go-toolsetUpgrade podman-remoteUpgrade netavarkUpgrade golang-testsUpgrade golang-miscUpgrade buildahUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade containers-commonUpgrade podman-catatonitUpgrade golang-srcUpgrade aardvark-dnsUpgrade golangUpgrade criuUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade criu-libsUpgrade oci-seccomp-bpf-hook | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade python3-podmanUpgrade netavarkUpgrade buildah-debugsourceUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade critUpgrade podman-debuginfoUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade containers-commonUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade criuUpgrade fuse-overlayfsUpgrade golangUpgrade grafana-debuginfoNo solution existsUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade golang-docsUpgrade containernetworking-plugins-debugsourceUpgrade crun-debugsourceUpgrade golang-raceUpgrade golang-miscUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade toolbox-testsUpgrade criu-debuginfoUpgrade crunUpgrade toolboxUpgrade skopeoUpgrade buildah-debuginfoUpgrade udicaUpgrade podmanUpgrade conmon-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade criu-debugsourceUpgrade golang-srcUpgrade buildahUpgrade slirp4netnsUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade toolbox-debuginfoUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debuginfoUpgrade grafanaUpgrade libslirpUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade podman-dockerUpgrade runc-debugsourceUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade buildah-testsUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade delve-debuginfoUpgrade libslirp-develUpgrade podman-gvproxyUpgrade conmonUpgrade criu-libs | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade fuse-overlayfs-debugsourceUpgrade delveUpgrade golangUpgrade podman-remote-debuginfoUpgrade grafanaUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-debugsourceUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade delve-debuginfoUpgrade podman-pluginsUpgrade criu-libsUpgrade runc-debuginfoUpgrade conmonUpgrade libslirpUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-toolsetUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade skopeoUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade critUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade crunUpgrade podman-testsUpgrade podman-catatonit-debuginfoUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade toolboxUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade criu-libs-debuginfoUpgrade conmon-debugsourceUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade delve-debugsourceUpgrade containernetworking-pluginsUpgrade golang-binUpgrade grafana-debuginfoUpgrade libslirp-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18Upgrade go1.17-docUpgrade go1.17-raceUpgrade go1.18-opensslUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.17Upgrade go1.18-docUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.18Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13Upgrade golang-1.13-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub