Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade podman-gvproxyUpgrade libslirpUpgrade criu-develUpgrade skopeoUpgrade grafanaUpgrade delveUpgrade conmonUpgrade osbuild-composer-workerUpgrade golang-raceUpgrade python3-podmanUpgrade podman-pluginsUpgrade podmanUpgrade git-lfsUpgrade podman-dockerUpgrade osbuild-composer-dnf-jsonUpgrade podman-testsUpgrade udicaUpgrade toolboxUpgrade golang-docsUpgrade container-selinuxUpgrade slirp4netnsUpgrade skopeo-testsUpgrade weldr-clientUpgrade runcUpgrade crunUpgrade critUpgrade golangUpgrade go-toolsetUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade criuUpgrade golang-binUpgrade netavarkUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade buildah-testsUpgrade golang-testsUpgrade podman-remoteUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade golang-srcUpgrade containers-commonUpgrade libslirp-develUpgrade buildahUpgrade podman-catatonit | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade golang-shared | Apr 21, 2023 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-sharedUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golang-misc | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade podman-debuginfoUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade python3-osbuildUpgrade critUpgrade go-toolsetUpgrade grafana-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade containers-commonUpgrade git-lfsUpgrade skopeo-debuginfoUpgrade python3-criuUpgrade runcUpgrade osbuild-composer-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade osbuildUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-dockerUpgrade runc-debugsourceUpgrade slirp4netns-debugsourceUpgrade git-lfs-debuginfoUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade osbuild-luks2Upgrade podman-remoteUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade weldr-client-debuginfoUpgrade udicaUpgrade osbuild-composerUpgrade weldr-clientUpgrade aardvark-dnsUpgrade golang-binUpgrade osbuild-composer-worker-debuginfoUpgrade golang-docsUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade criu-develUpgrade crun-debuginfoUpgrade grafanaUpgrade delveUpgrade osbuild-selinuxUpgrade osbuild-composer-workerUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-develUpgrade criuUpgrade buildahUpgrade golangUpgrade golang-miscUpgrade buildah-debugsourceUpgrade skopeoUpgrade osbuild-ostreeUpgrade golang-testsUpgrade weldr-client-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade python3-podmanUpgrade podmanUpgrade osbuild-lvm2Upgrade delve-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade toolboxUpgrade podman-pluginsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade golang-srcUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-composerUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade toolbox-testsUpgrade grafana-debuginfoUpgrade netavarkUpgrade buildah-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade skopeo-debugsourceUpgrade criu-libsUpgrade osbuild-composer-core-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composer-coreUpgrade slirp4netnsUpgrade git-lfs-debugsourceUpgrade podman-tests | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Freebsd | — | Upgrade go118Upgrade go119 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Mar 9, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade golang-binUpgrade git-lfsUpgrade skopeoUpgrade buildahUpgrade golangUpgrade python3-osbuildUpgrade netavarkUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-ostreeUpgrade golang-srcUpgrade libslirp-develUpgrade aardvark-dnsUpgrade golang-miscUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade podman-remoteUpgrade osbuild-selinuxUpgrade osbuild-composerUpgrade criu-libsUpgrade osbuild-composer-coreUpgrade osbuildUpgrade osbuild-lvm2Upgrade podmanUpgrade cockpit-podmanUpgrade runcUpgrade libslirpUpgrade podman-dockerUpgrade conmonUpgrade osbuild-luks2Upgrade container-selinuxUpgrade skopeo-testsUpgrade critUpgrade buildah-testsUpgrade weldr-clientUpgrade udicaUpgrade podman-pluginsUpgrade cockpit-composerUpgrade slirp4netnsUpgrade osbuild-composer-workerUpgrade python3-criuUpgrade podman-gvproxyUpgrade golang-testsUpgrade golang-raceUpgrade crunUpgrade delveUpgrade criuUpgrade podman-testsUpgrade podman-catatonitUpgrade golang-docsUpgrade go-toolsetUpgrade python3-podmanUpgrade criu-devel | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade podmanUpgrade ignitionUpgrade skopeoUpgrade openshift-clientsUpgrade buildahUpgrade conmon | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade skopeo-debuginfoUpgrade osbuild-composer-debuginfoUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade grafana-debuginfoUpgrade grafana-debugsourceUpgrade go-toolsetUpgrade osbuild-composer-debugsourceUpgrade buildah-debuginfoUpgrade git-lfs-debugsourceUpgrade cockpit-podmanUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade git-lfsUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade podman-testsUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade weldr-clientUpgrade toolbox-testsUpgrade udicaUpgrade slirp4netnsUpgrade osbuild-luks2Upgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade python3-podmanUpgrade container-selinuxUpgrade buildahUpgrade grafanaUpgrade conmonUpgrade weldr-client-debugsourceUpgrade crunUpgrade weldr-client-tests-debuginfoNo solution existsUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade golang-srcUpgrade golang-binUpgrade runc-debugsourceUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-selinuxUpgrade podman-gvproxy-debuginfoUpgrade golang-miscUpgrade golang-docsUpgrade skopeo-testsUpgrade delve-debuginfoUpgrade cockpit-composerUpgrade osbuild-lvm2Upgrade podman-remoteUpgrade critUpgrade buildah-tests-debuginfoUpgrade osbuild-composerUpgrade runcUpgrade podmanUpgrade osbuild-composer-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade aardvark-dnsUpgrade skopeoUpgrade criu-libsUpgrade slirp4netns-debuginfoUpgrade containers-commonUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade python3-osbuildUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade golangUpgrade criu-debugsourceUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade weldr-client-debuginfoUpgrade podman-remote-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade criu-libs-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade delveUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade osbuildUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade git-lfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-workerUpgrade libslirp-debuginfoUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade criu-develUpgrade criuUpgrade golang-testsUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade osbuild-ostreeUpgrade toolbox-debugsourceUpgrade toolbox | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade critUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade golang-binUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade runc-debuginfoUpgrade delveUpgrade podman-gvproxy-debuginfoUpgrade criu-develUpgrade runcUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade delve-debuginfoUpgrade crunUpgrade podman-catatonitUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade containers-commonUpgrade netavarkUpgrade criu-libsUpgrade buildah-debuginfoUpgrade golangUpgrade golang-raceUpgrade skopeoUpgrade libslirp-develUpgrade toolboxUpgrade podmanUpgrade criuUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade libslirp | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.19-docUpgrade go1.18-docUpgrade go1.18Upgrade go1.19Upgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.19-race | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.16-goUpgrade golang-1.16Upgrade golang-1.18Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro) | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub