Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netavarkUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade golang-testsUpgrade osbuild-composer-coreUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade criuUpgrade golang-miscUpgrade containers-commonUpgrade golang-binUpgrade criu-libsUpgrade golangUpgrade go-toolsetUpgrade libslirp-develUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade buildahUpgrade golang-srcUpgrade skopeo-testsUpgrade grafanaUpgrade toolboxUpgrade container-selinuxUpgrade git-lfsUpgrade weldr-clientUpgrade osbuild-composer-dnf-jsonUpgrade libslirpUpgrade podman-dockerUpgrade runcUpgrade conmonUpgrade golang-raceUpgrade slirp4netnsUpgrade delveUpgrade podman-pluginsUpgrade python3-criuUpgrade udicaUpgrade crunUpgrade podman-gvproxyUpgrade critUpgrade skopeoUpgrade podmanUpgrade golang-docsUpgrade podman-testsUpgrade criu-develUpgrade python3-podmanUpgrade osbuild-composer-worker | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-miscUpgrade golang-sharedUpgrade golang-docsUpgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade golang-bin | Apr 21, 2023 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-binUpgrade golang-raceUpgrade golang-testsUpgrade golang-sharedUpgrade golangUpgrade golang-srcUpgrade golang-docs | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade crun-debuginfoUpgrade libslirp-develUpgrade runc-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade libslirp-debuginfoUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade git-lfs-debuginfoUpgrade podman-debugsourceUpgrade podman-dockerUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade osbuildUpgrade podman-gvproxyUpgrade osbuild-composer-tests-debuginfoUpgrade weldr-client-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade skopeo-testsUpgrade python3-criuUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade python3-osbuildUpgrade git-lfsUpgrade go-toolsetUpgrade grafana-debugsourceUpgrade containers-commonUpgrade osbuild-composer-workerUpgrade delveUpgrade golang-docsUpgrade conmon-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade osbuild-selinuxUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debugsourceUpgrade skopeo-debuginfoUpgrade toolbox-debugsourceUpgrade podman-debuginfoUpgrade osbuild-luks2Upgrade udicaUpgrade golang-binUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade weldr-clientUpgrade toolbox-debuginfoUpgrade critUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade golang-miscUpgrade osbuild-lvm2Upgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-debuginfoUpgrade cockpit-composerUpgrade podman-catatonit-debuginfoUpgrade golangUpgrade buildah-debuginfoUpgrade golang-raceUpgrade delve-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade toolboxUpgrade podman-pluginsUpgrade podman-catatonitUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-dnf-jsonUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade weldr-client-debugsourceUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade skopeoUpgrade git-lfs-debugsourceUpgrade podman-testsUpgrade osbuild-composer-coreUpgrade golang-testsUpgrade fuse-overlayfsUpgrade crunUpgrade criu-libsUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade slirp4netnsUpgrade osbuild-ostreeUpgrade netavarkUpgrade grafana-debuginfoUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade osbuild-composer-core-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade libslirp | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Freebsd | — | Upgrade go119Upgrade go118 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Mar 9, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade criuUpgrade libslirpUpgrade criu-develUpgrade runcUpgrade cockpit-podmanUpgrade osbuild-composer-workerUpgrade cockpit-composerUpgrade golang-docsUpgrade slirp4netnsUpgrade podman-testsUpgrade osbuild-luks2Upgrade podman-dockerUpgrade container-selinuxUpgrade skopeo-testsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade conmonUpgrade weldr-clientUpgrade python3-criuUpgrade udicaUpgrade crunUpgrade golang-raceUpgrade buildah-testsUpgrade python3-podmanUpgrade delveUpgrade golang-testsUpgrade go-toolsetUpgrade podman-pluginsUpgrade critUpgrade buildahUpgrade python3-osbuildUpgrade containernetworking-pluginsUpgrade osbuild-composer-dnf-jsonUpgrade containers-commonUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade netavarkUpgrade osbuild-ostreeUpgrade golang-srcUpgrade grafanaUpgrade osbuild-composerUpgrade aardvark-dnsUpgrade skopeoUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade git-lfsUpgrade golang-binUpgrade podman-remoteUpgrade golangUpgrade criu-libsUpgrade podmanUpgrade osbuild-selinuxUpgrade osbuildUpgrade osbuild-lvm2 | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade podmanUpgrade ignitionUpgrade buildahUpgrade skopeoUpgrade conmon | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade python3-osbuildUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debuginfoUpgrade golang-binUpgrade python3-criuUpgrade osbuild-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade golang-miscUpgrade skopeo-testsUpgrade osbuild-ostreeUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade cockpit-composerUpgrade osbuild-composer-core-debuginfoUpgrade podman-remoteUpgrade delve-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade osbuildUpgrade criu-libs-debuginfoUpgrade toolboxUpgrade delveUpgrade toolbox-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-composer-worker-debuginfoUpgrade netavarkUpgrade golang-srcUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade golang-docsUpgrade golangUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debugsourceUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade critUpgrade osbuild-composerUpgrade osbuild-lvm2Upgrade aardvark-dnsUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade weldr-client-debuginfoUpgrade podman-catatonitUpgrade git-lfs-debuginfoUpgrade criu-develUpgrade containers-commonUpgrade golang-testsUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade criuUpgrade osbuild-composer-workerUpgrade podman-debugsourceUpgrade osbuild-composer-coreUpgrade libslirp-develUpgrade container-selinuxUpgrade buildahUpgrade golang-raceUpgrade skopeo-debugsourceUpgrade udicaUpgrade fuse-overlayfsUpgrade osbuild-composer-debugsourceUpgrade libslirpUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade weldr-client-tests-debuginfoUpgrade grafana-debuginfoUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade weldr-client-debugsourceUpgrade git-lfs-debugsourceUpgrade cockpit-podmanNo solution existsUpgrade weldr-clientUpgrade skopeo-debuginfoUpgrade osbuild-composer-debuginfoUpgrade libslirp-debugsourceUpgrade go-toolsetUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade grafana-debugsourceUpgrade toolbox-testsUpgrade python3-podmanUpgrade grafanaUpgrade buildah-testsUpgrade conmonUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfsUpgrade osbuild-luks2 | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade delveUpgrade runcUpgrade runc-debugsourceUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade critUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade golang-binUpgrade podman-remoteUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade crunUpgrade toolboxUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade skopeo-debugsourceUpgrade golangUpgrade criu-debuginfoUpgrade criuUpgrade containers-commonUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade golang-raceUpgrade libslirp-develUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade skopeoUpgrade conmon-debugsourceUpgrade libslirpUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade delve-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-catatonit | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.18-raceUpgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.18-docUpgrade go1.19-docUpgrade go1.19 | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.18Upgrade golang-1.18-srcUpgrade golang-1.16-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-srcUpgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro) | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub