Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-libsUpgrade containers-commonUpgrade grafana-pcpUpgrade grafanaUpgrade podman-remoteUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade go-toolsetUpgrade delveUpgrade python3-criuUpgrade podman-pluginsUpgrade libslirpUpgrade crunUpgrade golang-docsUpgrade slirp4netnsUpgrade skopeo-testsUpgrade container-selinuxUpgrade critUpgrade runcUpgrade golangUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade golang-miscUpgrade podmanUpgrade udicaUpgrade golang-raceUpgrade golang-testsUpgrade podman-catatonitUpgrade podman-testsUpgrade netavarkUpgrade buildah-testsUpgrade buildahUpgrade aardvark-dnsUpgrade golang-srcUpgrade skopeoUpgrade toolboxUpgrade criuUpgrade golang-binUpgrade conmonUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade podman-dockerUpgrade cockpit-podmanUpgrade containernetworking-plugins | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-gorilla-context-develUpgrade runcUpgrade golang-sharedUpgrade golang-binUpgrade golang-github-kr-pty-develUpgrade golang-testsUpgrade runc-debuginfoUpgrade golang-googlecode-sqlite-develUpgrade golang-srcUpgrade golang-docsUpgrade golang-raceUpgrade go-rpm-macrosUpgrade golistUpgrade golangUpgrade golang-googlecode-net-develUpgrade go-filesystemUpgrade golang-miscUpgrade go-rpm-templatesUpgrade golist-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade golang-github-gorilla-mux-develUpgrade golang-github-godbus-dbus-develUpgrade go-srpm-macros | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-develUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golangUpgrade golistUpgrade golist-debuginfoUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade golang-github-cpuguy83-md2manUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golist-debugsourceUpgrade golang-docsUpgrade golang-srcUpgrade golang-sharedUpgrade golang-race | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade podman-dockerUpgrade crunUpgrade grafana-debuginfoUpgrade netavarkUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade libslirpUpgrade python3-podmanUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade runc-debuginfoUpgrade golang-miscUpgrade containernetworking-plugins-debugsourceUpgrade grafanaUpgrade podman-catatonit-debuginfoUpgrade cockpit-podmanUpgrade golang-raceUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade toolboxUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade golangUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade golang-srcUpgrade conmonUpgrade criu-libsUpgrade slirp4netns-debugsourceUpgrade grafana-pcp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade containers-commonUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade criu-libs-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade podman-catatonitUpgrade go-toolsetUpgrade delveUpgrade criuUpgrade podman-remoteUpgrade podman-debugsourceUpgrade golang-binUpgrade fuse-overlayfs-debugsourceUpgrade criu-develUpgrade golang-testsUpgrade toolbox-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade udicaUpgrade skopeoUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade grafana-pcpUpgrade golang-docs | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golangUpgrade golang-miscUpgrade python3-podmanUpgrade golang-raceUpgrade runcUpgrade podmanUpgrade criuUpgrade aardvark-dnsUpgrade udicaUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade skopeoUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade golang-binUpgrade grafana-pcpUpgrade podman-remoteUpgrade golang-docsUpgrade golang-testsUpgrade buildahUpgrade netavarkUpgrade critUpgrade grafanaUpgrade criu-develUpgrade python3-criuUpgrade crunUpgrade podman-testsUpgrade skopeo-testsUpgrade conmonUpgrade podman-pluginsUpgrade container-selinuxUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade libslirpUpgrade delveUpgrade containers-commonUpgrade libslirp-develUpgrade golang-srcUpgrade criu-libsUpgrade slirp4netnsUpgrade go-toolset | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade butaneUpgrade skopeoUpgrade openshift-clientsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade crunUpgrade toolboxUpgrade podmanUpgrade conmonUpgrade container-selinuxUpgrade cri-oUpgrade haproxyUpgrade kernel-rtUpgrade runcUpgrade cri-toolsUpgrade slirp4netnsUpgrade ignitionUpgrade buildahUpgrade fuse-overlayfs | Jan 18, 2023 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade critUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade buildah-testsUpgrade libslirp-develUpgrade toolbox-debuginfoUpgrade golang-srcUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade udicaUpgrade runc-debugsourceNo solution existsUpgrade criu-debugsourceUpgrade criu-libsUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade grafana-pcp-debuginfoUpgrade container-selinuxUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade grafana-pcpUpgrade toolbox-testsUpgrade grafanaUpgrade golangUpgrade delve-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade go-toolsetUpgrade podman-remoteUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade runcUpgrade criuUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxyUpgrade golang-miscUpgrade criu-develUpgrade netavarkUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade delve-debugsourceUpgrade podman-dockerUpgrade podman-catatonitUpgrade python3-podmanUpgrade slirp4netns-debugsourceUpgrade golang-raceUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade toolboxUpgrade crunUpgrade delveUpgrade crun-debuginfoUpgrade golang-testsUpgrade libslirpUpgrade conmonUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade grafana-debuginfoUpgrade fuse-overlayfs | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade skopeoUpgrade podman-testsUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade conmonUpgrade criuUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade golangUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debugsourceUpgrade golang-binUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade delve-debuginfoUpgrade libslirpUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade crunUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade toolboxUpgrade toolbox-testsUpgrade buildahUpgrade golang-raceUpgrade grafana-pcp-debuginfoUpgrade grafana-debuginfoUpgrade runc-debuginfoUpgrade grafana-pcpUpgrade crun-debuginfoUpgrade criu-develUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade runcUpgrade conmon-debuginfoUpgrade criu-libsUpgrade podman-debuginfoUpgrade libslirp-develUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade python3-criuUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade critUpgrade containers-commonUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debugsourceUpgrade delveUpgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-opensslUpgrade go1.18Upgrade go1.17Upgrade go1.18-docUpgrade go1.17-docUpgrade go1.17-raceUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16-goUpgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.13 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub