Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For header.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade golang-docsUpgrade container-selinuxUpgrade podman-catatonitUpgrade crunUpgrade runcUpgrade buildah-testsUpgrade cockpit-podmanUpgrade skopeoUpgrade delveUpgrade podman-testsUpgrade golang-testsUpgrade toolbox-testsUpgrade podmanUpgrade critUpgrade podman-pluginsUpgrade criuUpgrade podman-dockerUpgrade udicaUpgrade python3-criuUpgrade podman-remoteUpgrade golang-binUpgrade git-lfsUpgrade criu-libsUpgrade golang-srcUpgrade python3-podmanUpgrade grafana-pcpUpgrade containers-commonUpgrade golang-raceUpgrade slirp4netnsUpgrade libslirpUpgrade golang-miscUpgrade skopeo-testsUpgrade conmonUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade aardvark-dnsUpgrade go-toolsetUpgrade criu-develUpgrade podman-gvproxyUpgrade toolboxUpgrade golangUpgrade netavark | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-gorilla-context-develUpgrade go-srpm-macrosUpgrade golang-testsUpgrade go-rpm-templatesUpgrade golangUpgrade runcUpgrade golang-docsUpgrade golang-binUpgrade golang-github-kr-pty-develUpgrade golistUpgrade golang-googlecode-sqlite-develUpgrade golang-raceUpgrade golang-googlecode-net-develUpgrade runc-debuginfoUpgrade golang-sharedUpgrade go-filesystemUpgrade golang-srcUpgrade go-rpm-macrosUpgrade golang-miscUpgrade golang-github-gorilla-mux-develUpgrade golist-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade golang-github-syndtr-gocapability-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-raceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golist-debugsourceUpgrade golist-debuginfoUpgrade golang-docsUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2manUpgrade golang-bin | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade criu-debuginfoUpgrade golangUpgrade buildah-debuginfoUpgrade golang-testsUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade runc-debugsourceUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade python3-criuUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade criuUpgrade golang-docsUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade critUpgrade delveUpgrade containers-commonUpgrade golang-binUpgrade podmanUpgrade podman-debugsourceUpgrade aardvark-dnsUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-miscUpgrade runcUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade grafana-pcpUpgrade podman-debuginfoUpgrade git-lfs-debuginfoUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade git-lfs-debugsourceUpgrade go-toolsetUpgrade container-selinuxUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade python3-podmanUpgrade toolboxUpgrade libslirpUpgrade git-lfsUpgrade crun-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade libslirp-debugsourceUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade udicaUpgrade conmon-debuginfoUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade golang-raceUpgrade buildah-testsUpgrade conmonUpgrade slirp4netnsUpgrade netavarkUpgrade skopeo-debugsourceUpgrade grafana-pcp-debuginfoUpgrade grafana-debuginfoUpgrade buildahUpgrade skopeo-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golang-docsUpgrade podman-gvproxyUpgrade podmanUpgrade skopeoUpgrade golang-srcUpgrade golang-binUpgrade cockpit-podmanUpgrade golang-raceUpgrade criuUpgrade critUpgrade golang-testsUpgrade podman-catatonitUpgrade udicaUpgrade podman-testsUpgrade buildahUpgrade python3-podmanUpgrade libslirpUpgrade podman-dockerUpgrade aardvark-dnsUpgrade buildah-testsUpgrade runcUpgrade netavarkUpgrade containernetworking-pluginsUpgrade slirp4netnsUpgrade podman-remoteUpgrade golangUpgrade fuse-overlayfsUpgrade golang-miscUpgrade git-lfsUpgrade criu-libsUpgrade libslirp-develUpgrade containers-commonUpgrade grafana-pcpUpgrade conmonUpgrade go-toolsetUpgrade podman-pluginsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade delveUpgrade crunUpgrade python3-criuUpgrade grafanaUpgrade skopeo-tests | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade ignitionUpgrade cri-o | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade podman-debuginfoUpgrade git-lfsUpgrade toolboxUpgrade toolbox-debuginfoUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade podman-remoteUpgrade criu-libsUpgrade podmanUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade skopeo-testsUpgrade grafanaUpgrade crunUpgrade podman-debugsourceUpgrade delveUpgrade criu-develUpgrade buildah-debugsourceUpgrade grafana-pcpUpgrade delve-debuginfoUpgrade golang-srcUpgrade git-lfs-debuginfoUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade skopeoUpgrade libslirp-develUpgrade container-selinuxUpgrade podman-dockerUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade fuse-overlayfsUpgrade buildahUpgrade critNo solution existsUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade go-toolsetUpgrade libslirpUpgrade crun-debuginfoUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade conmonUpgrade grafana-pcp-debuginfoUpgrade golang-miscUpgrade cockpit-podmanUpgrade udicaUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade runcUpgrade skopeo-debuginfoUpgrade golangUpgrade netavarkUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade grafana-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade criuUpgrade buildah-testsUpgrade golang-docsUpgrade git-lfs-debugsourceUpgrade slirp4netnsUpgrade podman-gvproxy-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade podman-tests | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade buildah-testsUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade grafanaUpgrade git-lfs-debugsourceUpgrade conmon-debuginfoUpgrade buildahUpgrade libslirp-debugsourceUpgrade skopeo-debugsourceUpgrade git-lfsUpgrade podman-debugsourceUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade grafana-pcp-debuginfoUpgrade go-toolsetUpgrade libslirpUpgrade toolbox-testsUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade golang-raceUpgrade golangUpgrade libslirp-develUpgrade criu-libs-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade toolbox-debugsourceUpgrade podmanUpgrade grafana-debuginfoUpgrade podman-remoteUpgrade podman-catatonitUpgrade git-lfs-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade delve-debuginfoUpgrade golang-binUpgrade critUpgrade delveUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade containers-commonUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netns-debugsourceUpgrade python3-criuUpgrade fuse-overlayfsUpgrade criuUpgrade toolbox-debuginfoUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-debugsourceUpgrade skopeo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17Upgrade go1.17-docUpgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.18-opensslUpgrade go1.18-openssl-docUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.16-srcUpgrade golang-1.13Upgrade golang-1.13-goUpgrade golang-1.16Upgrade golang-1.13-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub