An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade osbuild-composer-coreUpgrade podman-remoteUpgrade aardvark-dnsUpgrade criuUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade podmanUpgrade osbuild-composerUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade containers-commonUpgrade slirp4netnsUpgrade podman-dockerUpgrade buildahUpgrade netavarkUpgrade python3-podmanUpgrade skopeoUpgrade criu-develUpgrade critUpgrade libslirpUpgrade conmonUpgrade osbuild-composer-dnf-jsonUpgrade udicaUpgrade crunUpgrade libslirp-develUpgrade grafanaUpgrade runcUpgrade weldr-clientUpgrade container-selinuxUpgrade toolboxUpgrade podman-testsUpgrade python3-criuUpgrade git-lfsUpgrade skopeo-testsUpgrade osbuild-composer-workerUpgrade podman-plugins | May 15, 2023 | Dec 8, 2022 |
| Alpine Linux | — | Upgrade goUpgrade minio-client | Aug 22, 2024 | Dec 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-bin | Feb 7, 2023 | Dec 8, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Oct 20, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade golang-race | Feb 17, 2025 | Nov 30, 2022 |
| Centos_linux | — | Upgrade foreman_ygg_workerUpgrade yggdrasilUpgrade puppet-agent | May 5, 2023 | Dec 8, 2022 |
| Debian | — | Upgrade golang-1.19Upgrade golang-golang-x-net | Jul 30, 2024 | Dec 8, 2022 |
| Freebsd | — | Upgrade go118Upgrade go119 | Dec 7, 2022 | Dec 6, 2022 |
| Gentoo Linux | — | Upgrade app-containers/docker.Upgrade app-admin/consul.Upgrade dev-lang/go. | Nov 27, 2023 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Mar 20, 2023 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 24, 2023 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Jan 10, 2024 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 9, 2023 | Dec 8, 2022 |
| Oracle_linux | — | Upgrade netavarkUpgrade golangUpgrade libslirpUpgrade grafanaUpgrade criu-libsUpgrade golang-raceUpgrade containers-commonUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade osbuild-composer-coreUpgrade conmonUpgrade git-lfsUpgrade osbuild-selinuxUpgrade osbuild-luks2Upgrade podman-gvproxyUpgrade golang-srcUpgrade python3-osbuildUpgrade python3-podmanUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-ostreeUpgrade podman-testsUpgrade buildahUpgrade go-toolsetUpgrade golang-miscUpgrade osbuild-lvm2Upgrade libslirp-develUpgrade slirp4netnsUpgrade udicaUpgrade skopeo-testsUpgrade critUpgrade podman-catatonitUpgrade buildah-testsUpgrade crunUpgrade weldr-clientUpgrade skopeoUpgrade runcUpgrade golang-binUpgrade golang-testsUpgrade cockpit-composerUpgrade podman-dockerUpgrade podmanUpgrade osbuild-composerUpgrade osbuild-composer-workerUpgrade osbuildUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade delveUpgrade container-selinuxUpgrade criuUpgrade podman-remoteUpgrade criu-develUpgrade python3-criuUpgrade golang-docs | Mar 8, 2023 | Nov 30, 2022 |
| Redhat Openshift | — | Upgrade skopeoUpgrade cri-oUpgrade openshiftUpgrade openshift-clientsUpgrade podmanUpgrade windows-machine-config-rhel9-operatorUpgrade microshift | Mar 31, 2023 | Nov 30, 2022 |
| Redhat_linux | — | Upgrade critUpgrade golang-raceUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade osbuild-luks2Upgrade toolboxUpgrade osbuildUpgrade cockpit-podmanUpgrade buildah-testsUpgrade conmonUpgrade podman-remoteUpgrade python3-podmanUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade osbuild-composer-debugsourceUpgrade toolbox-debugsourceUpgrade golang-binUpgrade conmon-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade golang-miscUpgrade criu-debuginfoUpgrade slirp4netnsNo solution existsUpgrade osbuild-composerUpgrade buildahUpgrade runcUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade udicaUpgrade osbuild-composer-coreUpgrade podman-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debuginfoUpgrade podman-dockerUpgrade podman-catatonitUpgrade podmanUpgrade grafana-debuginfoUpgrade golang-testsUpgrade runc-debugsourceUpgrade conmon-debugsourceUpgrade git-lfs-debuginfoUpgrade golangUpgrade criu-libs-debuginfoUpgrade weldr-client-tests-debuginfoUpgrade skopeo-debugsourceUpgrade delve-debugsourceUpgrade skopeo-debuginfoUpgrade python3-osbuildUpgrade netavarkUpgrade criu-debugsourceUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade osbuild-lvm2Upgrade crun-debugsourceUpgrade go-toolsetUpgrade libslirp-develUpgrade crun-debuginfoUpgrade osbuild-ostreeUpgrade buildah-debugsourceUpgrade delve-debuginfoUpgrade grafanaUpgrade containers-commonUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade golang-docsUpgrade slirp4netns-debuginfoUpgrade cockpit-composerUpgrade toolbox-debuginfoUpgrade osbuild-selinuxUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade python3-criuUpgrade weldr-client-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade osbuild-composer-workerUpgrade criu-develUpgrade libslirpUpgrade git-lfsUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-core-debuginfoUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade grafana-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade weldr-client-debugsourceUpgrade delveUpgrade git-lfs-debugsourceUpgrade weldr-client | May 5, 2023 | Dec 8, 2022 |
| Rocky_linux | — | Upgrade libslirpUpgrade criuUpgrade libslirp-debugsourceUpgrade criu-develUpgrade libdb-debugsourceUpgrade libslirp-debuginfoUpgrade python3-criuUpgrade libdb-sql-devel-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade criu-debugsourceUpgrade criu-libsUpgrade libdb-utils-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libdb-sql-debuginfoUpgrade criu-debuginfoUpgrade libslirp-develUpgrade libdb-cxxUpgrade oci-seccomp-bpf-hook | Mar 5, 2024 | Dec 8, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.19Upgrade go1.19-docUpgrade go1.18-openssl-raceUpgrade go1.18-opensslUpgrade go1.19-raceUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18 | Dec 12, 2022 | Dec 8, 2022 |
| Ubuntu | — | Upgrade golang-1.13-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.16-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.18-go | May 1, 2023 | Dec 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub