When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade conmonUpgrade toolboxUpgrade netavarkUpgrade podman-catatonitUpgrade criuUpgrade golang-testsUpgrade golangUpgrade podmanUpgrade golang-srcUpgrade buildah-testsUpgrade python3-podmanUpgrade buildahUpgrade skopeoUpgrade fuse-overlayfsUpgrade gvisor-tap-vsockUpgrade golang-miscUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade podman-dockerUpgrade libslirpUpgrade cockpit-podmanUpgrade crunUpgrade criu-libsUpgrade golang-docsUpgrade container-selinuxUpgrade delveUpgrade containernetworking-pluginsUpgrade critUpgrade runcUpgrade podman-pluginsUpgrade python3-criuUpgrade git-lfsUpgrade golang-binUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade containers-commonUpgrade go-toolsetUpgrade criu-develUpgrade slirp4netnsUpgrade libslirp-develUpgrade udicaUpgrade podman-gvproxyUpgrade podman-remoteUpgrade skopeo-tests | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golang-binUpgrade golang-sharedUpgrade golang-docs | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-binUpgrade golang-src | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go121Upgrade go122 | Dec 10, 2025 | Mar 6, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | May 13, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 1, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Mar 18, 2025 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade buildahUpgrade gvisor-tap-vsockUpgrade golang-testsUpgrade golangUpgrade podman-dockerUpgrade conmonUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade podman-gvproxyUpgrade golang-miscUpgrade skopeoUpgrade podman-catatonitUpgrade golang-srcUpgrade podmanUpgrade netavarkUpgrade libslirpUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade criuUpgrade buildah-testsUpgrade golang-binUpgrade golang-docsUpgrade podman-remoteUpgrade python3-criuUpgrade criu-develUpgrade containers-commonUpgrade crunUpgrade podman-testsUpgrade podman-pluginsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade critUpgrade git-lfsUpgrade runcUpgrade libslirp-develUpgrade delveUpgrade skopeo-testsUpgrade criu-libsUpgrade go-toolset | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade cri-oUpgrade cri-toolsUpgrade golang-github-prometheus-promuUpgrade podmanUpgrade ose-azure-acr-image-credential-providerUpgrade butaneUpgrade openshiftUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade criu-libsUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade golangUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade go-toolsetUpgrade podman-debugsourceUpgrade delveUpgrade podman-testsUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade git-lfsUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade delve-debuginfoUpgrade crunUpgrade libslirp-develUpgrade criu-develUpgrade buildah-testsUpgrade conmonUpgrade aardvark-dnsUpgrade gvisor-tap-vsockUpgrade runc-debuginfoUpgrade git-lfs-debugsourceUpgrade libslirp-debugsourceUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade netavarkUpgrade toolbox-testsUpgrade gvisor-tap-vsock-debugsourceUpgrade podman-remote-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-remoteUpgrade skopeoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debuginfoUpgrade buildahUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade critUpgrade criu-libs-debuginfoUpgrade containers-commonUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade toolboxUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-bin | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-raceUpgrade go1.22Upgrade go1.22-raceUpgrade go1.21-docUpgrade go1.21Upgrade go1.22-doc | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.22-srcUpgrade golang-1.17-goUpgrade golang-1.22-goUpgrade golang-1.17Upgrade golang-1.22Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.21-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.21-srcUpgrade golang-1.21Upgrade golang-1.18-src | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Mar 5, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub