The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade libslirp-develUpgrade golang-testsUpgrade python3-podmanUpgrade golang-binUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade skopeoUpgrade podman-remoteUpgrade criu-develUpgrade criu-libsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade grafana-selinuxUpgrade skopeo-testsUpgrade crunUpgrade conmonUpgrade containernetworking-pluginsUpgrade toolboxUpgrade podmanUpgrade podman-pluginsUpgrade netavarkUpgrade runcUpgrade criuUpgrade python3-criuUpgrade buildah-testsUpgrade slirp4netnsUpgrade golangUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade podman-dockerUpgrade grafanaUpgrade podman-testsUpgrade golang-miscUpgrade golang-srcUpgrade libslirpUpgrade container-selinuxUpgrade cockpit-podmanUpgrade udicaUpgrade toolbox-testsUpgrade golang-docsUpgrade go-toolsetUpgrade buildahUpgrade crit | Jul 3, 2024 | Jun 5, 2024 |
| Alpine Linux | — | Upgrade goUpgrade forgejo | Aug 22, 2024 | Jun 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-shared | Jun 26, 2024 | Jun 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang-sharedUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-docs | Feb 17, 2025 | Jun 4, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 5, 2024 |
| Freebsd | — | Upgrade go121Upgrade go122Upgrade forgejo | Jun 16, 2024 | Apr 11, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Oct 8, 2024 | Jun 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Oct 8, 2024 | Jun 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 9, 2024 | Jun 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 8, 2024 | Jun 5, 2024 |
| Oracle_linux | — | Upgrade delveUpgrade podman-gvproxyUpgrade crunUpgrade cockpit-podmanUpgrade golang-srcUpgrade podman-testsUpgrade skopeo-testsUpgrade libslirp-develUpgrade slirp4netnsUpgrade python3-criuUpgrade podman-pluginsUpgrade grafanaUpgrade container-selinuxUpgrade criu-develUpgrade libslirpUpgrade conmonUpgrade go-toolsetUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade grafana-selinuxUpgrade buildahUpgrade aardvark-dnsUpgrade podmanUpgrade golang-miscUpgrade golang-docsUpgrade udicaUpgrade netavarkUpgrade golangUpgrade buildah-testsUpgrade criuUpgrade fuse-overlayfsUpgrade critUpgrade runcUpgrade golang-testsUpgrade golang-binUpgrade skopeoUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade python3-podmanUpgrade podman-catatonit | Jul 3, 2024 | Jun 4, 2024 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade openshift | Oct 2, 2024 | Jun 4, 2024 |
| Redhat_linux | — | Upgrade golangUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade containers-commonUpgrade libslirpUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade delve-debuginfoUpgrade fuse-overlayfsUpgrade podman-testsUpgrade conmonUpgrade conmon-debugsourceUpgrade buildahUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade golang-miscUpgrade aardvark-dnsUpgrade golang-srcUpgrade buildah-testsUpgrade grafana-debuginfoUpgrade cockpit-podmanUpgrade delve-debugsourceUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade podman-catatonitUpgrade critUpgrade container-selinuxUpgrade conmon-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade runcUpgrade grafana-selinuxUpgrade libslirp-debugsourceUpgrade udicaUpgrade grafanaUpgrade golang-binUpgrade golang-testsUpgrade podman-debugsourceUpgrade toolbox-testsUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade golang-docsUpgrade slirp4netns-debuginfoUpgrade grafana-debugsourceUpgrade skopeo-testsUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade delveUpgrade criu-libs-debuginfoUpgrade podman-debuginfoUpgrade go-toolsetUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade criuUpgrade crunUpgrade podmanUpgrade podman-dockerUpgrade containernetworking-plugins-debuginfo | Jul 3, 2024 | Jun 5, 2024 |
| Rocky_linux | — | Upgrade delve-debuginfoUpgrade grafana-selinuxUpgrade criu-libsUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade python3-criuUpgrade criu-debugsourceUpgrade criu-develUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade containernetworking-pluginsUpgrade grafana-debugsourceUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade podman-debuginfoUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade crunUpgrade toolbox-testsUpgrade critUpgrade golang-binUpgrade golangUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade podman-testsUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade buildahUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade conmonUpgrade libslirpUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade libslirp-debuginfo | Jul 16, 2024 | Jun 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.2.6Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Universal Forwarder to version 9.4.2 | Jul 30, 2026 | Jun 5, 2024 |
| Suse | — | Upgrade container-suseconnectUpgrade go1.21-docUpgrade go1.22-openssl-docUpgrade go1.21-openssl-docUpgrade go1.22-opensslUpgrade go1.22-openssl-raceUpgrade go1.22Upgrade go1.22-raceUpgrade go1.21-raceUpgrade go1.22-docUpgrade go1.21-opensslUpgrade go1.21Upgrade go1.21-openssl-race | Jun 11, 2024 | Jun 5, 2024 |
| Ubuntu | — | Upgrade golang-1.21-goUpgrade golang-1.18-goUpgrade golang-1.22-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.21Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.21-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.22-srcUpgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.17-goUpgrade golang-1.22Upgrade golang-1.17 | Jul 10, 2024 | Jun 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 5, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub