go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafana-selinuxUpgrade aardvark-dnsUpgrade libslirp-develUpgrade grafanaUpgrade netavarkUpgrade containers-commonUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade criu-libsUpgrade python3-podmanUpgrade skopeoUpgrade cockpit-podmanUpgrade crunUpgrade skopeo-testsUpgrade criu-develUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade podmanUpgrade udicaUpgrade toolboxUpgrade libslirpUpgrade podman-testsUpgrade container-selinuxUpgrade slirp4netnsUpgrade podman-dockerUpgrade conmonUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade critUpgrade python3-criuUpgrade criuUpgrade podman-pluginsUpgrade runc | Aug 15, 2024 | Jun 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agent | Sep 6, 2024 | Jun 24, 2024 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agent | Feb 17, 2025 | Jun 24, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 24, 2024 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade critUpgrade udicaUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade crunUpgrade runcUpgrade podman-testsUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade skopeoUpgrade libslirp-develUpgrade podman-pluginsUpgrade podmanUpgrade containers-commonUpgrade criu-develUpgrade skopeo-testsUpgrade grafana-selinuxUpgrade grafanaUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade podman-remoteUpgrade python3-criuUpgrade buildah-testsUpgrade libslirpUpgrade python3-podmanUpgrade conmonUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade slirp4netnsUpgrade criuUpgrade buildah | Oct 16, 2024 | Jun 24, 2024 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeo | Aug 1, 2024 | Jun 24, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 13, 2024 | Jun 24, 2024 |
| Rocky_linux | — | Upgrade buildah-debugsourceUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade crun-debugsourceUpgrade runcUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade crunUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade criuUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade skopeoUpgrade podmanUpgrade criu-debugsourceUpgrade podman-remoteUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-testsUpgrade netavarkUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade conmonUpgrade podman-pluginsUpgrade criu-libsUpgrade slirp4netnsUpgrade podman-testsUpgrade criu-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade runc-debuginfo | Aug 22, 2024 | Jun 24, 2024 |
| Suse | — | Upgrade gh-fish-completionUpgrade velociraptorUpgrade skopeoUpgrade cosign-bash-completionUpgrade podmanUpgrade podman-remoteUpgrade podmanshUpgrade spacecmdUpgrade minikube-bash-completionUpgrade skopeo-fish-completionUpgrade ghUpgrade docker-machine-driver-kvm2Upgrade golang-github-prometheus-prometheusUpgrade velociraptor-clientUpgrade skopeo-zsh-completionUpgrade podman-dockerUpgrade skopeo-bash-completionUpgrade system-user-velociraptorUpgrade cosignUpgrade rekorUpgrade minikubeUpgrade firewalld-prometheus-configUpgrade gh-bash-completionUpgrade gh-zsh-completionUpgrade cosign-zsh-completion | Jul 4, 2024 | Jun 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub