The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-testsUpgrade go-toolsetUpgrade golang-docsUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golangUpgrade delveUpgrade golang-race | Oct 11, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golang-src | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golang-misc | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-srcUpgrade go-toolsetUpgrade golang-miscUpgrade golangUpgrade golang-raceUpgrade golang-testsUpgrade delveUpgrade golang-binUpgrade golang-docs | Jun 5, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade go-toolsetUpgrade golang-raceUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade delve-debugsourceUpgrade delveUpgrade golang-testsUpgrade golang-docs | Aug 27, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golang-binUpgrade delve-debuginfoUpgrade golangUpgrade go-toolsetUpgrade golang-raceUpgrade delve | Aug 27, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub