Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aardvark-dnsUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade golang-miscUpgrade buildah-testsUpgrade osbuild-composerUpgrade golang-testsUpgrade osbuild-composer-coreUpgrade criuUpgrade buildahUpgrade libslirp-develUpgrade netavarkUpgrade podman-catatonitUpgrade golang-srcUpgrade containers-commonUpgrade criu-libsUpgrade go-toolsetUpgrade cockpit-podmanUpgrade golangUpgrade golang-binUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade delveUpgrade osbuild-composer-dnf-jsonUpgrade podman-testsUpgrade slirp4netnsUpgrade grafanaUpgrade python3-podmanUpgrade criu-develUpgrade skopeo-testsUpgrade weldr-clientUpgrade git-lfsUpgrade runcUpgrade crunUpgrade container-selinuxUpgrade udicaUpgrade conmonUpgrade critUpgrade podmanUpgrade podman-dockerUpgrade skopeoUpgrade osbuild-composer-workerUpgrade golang-raceUpgrade podman-pluginsUpgrade toolboxUpgrade podman-gvproxyUpgrade golang-docsUpgrade libslirpUpgrade python3-criu | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golang-docsUpgrade golangUpgrade golang-binUpgrade golang-sharedUpgrade golang-miscUpgrade golang-race | Apr 21, 2023 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-sharedUpgrade golang-docsUpgrade golangUpgrade golang-raceUpgrade golang-miscUpgrade golang-testsUpgrade golang-bin | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade containers-commonUpgrade osbuild-selinuxUpgrade runc-debugsourceUpgrade git-lfsUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debuginfoUpgrade skopeo-debuginfoUpgrade udicaUpgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade osbuild-luks2Upgrade golang-binUpgrade crun-debugsourceUpgrade osbuild-composer-workerUpgrade slirp4netns-debugsourceUpgrade osbuild-composerUpgrade conmon-debuginfoUpgrade delveUpgrade golang-docsUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-plugins-debuginfoUpgrade weldr-clientUpgrade container-selinuxUpgrade grafana-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade python3-osbuildUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade osbuildUpgrade weldr-client-debuginfoUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade podman-dockerUpgrade podman-debugsourceUpgrade podman-remoteUpgrade osbuild-composer-tests-debuginfoUpgrade python3-criuUpgrade grafanaUpgrade runcUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade osbuild-ostreeUpgrade libslirpUpgrade osbuild-composer-dnf-jsonUpgrade grafana-debuginfoUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade netavarkUpgrade osbuild-composer-core-debuginfoUpgrade criu-libsUpgrade golangUpgrade criuUpgrade weldr-client-debugsourceUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-coreUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-composerUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade weldr-client-tests-debuginfoUpgrade podman-pluginsUpgrade podman-catatonitUpgrade delve-debuginfoUpgrade skopeo-debugsourceUpgrade skopeoUpgrade podman-testsUpgrade golang-testsUpgrade crunUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade toolboxUpgrade git-lfs-debugsourceUpgrade buildahUpgrade osbuild-lvm2Upgrade golang-miscUpgrade python3-podmanUpgrade podmanUpgrade buildah-tests-debuginfo | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Freebsd | — | Upgrade go119Upgrade go118 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Mar 9, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade cockpit-composerUpgrade conmonUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-pluginsUpgrade podman-testsUpgrade osbuild-luks2Upgrade runcUpgrade python3-podmanUpgrade libslirpUpgrade criu-develUpgrade golang-docsUpgrade golang-raceUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade osbuild-composer-workerUpgrade golang-testsUpgrade weldr-clientUpgrade udicaUpgrade podman-dockerUpgrade delveUpgrade criuUpgrade crunUpgrade container-selinuxUpgrade slirp4netnsUpgrade buildah-testsUpgrade critUpgrade buildahUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade osbuildUpgrade criu-libsUpgrade osbuild-composer-coreUpgrade golang-miscUpgrade osbuild-composer-dnf-jsonUpgrade git-lfsUpgrade oci-seccomp-bpf-hookUpgrade python3-osbuildUpgrade golang-binUpgrade osbuild-ostreeUpgrade osbuild-composerUpgrade libslirp-develUpgrade netavarkUpgrade golang-srcUpgrade containernetworking-pluginsUpgrade grafanaUpgrade containers-commonUpgrade skopeoUpgrade podman-remoteUpgrade golangUpgrade podmanUpgrade osbuild-selinuxUpgrade osbuild-lvm2 | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade conmonUpgrade skopeoUpgrade buildahUpgrade openshift-clientsUpgrade podmanUpgrade ignition | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade containers-commonUpgrade delve-debugsourceUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade toolboxUpgrade osbuild-composer-core-debuginfoUpgrade toolbox-debugsourceUpgrade golang-docsUpgrade golang-miscUpgrade cockpit-composerUpgrade podman-gvproxy-debuginfoUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade golang-binUpgrade osbuild-selinuxUpgrade containernetworking-pluginsUpgrade delve-debuginfoUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade python3-criuUpgrade osbuild-composer-workerUpgrade git-lfs-debuginfoUpgrade osbuildUpgrade golang-srcUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade skopeoUpgrade podmanUpgrade osbuild-composerUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade podman-debuginfoUpgrade osbuild-composer-coreUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade netavarkUpgrade golang-testsUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade weldr-client-debuginfoUpgrade golangUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade python3-osbuildUpgrade criu-develUpgrade osbuild-ostreeUpgrade runcUpgrade aardvark-dnsUpgrade osbuild-lvm2Upgrade libslirp-develUpgrade critUpgrade runc-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade go-toolsetUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade osbuild-composer-debuginfoUpgrade osbuild-composer-debugsourceUpgrade golang-raceUpgrade grafana-debugsourceUpgrade git-lfs-debugsourceUpgrade weldr-clientUpgrade grafana-debuginfoUpgrade podman-gvproxyUpgrade git-lfsUpgrade fuse-overlayfsUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade conmonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade container-selinuxUpgrade conmon-debuginfoUpgrade udicaUpgrade python3-podmanUpgrade osbuild-luks2Upgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade grafanaUpgrade buildah-testsUpgrade weldr-client-tests-debuginfoUpgrade crunUpgrade cockpit-podmanUpgrade weldr-client-debugsourceUpgrade crun-debuginfoNo solution exists | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade golang-raceUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade buildahUpgrade podman-pluginsUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade golangUpgrade criu-debuginfoUpgrade conmonUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-testsUpgrade toolboxUpgrade criuUpgrade podmanUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade delve-debuginfoUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade crunUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade golang-binUpgrade runcUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade crun-debugsourceUpgrade criu-develUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade delveUpgrade criu-debugsourceUpgrade critUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade go-toolsetUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.19-docUpgrade go1.18-docUpgrade go1.19 | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-goUpgrade golang-1.18-goUpgrade golang-1.13Upgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro) | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub