The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafanaUpgrade delveUpgrade buildah-testsUpgrade buildah | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-raceUpgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golangUpgrade golang-srcUpgrade golang-misc | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Dec 5, 2023 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade delve-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade golang-srcUpgrade golangUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade buildahUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-miscUpgrade golang-binUpgrade grafanaUpgrade golang-testsUpgrade go-toolsetUpgrade delveUpgrade buildah-debugsourceUpgrade golang-docs | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade buildahUpgrade grafana | Nov 17, 2021 | May 18, 2021 |
| Redhat Openshift | — | Upgrade butaneUpgrade golang-github-prometheus-promuUpgrade cri-oUpgrade containernetworking-pluginsUpgrade openshift-clientsUpgrade atomic-openshift-service-idlerUpgrade redhat-release-coreosUpgrade ignitionUpgrade cri-toolsUpgrade openshiftUpgrade windows-machine-config-rhel8-operator | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade delve-debuginfoUpgrade golangUpgrade golang-miscUpgrade grafanaUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade buildah-testsUpgrade delveUpgrade golang-raceUpgrade go-toolsetUpgrade delve-debugsourceUpgrade buildah-debugsourceNo solution existsUpgrade grafana-debuginfoUpgrade buildahUpgrade buildah-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade golang-docs | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade golangUpgrade golang-raceUpgrade go-toolsetUpgrade grafanaUpgrade delve-debuginfoUpgrade golang-binUpgrade grafana-debuginfoUpgrade delveUpgrade delve-debugsource | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.16-docUpgrade go1.15-docUpgrade go1.16-raceUpgrade go1.15-raceUpgrade go1.15Upgrade go1.16 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub