Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade podmanUpgrade crunUpgrade udicaUpgrade critUpgrade buildah-testsUpgrade buildahUpgrade python3-criuUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade skopeoUpgrade podman-dockerUpgrade golang-testsUpgrade podman-testsUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podman-catatonitUpgrade podman-remoteUpgrade runcUpgrade golang-binUpgrade container-selinuxUpgrade podman-pluginsUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade containers-commonUpgrade go-toolsetUpgrade podman-gvproxyUpgrade golang-miscUpgrade delveUpgrade criu-develUpgrade conmonUpgrade aardvark-dnsUpgrade git-lfsUpgrade libslirpUpgrade skopeo-testsUpgrade python3-podmanUpgrade golang-srcUpgrade criu-libsUpgrade toolboxUpgrade slirp4netnsUpgrade golang-raceUpgrade libslirp-develUpgrade grafanaUpgrade netavarkUpgrade grafana-pcp | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade golang-googlecode-net-develUpgrade golang-binUpgrade go-rpm-macrosUpgrade golang-sharedUpgrade runcUpgrade golang-docsUpgrade golist-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade golang-github-kr-pty-develUpgrade go-filesystemUpgrade golangUpgrade golang-googlecode-sqlite-develUpgrade golang-miscUpgrade go-rpm-templatesUpgrade golang-srcUpgrade golang-testsUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-github-gorilla-context-develUpgrade go-srpm-macrosUpgrade golang-race | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-miscUpgrade golang-srcUpgrade golang-raceUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-testsUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-sharedUpgrade golist-debuginfoUpgrade golang-binUpgrade golist-debugsource | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade slirp4netns-debuginfoUpgrade podman-dockerUpgrade libslirpUpgrade go-toolsetUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade git-lfsUpgrade grafana-pcp-debuginfoUpgrade podman-debugsourceUpgrade buildahUpgrade buildah-testsUpgrade conmonUpgrade criu-libs-debuginfoUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade libslirp-debugsourceUpgrade fuse-overlayfsUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade golang-raceUpgrade skopeo-debugsourceUpgrade podman-gvproxyUpgrade podman-testsUpgrade netavarkUpgrade toolbox-testsUpgrade udicaUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade golang-docsUpgrade python3-podmanUpgrade crunUpgrade git-lfs-debugsourceUpgrade runc-debugsourceUpgrade golang-testsUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade golang-srcUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade runcUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade python3-criuUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade criu-libsUpgrade critUpgrade criu-debuginfoUpgrade criu-develUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade golangUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade golang-miscUpgrade git-lfs-debuginfoUpgrade delveUpgrade aardvark-dnsUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade slirp4netns-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade criu-develUpgrade critUpgrade udicaUpgrade criuUpgrade delveUpgrade grafana-pcpUpgrade golang-docsUpgrade podmanUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade golang-binUpgrade golang-testsUpgrade skopeoUpgrade skopeo-testsUpgrade podman-remoteUpgrade runcUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade buildah-testsUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade golang-srcUpgrade go-toolsetUpgrade python3-podmanUpgrade containers-commonUpgrade crunUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade podman-dockerUpgrade podman-testsUpgrade podman-gvproxyUpgrade netavarkUpgrade fuse-overlayfsUpgrade criu-libsUpgrade buildahUpgrade libslirp-develUpgrade git-lfsUpgrade golang-miscUpgrade golang-raceUpgrade libslirpUpgrade conmonUpgrade grafana | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-bcryptUpgrade criuUpgrade python-pexpectUpgrade python-packagingUpgrade python-pyperclipUpgrade containernetworking-pluginsUpgrade haproxyUpgrade python-rfc3986Upgrade fuse-overlayfsUpgrade python-zeroconfUpgrade ovn22.06Upgrade pysnmpUpgrade atomic-openshift-service-idlerUpgrade python-keystoneauth1Upgrade python-soupsieveUpgrade python-pycadfUpgrade python-sixUpgrade python-greenletUpgrade python-vineUpgrade python-oslo-i18nUpgrade python-zippUpgrade python-coloramaUpgrade python-oslo-policyUpgrade python-warlockUpgrade python-retryingUpgrade python-oslo-configUpgrade ignitionUpgrade python-oslo-concurrencyUpgrade rust-bootupdUpgrade python-prometheus_clientUpgrade python-swiftclientUpgrade python-dracclientUpgrade openshift-ansibleUpgrade skopeoUpgrade butaneUpgrade python-ifaddrUpgrade python-sqlparseUpgrade python-cachetoolsUpgrade python-oslo-cacheUpgrade python-decoratorUpgrade runcUpgrade ovn22.03Upgrade python-beautifulsoup4Upgrade python-logutilsUpgrade python-osc-libUpgrade openshift-kuryrUpgrade openshiftUpgrade python-simplegenericUpgrade containers-commonUpgrade python-msgpackUpgrade python-glanceclientUpgrade python-tenacityUpgrade python-flaskUpgrade python-voluptuousUpgrade python-requestsexceptionsUpgrade rust-afterburnUpgrade python-constructUpgrade python-wsmeUpgrade python-webtestUpgrade podmanUpgrade python-keyringUpgrade python-toozUpgrade python-jsonschemaUpgrade python-sushyUpgrade toolboxUpgrade openshift-clientsUpgrade python-appdirsUpgrade python-debtcollectorUpgrade python-tempitaUpgrade python-osprofilerUpgrade python-simplejsonUpgrade python-wraptUpgrade python-singledispatchUpgrade python-oslo-dbUpgrade python-oslo-logUpgrade python-hardwareUpgrade python-oslo-utilsUpgrade python-cinderclientUpgrade python-jsonpath-rwUpgrade python-pecanUpgrade cri-toolsUpgrade python-cliffUpgrade python-proliantutilsUpgrade python-keystonemiddlewareUpgrade python-kazooUpgrade python-openstacksdkUpgrade python-iso8601Upgrade python-wcwidthUpgrade python-webobUpgrade python-editorUpgrade python-os-traitsUpgrade python-werkzeugUpgrade openstack-ironic-inspectorUpgrade python-stevedoreUpgrade python-repoze-lruUpgrade conmonUpgrade python-automatonUpgrade python-yappiUpgrade python-oslo-contextUpgrade container-selinuxUpgrade python-funcsigsUpgrade python-pasteUpgrade python-fastenersUpgrade python-oslo-serviceUpgrade python-memcachedUpgrade python-oslo-serializationUpgrade openvswitch2.17Upgrade python-zakeUpgrade libsodiumUpgrade python-routesUpgrade python-pyrsistentUpgrade python-dogpile-cacheUpgrade python-kombuUpgrade python-dataclassesUpgrade libslirpUpgrade slirp4netnsUpgrade pyparsingUpgrade python-oslo-metricsUpgrade python-munchUpgrade python-oslo-middlewareUpgrade crunUpgrade python-alembicUpgrade python-paste-deployUpgrade python-oslo-upgradecheckUpgrade console-login-helper-messagesUpgrade python-pintUpgrade coreos-installerUpgrade python-pycdlibUpgrade python-oslo-messagingUpgrade python-keystoneclientUpgrade openstack-ironic-python-agentUpgrade python-redisUpgrade buildahUpgrade python-ironic-prometheus-exporterUpgrade python-sushy-oem-idracUpgrade python-amqpUpgrade python-oslo-rootwrapUpgrade kata-containersUpgrade python-migrateUpgrade python-pbrUpgrade python-scciclientUpgrade python-waitressUpgrade python-futuristUpgrade cri-oUpgrade python-oslo-versionedobjectsUpgrade python-ironic-libUpgrade openstack-ironicUpgrade python-pynaclUpgrade python-SecretStorageUpgrade python-importlib-metadataUpgrade python-os-service-typesUpgrade python-statsd | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golangUpgrade conmon-debuginfoUpgrade libslirpUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade go-toolsetUpgrade python3-podmanUpgrade container-selinuxUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade git-lfs-debugsourceUpgrade git-lfsUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade podman-testsUpgrade podman-dockerUpgrade golang-srcUpgrade grafanaUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade skopeo-testsUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade conmonUpgrade buildah-testsUpgrade golang-raceUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade buildahUpgrade podman-remote-debuginfoUpgrade podmanUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade crunUpgrade grafana-pcpUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade podman-catatonitUpgrade libslirp-debuginfoUpgrade fuse-overlayfsUpgrade grafana-debuginfoUpgrade criuUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade grafana-pcp-debuginfoUpgrade udicaUpgrade crun-debugsourceUpgrade netavarkUpgrade git-lfs-debuginfoUpgrade toolboxUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade golang-binUpgrade aardvark-dnsUpgrade conmon-debugsourceNo solution existsUpgrade delve-debugsourceUpgrade golang-testsUpgrade criu-debugsourceUpgrade skopeoUpgrade podman-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade podman-remoteUpgrade git-lfs-debuginfoUpgrade buildah-debuginfoUpgrade grafana-pcp-debuginfoUpgrade golangUpgrade golang-binUpgrade criuUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade grafana-debuginfoUpgrade buildahUpgrade grafana-pcpUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade delve-debuginfoUpgrade podman-catatonitUpgrade go-toolsetUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debugsourceUpgrade git-lfs-debugsourceUpgrade conmonUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade crunUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade git-lfsUpgrade runc-debuginfoUpgrade delve-debugsourceUpgrade podman-debugsourceUpgrade delveUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade libslirp-debugsourceUpgrade toolboxUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade criu-develUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade podmanUpgrade toolbox-debuginfoUpgrade libslirpUpgrade criu-libsUpgrade critUpgrade golang-race | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.17Upgrade go1.18Upgrade go1.18-raceUpgrade go1.17-raceUpgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.18-srcUpgrade golang-1.13-goUpgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.18-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub