Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade libslirpUpgrade toolboxUpgrade slirp4netnsUpgrade buildahUpgrade golangUpgrade criuUpgrade golang-testsUpgrade conmonUpgrade golang-srcUpgrade golang-raceUpgrade podman-dockerUpgrade podman-testsUpgrade fuse-overlayfsUpgrade netavarkUpgrade golang-miscUpgrade toolbox-testsUpgrade python3-podmanUpgrade criu-libsUpgrade podman-pluginsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade skopeoUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade golang-binUpgrade go-toolsetUpgrade aardvark-dnsUpgrade crunUpgrade container-selinuxUpgrade critUpgrade delveUpgrade skopeo-testsUpgrade buildah-testsUpgrade runcUpgrade containernetworking-pluginsUpgrade criu-develUpgrade udicaUpgrade podman-remoteUpgrade python3-criuUpgrade libslirp-develUpgrade golang-docsUpgrade cockpit-podman | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade golang-binUpgrade golang-github-syndtr-gocapability-develUpgrade go-rpm-templatesUpgrade golang-github-gorilla-context-develUpgrade golang-github-gorilla-mux-develUpgrade golang-googlecode-net-develUpgrade golang-docsUpgrade go-rpm-macrosUpgrade golang-raceUpgrade go-srpm-macrosUpgrade golang-testsUpgrade go-filesystemUpgrade golang-sharedUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-googlecode-sqlite-develUpgrade golist-debuginfoUpgrade golistUpgrade golang-github-kr-pty-develUpgrade runc-debuginfoUpgrade golang-github-godbus-dbus-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-binUpgrade golang-testsUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-srcUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-raceUpgrade golangUpgrade golist-debugsourceUpgrade golang-sharedUpgrade golistUpgrade golang-docsUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfo | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade slirp4netnsUpgrade buildah-debugsourceUpgrade podman-gvproxyUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade delveUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade libslirpUpgrade podman-debugsourceUpgrade conmonUpgrade skopeo-testsUpgrade podman-catatonitUpgrade slirp4netns-debugsourceUpgrade golang-raceUpgrade cockpit-podmanUpgrade delve-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade skopeoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade python3-podmanUpgrade toolbox-testsUpgrade netavarkUpgrade podman-debuginfoUpgrade critUpgrade podmanUpgrade golang-miscUpgrade container-selinuxUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade conmon-debugsourceUpgrade python3-criuUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade golang-docsUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade delve-debuginfoUpgrade containers-commonUpgrade grafana-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade buildah-testsUpgrade runcUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade go-toolsetUpgrade golangUpgrade containernetworking-pluginsUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade grafanaUpgrade criu-libs-debuginfoUpgrade buildahUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-src | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | No solution exists | May 15, 2025 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Oct 11, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade criu-libsUpgrade golang-srcUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade criuUpgrade golangUpgrade buildah-testsUpgrade containers-commonUpgrade python3-podmanUpgrade golang-testsUpgrade buildahUpgrade netavarkUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade podman-pluginsUpgrade python3-criuUpgrade podman-gvproxyUpgrade golang-docsUpgrade criu-develUpgrade skopeo-testsUpgrade skopeoUpgrade conmonUpgrade podmanUpgrade grafanaUpgrade container-selinuxUpgrade golang-binUpgrade podman-dockerUpgrade libslirp-develUpgrade crunUpgrade slirp4netnsUpgrade libslirpUpgrade udicaUpgrade critUpgrade delveUpgrade golang-raceUpgrade podman-testsUpgrade runc | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade golang-binNo solution existsUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade golang-miscUpgrade toolboxUpgrade skopeoUpgrade containernetworking-pluginsUpgrade grafana-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade netavarkUpgrade crunUpgrade python3-podmanUpgrade criu-debuginfoUpgrade golang-raceUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade critUpgrade golang-testsUpgrade podman-catatonitUpgrade udicaUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade podman-debuginfoUpgrade criuUpgrade golang-docsUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade containers-commonUpgrade runcUpgrade golangUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade go-toolsetUpgrade podman-dockerUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade delveUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade podman-testsUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade conmonUpgrade buildahUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade criu-libsUpgrade libslirp-develUpgrade delve-debuginfoUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade container-selinuxUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade toolbox-debuginfoUpgrade conmon-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade golang-binUpgrade podman-testsUpgrade grafana-debuginfoUpgrade runcUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade containernetworking-pluginsUpgrade podmanUpgrade libslirp-debuginfoUpgrade delve-debugsourceUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade podman-remoteUpgrade buildahUpgrade toolbox-testsUpgrade skopeoUpgrade critUpgrade toolbox-debuginfoUpgrade crunUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade skopeo-debuginfoUpgrade criuUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade libslirpUpgrade criu-libsUpgrade golang-raceUpgrade go-toolsetUpgrade golangUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade containers-commonUpgrade criu-develUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade delve-debuginfoUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade conmonUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-docUpgrade go1.17Upgrade go1.17-docUpgrade go1.18Upgrade go1.18-raceUpgrade go1.17-raceUpgrade go1.18-openssl-docUpgrade go1.18-openssl | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13Upgrade golang-1.13-srcUpgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-goUpgrade golang-1.16Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.18 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub