Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-catatonitUpgrade buildahUpgrade go-toolsetUpgrade osbuild-composerUpgrade golang-srcUpgrade golangUpgrade aardvark-dnsUpgrade golang-binUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade criu-libsUpgrade podman-remoteUpgrade libslirp-develUpgrade buildah-testsUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-coreUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade criuUpgrade cockpit-podmanUpgrade golang-miscUpgrade golang-testsUpgrade podman-gvproxyUpgrade osbuild-composer-dnf-jsonUpgrade critUpgrade container-selinuxUpgrade libslirpUpgrade skopeo-testsUpgrade podman-pluginsUpgrade git-lfsUpgrade criu-develUpgrade python3-criuUpgrade podman-testsUpgrade runcUpgrade golang-raceUpgrade udicaUpgrade weldr-clientUpgrade grafanaUpgrade podman-dockerUpgrade toolboxUpgrade podmanUpgrade golang-docsUpgrade osbuild-composer-workerUpgrade crunUpgrade python3-podmanUpgrade skopeoUpgrade conmonUpgrade slirp4netnsUpgrade delve | Jan 26, 2023 | Oct 14, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Oct 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-raceUpgrade golang-sharedUpgrade golang-misc | Apr 21, 2023 | Oct 14, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golangUpgrade golang-docsUpgrade golang-srcUpgrade golang-raceUpgrade golang-binUpgrade golang-miscUpgrade golang-tests | Feb 17, 2025 | Oct 4, 2022 |
| Centos_linux | — | Upgrade skopeoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade cockpit-composerUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade conmonUpgrade osbuild-composer-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golangUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade weldr-client-debugsourceUpgrade libslirpUpgrade slirp4netnsUpgrade osbuild-composer-coreUpgrade golang-raceUpgrade golang-testsUpgrade podman-testsUpgrade buildah-debugsourceUpgrade crunUpgrade git-lfs-debugsourceUpgrade podman-pluginsUpgrade criuUpgrade toolbox-testsUpgrade toolboxUpgrade weldr-client-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade buildahUpgrade golang-miscUpgrade osbuild-ostreeUpgrade podmanUpgrade grafana-debuginfoUpgrade netavarkUpgrade osbuild-composer-core-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade osbuild-lvm2Upgrade criu-libsUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade osbuild-composer-dnf-jsonUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade delveUpgrade go-toolsetUpgrade golang-binUpgrade git-lfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-pluginsUpgrade crun-debuginfoUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade critUpgrade container-selinuxUpgrade grafanaUpgrade weldr-client-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade python3-criuUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade osbuildUpgrade aardvark-dnsUpgrade osbuild-composer-tests-debuginfoUpgrade udicaUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade osbuild-luks2Upgrade osbuild-composer-workerUpgrade crun-debugsourceUpgrade weldr-clientUpgrade osbuild-composerUpgrade podman-debuginfoUpgrade osbuild-selinuxUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade golang-docsUpgrade python3-osbuildUpgrade git-lfsUpgrade grafana-debugsourceUpgrade containers-commonUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-tests | Jan 24, 2023 | Oct 14, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Oct 14, 2022 |
| Freebsd | — | Upgrade go118Upgrade go119 | Nov 4, 2022 | Oct 4, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 13, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 6, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Mar 9, 2023 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Dec 9, 2022 | Oct 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 9, 2023 | Oct 14, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade podman-testsUpgrade buildah-testsUpgrade critUpgrade criu-develUpgrade udicaUpgrade osbuild-luks2Upgrade conmonUpgrade golang-docsUpgrade runcUpgrade python3-podmanUpgrade weldr-clientUpgrade podman-dockerUpgrade python3-criuUpgrade crunUpgrade golang-raceUpgrade container-selinuxUpgrade golang-testsUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade libslirpUpgrade podman-catatonitUpgrade podman-pluginsUpgrade slirp4netnsUpgrade cockpit-composerUpgrade osbuild-composer-workerUpgrade delveUpgrade cockpit-podmanUpgrade criuUpgrade osbuild-ostreeUpgrade criu-libsUpgrade osbuild-composer-coreUpgrade osbuild-composerUpgrade golang-srcUpgrade containers-commonUpgrade podmanUpgrade osbuild-selinuxUpgrade osbuildUpgrade osbuild-lvm2Upgrade containernetworking-pluginsUpgrade grafanaUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade buildahUpgrade aardvark-dnsUpgrade skopeoUpgrade podman-remoteUpgrade golang-binUpgrade git-lfsUpgrade libslirp-develUpgrade osbuild-composer-dnf-jsonUpgrade fuse-overlayfsUpgrade golangUpgrade python3-osbuild | Jan 24, 2023 | Oct 4, 2022 |
| Redhat Openshift | — | Upgrade conmonUpgrade podmanUpgrade skopeoUpgrade buildahUpgrade openshift-clientsUpgrade ignition | Jan 18, 2023 | Oct 4, 2022 |
| Redhat_linux | — | Upgrade libslirp-debugsourceUpgrade conmonUpgrade osbuild-composer-debugsourceUpgrade fuse-overlayfsUpgrade osbuild-composer-debuginfoUpgrade grafanaUpgrade buildah-testsUpgrade container-selinuxUpgrade libslirpUpgrade buildahUpgrade skopeo-debuginfoUpgrade crun-debuginfoUpgrade slirp4netnsNo solution existsUpgrade containernetworking-plugins-debugsourceUpgrade udicaUpgrade toolbox-testsUpgrade go-toolsetUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade crunUpgrade grafana-debugsourceUpgrade grafana-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade weldr-client-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade podman-dockerUpgrade git-lfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade python3-podmanUpgrade weldr-client-tests-debuginfoUpgrade weldr-clientUpgrade osbuild-luks2Upgrade golang-raceUpgrade podman-testsUpgrade osbuildUpgrade toolbox-debugsourceUpgrade osbuild-selinuxUpgrade skopeo-testsUpgrade criu-develUpgrade containers-commonUpgrade libslirp-debuginfoUpgrade critUpgrade criuUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade osbuild-lvm2Upgrade git-lfs-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade runc-debugsourceUpgrade golang-docsUpgrade cockpit-composerUpgrade podman-remoteUpgrade netavarkUpgrade podman-gvproxy-debuginfoUpgrade podman-remote-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade osbuild-composerUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade osbuild-composer-dnf-jsonUpgrade delveUpgrade podman-pluginsUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade golang-binUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade golang-srcUpgrade toolboxUpgrade libslirp-develUpgrade golang-miscUpgrade buildah-debugsourceUpgrade golang-testsUpgrade osbuild-ostreeUpgrade toolbox-debuginfoUpgrade delve-debuginfoUpgrade golangUpgrade slirp4netns-debugsourceUpgrade weldr-client-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade python3-osbuildUpgrade delve-debugsourceUpgrade criu-libsUpgrade podman-debugsourceUpgrade podman-catatonitUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-coreUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debuginfoUpgrade osbuild-composer-worker | Jan 24, 2023 | Oct 14, 2022 |
| Rocky_linux | — | Upgrade containers-commonUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade podman-testsUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade criuUpgrade toolboxUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-raceUpgrade libslirp-develUpgrade skopeoUpgrade podman-gvproxyUpgrade conmonUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade crun-debuginfoUpgrade libslirpUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade golangUpgrade slirp4netnsUpgrade crunUpgrade delve-debuginfoUpgrade netavarkUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade libslirp-debuginfoUpgrade critUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade criu-develUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade go-toolsetUpgrade aardvark-dnsUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade runcUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-binUpgrade runc-debugsourceUpgrade python3-criuUpgrade delveUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfo | Mar 12, 2024 | Oct 14, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Oct 14, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.19-raceUpgrade go1.18-opensslUpgrade go1.19Upgrade go1.19-docUpgrade go1.18-docUpgrade go1.18 | Oct 26, 2022 | Oct 14, 2022 |
| Ubuntu | — | Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-goUpgrade golang-1.18-srcUpgrade golang-1.16Upgrade golang-1.18 | May 1, 2023 | Oct 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 14, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub