Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-libsUpgrade golang-docsUpgrade crunUpgrade skopeo-testsUpgrade grafana-pcpUpgrade grafanaUpgrade libslirpUpgrade critUpgrade container-selinuxUpgrade libslirp-develUpgrade delveUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade containers-commonUpgrade podman-remoteUpgrade python3-criuUpgrade podman-pluginsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade buildahUpgrade podman-testsUpgrade podmanUpgrade golang-testsUpgrade golang-raceUpgrade criuUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade python3-podmanUpgrade buildah-testsUpgrade netavarkUpgrade udicaUpgrade golang-srcUpgrade golangUpgrade conmonUpgrade golang-miscUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade golang-binUpgrade toolbox-testsUpgrade toolboxUpgrade skopeo | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade golang-sharedUpgrade golang-github-kr-pty-develUpgrade golang-raceUpgrade golang-testsUpgrade golang-docsUpgrade golang-github-gorilla-context-develUpgrade golang-googlecode-sqlite-develUpgrade golang-srcUpgrade golang-binUpgrade runc-debuginfoUpgrade golang-miscUpgrade golangUpgrade golang-github-godbus-dbus-develUpgrade go-rpm-macrosUpgrade go-filesystemUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-googlecode-net-develUpgrade golist-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade go-srpm-macrosUpgrade go-rpm-templates | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golangUpgrade golist-debuginfoUpgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade golang-github-cpuguy83-md2manUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-srcUpgrade golang-docsUpgrade golist-debugsourceUpgrade golang-sharedUpgrade golang-binUpgrade golang-race | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debugsourceUpgrade buildahUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade toolbox-testsUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade golang-binUpgrade podman-debugsourceUpgrade criu-develUpgrade podman-remoteUpgrade skopeo-testsUpgrade go-toolsetUpgrade podman-catatonitUpgrade grafana-pcp-debuginfoUpgrade containernetworking-pluginsUpgrade criuUpgrade buildah-testsUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-docsUpgrade runcUpgrade container-selinuxUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade grafana-pcpUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade crun-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade udicaUpgrade skopeoUpgrade podmanUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade podman-gvproxyUpgrade podman-dockerUpgrade criu-libsUpgrade netavarkUpgrade grafanaUpgrade golangUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade podman-testsUpgrade golang-miscUpgrade cockpit-podmanUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade golang-srcUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade slirp4netnsUpgrade python3-podmanUpgrade libslirp-develUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade delve-debugsourceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade fuse-overlayfsUpgrade toolboxUpgrade crunUpgrade conmonUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade skopeo-debugsourceUpgrade podman-plugins | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade criuUpgrade podman-catatonitUpgrade critUpgrade golang-miscUpgrade podmanUpgrade udicaUpgrade golangUpgrade golang-raceUpgrade aardvark-dnsUpgrade skopeoUpgrade runcUpgrade podman-remoteUpgrade buildahUpgrade python3-podmanUpgrade golang-binUpgrade fuse-overlayfsUpgrade netavarkUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade grafana-pcpUpgrade golang-docsUpgrade criu-libsUpgrade criu-develUpgrade containers-commonUpgrade libslirp-develUpgrade golang-srcUpgrade delveUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade python3-criuUpgrade crunUpgrade podman-pluginsUpgrade container-selinuxUpgrade cockpit-podmanUpgrade conmonUpgrade skopeo-testsUpgrade grafanaUpgrade slirp4netnsUpgrade podman-testsUpgrade go-toolset | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade ignitionUpgrade slirp4netnsUpgrade kernel-rtUpgrade runcUpgrade haproxyUpgrade buildahUpgrade fuse-overlayfsUpgrade cri-toolsUpgrade podmanUpgrade skopeoUpgrade crunUpgrade toolboxUpgrade conmonUpgrade butaneUpgrade container-selinuxUpgrade openshift-clientsUpgrade containers-commonUpgrade cri-oUpgrade containernetworking-plugins | Jan 18, 2023 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-debugsourceUpgrade critUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade golangUpgrade libslirp-debuginfoUpgrade golang-binUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debuginfoUpgrade go-toolsetUpgrade aardvark-dnsUpgrade golang-srcUpgrade podman-debuginfoUpgrade grafana-pcpUpgrade container-selinuxUpgrade criu-debuginfoUpgrade udicaUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade containers-commonUpgrade buildah-testsUpgrade buildahUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade criu-libsUpgrade grafana-pcp-debuginfoUpgrade libslirp-develUpgrade golang-docsUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade runcUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade grafanaUpgrade delve-debuginfoNo solution existsUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade conmonUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade netavarkUpgrade podman-catatonitUpgrade golang-raceUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade skopeo-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade podmanUpgrade skopeoUpgrade libslirpUpgrade podman-gvproxyUpgrade toolboxUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade podman-testsUpgrade crunUpgrade golang-miscUpgrade podman-dockerUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade grafana-debuginfoUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade podman-plugins | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade golang-binUpgrade podman-pluginsUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golangUpgrade conmon-debugsourceUpgrade golang-raceUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade buildah-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade grafana-pcp-debuginfoUpgrade containernetworking-pluginsUpgrade libslirpUpgrade toolbox-testsUpgrade buildahUpgrade toolboxUpgrade crunUpgrade fuse-overlayfsUpgrade delve-debuginfoUpgrade grafana-debuginfoUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-debugsourceUpgrade criu-libsUpgrade grafana-pcpUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade runcUpgrade criu-develUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade critUpgrade podman-debuginfoUpgrade libslirp-develUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade delveUpgrade slirp4netns-debugsourceUpgrade go-toolsetUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade containers-commonUpgrade skopeo-testsUpgrade python3-criuUpgrade buildah-tests | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18Upgrade go1.18-opensslUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade go1.17-docUpgrade go1.17Upgrade go1.18-docUpgrade go1.17-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16Upgrade golang-1.18-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub