Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For header.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade golangUpgrade golang-srcUpgrade slirp4netnsUpgrade python3-podmanUpgrade go-toolsetUpgrade criu-develUpgrade skopeo-testsUpgrade criu-libsUpgrade libslirp-develUpgrade containers-commonUpgrade grafana-pcpUpgrade netavarkUpgrade git-lfsUpgrade grafanaUpgrade golang-miscUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade conmonUpgrade golang-raceUpgrade criuUpgrade podman-testsUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade podmanUpgrade python3-criuUpgrade buildahUpgrade udicaUpgrade podman-pluginsUpgrade delveUpgrade container-selinuxUpgrade cockpit-podmanUpgrade golang-binUpgrade podman-remoteUpgrade runcUpgrade crunUpgrade buildah-testsUpgrade podman-catatonitUpgrade skopeoUpgrade golang-docsUpgrade toolbox-testsUpgrade crit | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade golang-miscUpgrade golang-srcUpgrade go-filesystemUpgrade golang-sharedUpgrade golang-googlecode-sqlite-develUpgrade golang-github-gorilla-mux-develUpgrade golist-debuginfoUpgrade golistUpgrade go-rpm-macrosUpgrade golang-raceUpgrade golang-googlecode-net-develUpgrade golang-github-godbus-dbus-develUpgrade go-rpm-templatesUpgrade golang-testsUpgrade go-srpm-macrosUpgrade golang-binUpgrade golangUpgrade golang-github-gorilla-context-develUpgrade golang-docsUpgrade golang-github-kr-pty-develUpgrade runc | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golangUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-srcUpgrade golang-testsUpgrade golistUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golang-docsUpgrade golang-binUpgrade golang-shared | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade grafana-pcpUpgrade toolbox-debuginfoUpgrade podman-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade criu-develUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade golang-srcUpgrade buildah-debugsourceUpgrade delveUpgrade golang-binUpgrade critUpgrade libslirp-develUpgrade podman-pluginsUpgrade containers-commonUpgrade golang-miscUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade golangUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade python3-criuUpgrade aardvark-dnsUpgrade golang-docsUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade criuUpgrade runc-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonitUpgrade skopeoUpgrade git-lfs-debuginfoUpgrade delve-debuginfoUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade grafana-pcp-debuginfoUpgrade libslirp-debugsourceUpgrade python3-podmanUpgrade go-toolsetUpgrade container-selinuxUpgrade toolboxUpgrade libslirpUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade udicaUpgrade toolbox-testsUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade buildahUpgrade netavarkUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade golang-raceUpgrade buildah-testsUpgrade git-lfsUpgrade grafana-debuginfoUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade golangUpgrade netavarkUpgrade runcUpgrade udicaUpgrade golang-miscUpgrade fuse-overlayfsUpgrade libslirpUpgrade criuUpgrade golang-binUpgrade podman-remoteUpgrade buildahUpgrade golang-testsUpgrade podman-testsUpgrade podman-catatonitUpgrade critUpgrade cockpit-podmanUpgrade golang-raceUpgrade golang-docsUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade skopeoUpgrade python3-podmanUpgrade golang-srcUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade podmanUpgrade podman-dockerUpgrade criu-develUpgrade delveUpgrade podman-pluginsUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade git-lfsUpgrade grafanaUpgrade python3-criuUpgrade crunUpgrade containers-commonUpgrade libslirp-develUpgrade go-toolsetUpgrade criu-libsUpgrade grafana-pcpUpgrade conmonUpgrade skopeo-tests | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade ignitionUpgrade cri-toolsUpgrade cri-o | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade slirp4netnsUpgrade conmon-debuginfoUpgrade skopeo-debugsourceUpgrade git-lfs-debugsourceUpgrade critUpgrade toolbox-debugsourceUpgrade crun-debuginfoUpgrade podman-dockerUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade go-toolsetUpgrade grafana-debuginfoUpgrade buildah-testsUpgrade aardvark-dnsUpgrade criuUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade netavarkUpgrade criu-debugsourceUpgrade toolbox-testsNo solution existsUpgrade buildahUpgrade podman-gvproxyUpgrade libslirpUpgrade podman-testsUpgrade fuse-overlayfsUpgrade podman-gvproxy-debuginfoUpgrade golang-docsUpgrade conmonUpgrade python3-criuUpgrade golangUpgrade grafana-pcp-debuginfoUpgrade runcUpgrade udicaUpgrade cockpit-podmanUpgrade golang-miscUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade crunUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade git-lfsUpgrade podmanUpgrade grafanaUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containers-commonUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade python3-podmanUpgrade criu-libsUpgrade toolboxUpgrade golang-testsUpgrade golang-raceUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade git-lfs-debuginfoUpgrade podman-remote-debuginfoUpgrade golang-srcUpgrade delve-debuginfoUpgrade podman-remoteUpgrade criu-develUpgrade golang-binUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade skopeoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade podman-plugins | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade buildahUpgrade git-lfs-debugsourceUpgrade conmonUpgrade go-toolsetUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade git-lfsUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade crun-debuginfoUpgrade golang-raceUpgrade slirp4netnsUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade grafana-pcp-debuginfoUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade delveUpgrade criu-debugsourceUpgrade critUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade delve-debuginfoUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade runcUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade libslirp-develUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade git-lfs-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade toolboxUpgrade criu-libsUpgrade golang-binUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade criu-develUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade skopeo-testsUpgrade python3-criuUpgrade buildah-tests-debuginfoUpgrade podman-remoteUpgrade grafana-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-raceUpgrade go1.18-docUpgrade go1.17Upgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade go1.18Upgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-goUpgrade golang-1.16-srcUpgrade golang-1.18-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.18Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16Upgrade golang-1.13-srcUpgrade golang-1.16 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub