An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade osbuild-composer-dnf-jsonUpgrade git-lfsUpgrade conmonUpgrade skopeoUpgrade critUpgrade weldr-clientUpgrade osbuild-composer-workerUpgrade libslirp-develUpgrade podman-testsUpgrade python3-criuUpgrade criu-develUpgrade toolboxUpgrade libslirpUpgrade podman-pluginsUpgrade skopeo-testsUpgrade grafanaUpgrade crunUpgrade udicaUpgrade runcUpgrade container-selinuxUpgrade podman-catatonitUpgrade slirp4netnsUpgrade python3-podmanUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade podmanUpgrade buildahUpgrade aardvark-dnsUpgrade buildah-testsUpgrade netavarkUpgrade podman-remoteUpgrade podman-gvproxyUpgrade criuUpgrade toolbox-testsUpgrade osbuild-composerUpgrade containers-commonUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-core | May 15, 2023 | Dec 8, 2022 |
| Alpine Linux | — | Upgrade minio-clientUpgrade go | Aug 22, 2024 | Dec 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade golang-race | Feb 7, 2023 | Dec 8, 2022 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Oct 20, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golang-docs | Feb 17, 2025 | Nov 30, 2022 |
| Centos_linux | — | Upgrade puppet-agentUpgrade yggdrasilUpgrade foreman_ygg_worker | May 5, 2023 | Dec 8, 2022 |
| Debian | — | Upgrade golang-1.19Upgrade golang-golang-x-net | Jul 30, 2024 | Dec 8, 2022 |
| Freebsd | — | Upgrade go118Upgrade go119 | Dec 7, 2022 | Dec 6, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go.Upgrade app-admin/consul.Upgrade app-containers/docker. | Nov 27, 2023 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Mar 20, 2023 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Mar 24, 2023 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Jan 10, 2024 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Mar 9, 2023 | Dec 8, 2022 |
| Oracle_linux | — | Upgrade podman-testsUpgrade golang-miscUpgrade golang-srcUpgrade buildahUpgrade git-lfsUpgrade slirp4netnsUpgrade golang-raceUpgrade cockpit-podmanUpgrade containers-commonUpgrade libslirpUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade osbuild-selinuxUpgrade criu-libsUpgrade osbuild-composer-dnf-jsonUpgrade osbuild-luks2Upgrade osbuild-lvm2Upgrade conmonUpgrade golangUpgrade grafanaUpgrade python3-osbuildUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade osbuild-composer-coreUpgrade osbuild-ostreeUpgrade go-toolsetUpgrade criuUpgrade python3-criuUpgrade osbuildUpgrade crunUpgrade podman-remoteUpgrade criu-develUpgrade weldr-clientUpgrade buildah-testsUpgrade critUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade podman-catatonitUpgrade podman-pluginsUpgrade osbuild-composerUpgrade udicaUpgrade podman-dockerUpgrade podmanUpgrade skopeo-testsUpgrade golang-testsUpgrade skopeoUpgrade runcUpgrade cockpit-composerUpgrade golang-binUpgrade osbuild-composer-workerUpgrade golang-docsUpgrade delve | Mar 8, 2023 | Nov 30, 2022 |
| Redhat Openshift | — | Upgrade microshiftUpgrade windows-machine-config-rhel9-operatorUpgrade cri-oUpgrade openshiftUpgrade skopeoUpgrade podmanUpgrade openshift-clients | Mar 31, 2023 | Nov 30, 2022 |
| Redhat_linux | — | Upgrade toolbox-testsUpgrade runc-debugsourceUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade golang-miscUpgrade critUpgrade skopeo-debugsourceUpgrade osbuild-luks2Upgrade osbuild-composer-debugsourceUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade osbuild-composer-coreUpgrade golang-testsUpgrade python3-osbuildUpgrade osbuild-composer-worker-debuginfoUpgrade skopeoUpgrade toolbox-debugsourceUpgrade grafana-debuginfoUpgrade cockpit-podmanUpgrade runcUpgrade delve-debugsourceUpgrade udicaUpgrade buildahUpgrade weldr-client-tests-debuginfoUpgrade osbuildUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade osbuild-composerUpgrade aardvark-dnsUpgrade conmonUpgrade buildah-testsUpgrade podmanUpgrade golangUpgrade podman-catatonitNo solution existsUpgrade buildah-debuginfoUpgrade python3-podmanUpgrade criu-debuginfoUpgrade netavarkUpgrade criuUpgrade git-lfs-debuginfoUpgrade podman-dockerUpgrade podman-testsUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade toolboxUpgrade golang-raceUpgrade criu-debugsourceUpgrade podman-remoteUpgrade skopeo-debuginfoUpgrade containernetworking-pluginsUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade weldr-clientUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-lvm2Upgrade grafanaUpgrade podman-gvproxy-debuginfoUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade osbuild-composer-debuginfoUpgrade containers-commonUpgrade libslirpUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade toolbox-debuginfoUpgrade delve-debuginfoUpgrade buildah-debugsourceUpgrade python3-criuUpgrade osbuild-selinuxUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade weldr-client-debugsourceUpgrade delveUpgrade weldr-client-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-workerUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade osbuild-composer-dnf-jsonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debugsourceUpgrade osbuild-composer-tests-debuginfoUpgrade criu-develUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade skopeo-testsUpgrade container-selinuxUpgrade grafana-debugsourceUpgrade cockpit-composerUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-ostreeUpgrade podman-remote-debuginfoUpgrade go-toolsetUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-docsUpgrade crun | May 5, 2023 | Dec 8, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade critUpgrade libslirp-debuginfoUpgrade libdb-debugsourceUpgrade python3-criuUpgrade libslirpUpgrade criuUpgrade criu-develUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade libdb-debuginfoUpgrade criu-debugsourceUpgrade libdb-sql-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libdb-cxxUpgrade libdb-utils-debuginfoUpgrade criu-libs | Mar 5, 2024 | Dec 8, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.19Upgrade go1.18-opensslUpgrade go1.18-openssl-raceUpgrade go1.19-docUpgrade go1.18-raceUpgrade go1.19-raceUpgrade go1.18-openssl-docUpgrade go1.18 | Dec 12, 2022 | Dec 8, 2022 |
| Ubuntu | — | Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.18-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-srcUpgrade golang-1.13-goUpgrade golang-1.13 (Ubuntu Pro) | May 1, 2023 | Dec 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub