Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade buildah-testsUpgrade podman-catatonitUpgrade buildahUpgrade podman-remoteUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade criu-libsUpgrade critUpgrade python3-criuUpgrade aardvark-dnsUpgrade runcUpgrade udicaUpgrade libslirp-develUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade libslirpUpgrade podman-pluginsUpgrade python3-podmanUpgrade toolbox-testsUpgrade toolboxUpgrade crunUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade skopeoUpgrade conmonUpgrade fuse-overlayfsUpgrade criu-develUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade podman-dockerUpgrade netavark | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade containerd-stressUpgrade golang-srcUpgrade golang-binUpgrade golang-testsUpgrade containerdUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade golang-race | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-srcUpgrade golang-raceUpgrade golang-miscUpgrade golang | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade golang-miscUpgrade crunUpgrade delveUpgrade conmonUpgrade criu-libsUpgrade libslirpUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade criu-develUpgrade netavarkUpgrade podman-dockerUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade libslirp-develUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade podman-gvproxyUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade criuUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade podman-testsUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade crun-debuginfoUpgrade golang-raceUpgrade golangUpgrade slirp4netnsUpgrade buildah-testsUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade critUpgrade containers-commonUpgrade runc-debugsourceUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade golang-srcUpgrade podman-plugins-debuginfoUpgrade podman-catatonitUpgrade delve-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade udicaUpgrade toolbox-debugsourceUpgrade runcUpgrade podman-remoteUpgrade podman-debuginfoUpgrade podmanUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade golang-testsUpgrade golang-binUpgrade buildahUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade container-selinuxUpgrade skopeo-testsUpgrade podmanUpgrade criu-develUpgrade podman-remoteUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade containers-commonUpgrade podman-pluginsUpgrade podman-testsUpgrade buildah-testsUpgrade python3-podmanUpgrade criuUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade podman-dockerUpgrade runcUpgrade conmonUpgrade aardvark-dnsUpgrade critUpgrade podman-catatonitUpgrade libslirpUpgrade python3-criuUpgrade slirp4netnsUpgrade netavarkUpgrade fuse-overlayfsUpgrade udicaUpgrade buildahUpgrade crun | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade skopeoUpgrade microshiftUpgrade openshift-clientsUpgrade podmanUpgrade buildahUpgrade cri-tools | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade skopeo-debuginfoNo solution existsUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade toolbox-testsUpgrade podman-testsUpgrade criuUpgrade criu-develUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade runcUpgrade podman-remoteUpgrade podman-dockerUpgrade golang-docsUpgrade golang-binUpgrade critUpgrade container-selinuxUpgrade buildah-debugsourceUpgrade golang-testsUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade podmanUpgrade udicaUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade libslirp-debuginfoUpgrade crunUpgrade go-toolsetUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade delveUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade buildahUpgrade buildah-testsUpgrade aardvark-dnsUpgrade delve-debugsourceUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade libslirpUpgrade buildah-debuginfoUpgrade golang-srcUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade golang-raceUpgrade toolboxUpgrade golang-miscUpgrade containers-commonUpgrade conmonUpgrade netavarkUpgrade libslirp-develUpgrade golangUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade delve-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade criu-libsUpgrade runc-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade libslirp-develUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-testsUpgrade libslirpUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade buildahUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade podmanUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade podman-catatonitUpgrade criu-develUpgrade podman-pluginsUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.20-raceUpgrade go1.19Upgrade go1.20-docUpgrade go1.19-raceUpgrade go1.20Upgrade go1.19-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-goUpgrade golang-1.20Upgrade golang-1.19-srcUpgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.19 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub