The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade critUpgrade golang-srcUpgrade cockpit-podmanUpgrade udicaUpgrade libslirpUpgrade toolbox-testsUpgrade buildah-testsUpgrade go-toolsetUpgrade container-selinuxUpgrade podman-dockerUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade golang-miscUpgrade buildahUpgrade golangUpgrade grafanaUpgrade podman-testsUpgrade python3-criuUpgrade aardvark-dnsUpgrade runcUpgrade criu-libsUpgrade grafana-selinuxUpgrade containernetworking-pluginsUpgrade netavarkUpgrade criu-develUpgrade delveUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade libslirp-develUpgrade criuUpgrade python3-podmanUpgrade crunUpgrade containers-commonUpgrade golang-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade podmanUpgrade podman-pluginsUpgrade conmonUpgrade skopeo-testsUpgrade toolboxUpgrade golang-binUpgrade skopeo | Jul 3, 2024 | Jun 5, 2024 |
| Alpine Linux | — | Upgrade forgejoUpgrade go | Aug 22, 2024 | Jun 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golang-bin | Jun 26, 2024 | Jun 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-sharedUpgrade golang-src | Feb 17, 2025 | Jun 4, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade forgejoUpgrade go121 | Jun 16, 2024 | Apr 11, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Oct 8, 2024 | Jun 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 8, 2024 | Jun 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Oct 9, 2024 | Jun 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Oct 8, 2024 | Jun 5, 2024 |
| Oracle_linux | — | Upgrade netavarkUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade golangUpgrade buildah-testsUpgrade podman-remoteUpgrade python3-podmanUpgrade critUpgrade golang-binUpgrade runcUpgrade skopeoUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade podmanUpgrade udicaUpgrade buildahUpgrade grafana-selinuxUpgrade criuUpgrade podman-catatonitUpgrade skopeo-testsUpgrade libslirp-develUpgrade go-toolsetUpgrade podman-pluginsUpgrade python3-criuUpgrade slirp4netnsUpgrade delveUpgrade conmonUpgrade grafanaUpgrade crunUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade libslirpUpgrade golang-srcUpgrade podman-testsUpgrade containers-commonUpgrade criu-develUpgrade container-selinux | Jul 3, 2024 | Jun 4, 2024 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clients | Oct 2, 2024 | Jun 4, 2024 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade conmon-debuginfoUpgrade python3-criuUpgrade podman-catatonitUpgrade grafana-debugsourceUpgrade delveUpgrade runcUpgrade criuUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade critUpgrade golang-docsUpgrade grafana-selinuxUpgrade podman-remoteUpgrade runc-debugsourceUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade golang-binUpgrade podman-plugins-debuginfoUpgrade grafanaUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade udicaUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade crunUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade criu-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade podman-dockerUpgrade toolbox-debuginfoUpgrade container-selinuxUpgrade golang-testsUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfoUpgrade conmon-debugsourceUpgrade golang-srcUpgrade delve-debugsourceUpgrade podman-gvproxyUpgrade golang-miscUpgrade containers-commonUpgrade runc-debuginfoUpgrade skopeoUpgrade python3-podmanUpgrade grafana-debuginfoUpgrade podman-testsUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade buildahUpgrade delve-debuginfoUpgrade libslirpUpgrade conmonUpgrade toolboxUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade buildah-debugsourceUpgrade aardvark-dns | Jul 3, 2024 | Jun 5, 2024 |
| Rocky_linux | — | Upgrade podman-testsUpgrade conmonUpgrade netavarkUpgrade runcUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade golangUpgrade libslirpUpgrade libslirp-debuginfoUpgrade golang-binUpgrade criu-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade grafana-debuginfoUpgrade buildahUpgrade critUpgrade crunUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade toolbox-debugsourceUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade grafana-selinuxUpgrade grafana-debugsourceUpgrade podmanUpgrade grafanaUpgrade containers-commonUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade criu-develUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade toolbox-debuginfoUpgrade delveUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-debuginfoUpgrade delve-debuginfoUpgrade criu-libsUpgrade skopeoUpgrade podman-debugsource | Jul 16, 2024 | Jun 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.2.6Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Universal Forwarder to version 9.4.2 | Jul 30, 2026 | Jun 5, 2024 |
| Suse | — | Upgrade go1.21-opensslUpgrade go1.21-openssl-raceUpgrade go1.21Upgrade go1.22-openssl-raceUpgrade go1.21-raceUpgrade go1.22-docUpgrade go1.22Upgrade go1.22-raceUpgrade go1.21-docUpgrade go1.22-openssl-docUpgrade container-suseconnectUpgrade go1.21-openssl-docUpgrade go1.22-openssl | Jun 11, 2024 | Jun 5, 2024 |
| Ubuntu | — | Upgrade golang-1.21-srcUpgrade golang-1.22-srcUpgrade golang-1.18Upgrade golang-1.22Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.18-srcUpgrade golang-1.17Upgrade golang-1.22-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.21-goUpgrade golang-1.17-srcUpgrade golang-1.21 | Jul 10, 2024 | Jun 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 5, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub