The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-binUpgrade golang-docsUpgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade go-toolsetUpgrade delveUpgrade golang-race | Oct 11, 2026 | Jun 1, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-tests | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade go-toolsetUpgrade golang-testsUpgrade golang-raceUpgrade delveUpgrade golang-binUpgrade golang-docs | Jun 5, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade golangUpgrade golang-miscUpgrade go-toolsetUpgrade golang-raceUpgrade golang-srcUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-docsUpgrade delveUpgrade golang-tests | Aug 27, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golang-binUpgrade golangUpgrade delve-debuginfoUpgrade go-toolsetUpgrade golang-raceUpgrade delve | Aug 27, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub