Description
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | golang-1.15 | 1.15.9-6 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | golang-1.13 +1 | No fix yet | — |
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +1 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.13 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | podman +5 | 2:4.2.0-3.el9 | RHSA-2022:7954 |
| RHEL 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+21209+52deeb51 | RHSA-2024:2988 |
| RHEL 8 | buildah +1 | 2:1.33.6-2.module+el8.10.0+21371+46937ece | RHSA-2024:2988 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+21373+0d273fdf | RHSA-2024:2988 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a | RHSA-2024:2988 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+21196+3f0abbca | RHSA-2024:2988 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 | RHSA-2024:2988 |
| RHEL 8 | containers-common | 2:1-81.module+el8.10.0+21340+c6c7475a | RHSA-2024:2988 |
| RHEL 8 | crit +4 | 3.18-4.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+21340+c6c7475a | RHSA-2024:2988 |
| RHEL 8 | delve | 1.5.0-2.module+el8.4.0+8864+58b0fcdb | RHSA-2021:3076 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+20412+95ee28e2 | RHSA-2024:2988 |
| RHEL 8 | golang +7 | 1.15.14-1.module+el8.4.0+11833+614b07b8 | RHSA-2021:3076 |
| RHEL 8 | grafana | 7.5.9-4.el8 | RHSA-2021:4226 |
| RHEL 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+21306+6be40ce7 | RHSA-2024:2988 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+20565+a40ba0e5 | RHSA-2024:2988 |
| RHEL 8 | podman +6 | 3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1 | RHSA-2024:2988 |
| RHEL 8 | python-podman +1 | 4.9.0-1.module+el8.10.0+21196+3f0abbca | RHSA-2024:2988 |
| RHEL 8 | runc | 1:1.1.12-1.module+el8.10.0+21251+62b7388c | RHSA-2024:2988 |
| RHEL 8 | skopeo +1 | 2:1.14.3-0.1.module+el8.10.0+21251+62b7388c | RHSA-2024:2988 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+21306+6be40ce7 | RHSA-2024:2988 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 | RHSA-2024:2988 |
| RHEL 8 | udica | 0.2.6-20.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Serverless 1 | openshift-serverless-clients | 0.23.2-1.el8 | RHSA-2021:3555 |
| Red Hat Openshift Service On Aws 1 | rosa +1 | 1.1.1-51c4a5e.el8 | RHEA-2021:3287 |
| Red Hat Openshift Data Foundation 4 | mcg | 5.9.0-28.61dcf87.5.9.el8 | RHSA-2021:5085 |
| Red Hat OpenStack 16 | etcd | 3.3.23-7.el8ost | RHSA-2022:0260, RHSA-2022:0237 |
| Red Hat OpenStack 16 | golang-github-vbatts-tar-split | 0.11.1-6.el8ost | RHSA-2022:0998, RHSA-2022:0988 |
| Red Hat OpenShift 4 | atomic-openshift-service-idler | 4.7.0-202107291238.p0.git.39cfc66.assembly.stream.el8 | RHBA-2021:2979 |
| Red Hat OpenShift 4 | butane | 0.12.1-2.rhaos4.8.el8 | RHSA-2021:3820 |
| Red Hat OpenShift 4 | containernetworking-plugins | 0.8.6-3.rhaos4.6.el7 | RHSA-2021:3248 |
| Red Hat OpenShift 4 | cri-o | 1.20.4-7.rhaos4.7.git6287500.el7 | RHSA-2021:2984, RHBA-2021:2979 |
| Red Hat OpenShift 4 | cri-tools | 1.21.0-3.el8 | RHSA-2021:3248 |
| Red Hat OpenShift 4 | ignition +1 | 2.6.0-8.rhaos4.6.git947598e.el8 | RHSA-2021:3009, RHSA-2021:2984, RHBA-2021:2979 |
| Red Hat OpenShift 4 | jenkins | 2.289.3.1633554819-1.el8 | RHSA-2021:3820 |
| Red Hat OpenShift 4 | openshift +1 | 4.7.0-202107292242.p0.git.558d959.assembly.stream.el7 | RHSA-2021:2984, RHBA-2021:2979 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el7 | RHSA-2021:2984, RHBA-2021:2979 |
| Red Hat OpenShift 4 | prometheus-promu +1 | 0.5.0-4.git642a960.el8 | RHSA-2021:3248 |
| Red Hat OpenShift 4 | redhat-release-coreos | 47.84-1.el8 | RHBA-2021:2979 |
| Red Hat Devtools 2021 | go-toolset-1.15 +10 | 1.15.14-1.el7_9 | RHSA-2021:3015 |
| Red Hat Container Native Virtualization 4 | kubevirt +2 | 4.8.5-278.el7 | RHSA-2022:1329 |
| Red Hat Container Native Virtualization 2 | kubevirt +2 | 2.6.8-211.el7 | RHSA-2021:4722 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | podman +5 | 2:4.2.0-3.el9 | ALSA-2022:7954 |
| AlmaLinux 8 | grafana | 7.5.9-4.el8 | ALSA-2021:4226 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | containers-common | 2:1-81.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | delve | 1.5.0-2.module+el8.4.0+396+d2d16ae3 | RLSA-2021:3076 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | golang +1 | 1.15.14-1.module+el8.4.0+632+4dba2916 | RLSA-2021:3076 |
| Rocky Linux 8 | grafana | 7.5.9-4.el8 | RLSA-2021:4226 |
| Rocky Linux 8 | libslirp | 4.4.0-1.module+el8.9.0+1445+07728297 | RLSA-2024:2988 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | python-podman | 4.9.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | runc | 1:1.1.12-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2024:2988 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | go1.15 | 1.15.14-1.36.1 | SUSE-SU-2021:2398-1 |
| SLES 15 SP3 | go1.16 | 1.16.6-1.20.1 | SUSE-SU-2021:2392-1 |
| SLES 15 SP2 | go1.15 | 1.15.14-1.36.1 | SUSE-SU-2021:2398-1 |
| SLES 15 SP2 | go1.16 | 1.16.6-1.20.1 | SUSE-SU-2021:2392-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.15 | 1.15.15-1.2 | openSUSE-SU-2024:10808-1 |
| openSUSE Tumbleweed | go1.16 | 1.16.8-1.1 | openSUSE-SU-2024:10809-1 |
| openSUSE Leap 15.3 | go1.15 | 1.15.14-1.36.1 | openSUSE-SU-2021:2398-1 |
| openSUSE Leap 15.3 | go1.16 | 1.16.6-1.20.1 | openSUSE-SU-2021:2392-1 |
| openSUSE Leap 15.2 | go1.15 | 1.15.14-lp152.23.1 | openSUSE-SU-2021:1079-1 |
| openSUSE Leap 15.2 | go1.16 | 1.16.6-lp152.5.1 | openSUSE-SU-2021:1078-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.16.6-r0 | — |
| Alpine v3.23 | go | 1.16.6-r0 | — |
| Alpine v3.22 | go | 1.16.6-r0 | — |
| Alpine v3.21 | go | 1.16.6-r0 | — |
| Alpine v3.20 | go | 1.16.6-r0 | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | go | 1.16.6-r0 | — |
| Alpine v3.18 | go | 1.16.6-r0 | — |
| Alpine v3.17 | go | 1.16.6-r0 | — |
| Alpine v3.16 | go | 1.16.6-r0 | — |
| Alpine v3.15 | go | 1.16.6-r0 | — |
| Alpine v3.14 | go | 1.16.6-r0 | — |
| Alpine v3.13 | go | 1.15.14-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | golang +6 | 1.15.14-1.amzn2.0.1 | ALAS2-2021-1694 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | podman +6 | 2:4.2.0-3.0.1.el9 | ELSA-2022-7954 |
| Oracle Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | buildah +1 | 2:1.33.6-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | containers-common | 2:1-81.0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | crit +4 | 3.18-4.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | delve | 1.5.0-2.0.1.module+el8.4.0+20021+8a86d991 | ELSA-2021-3076 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | golang +7 | 1.15.14-1.module+el8.4.0+20290+7af514f4 | ELSA-2021-3076 |
| Oracle Linux 8 | grafana | 7.5.9-4.el8 | ELSA-2021-4226 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | podman +6 | 3:4.9.4-0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | python3-podman | 4.9.0-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | runc | 1:1.1.12-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.3-0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | udica | 0.2.6-20.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
alexzorin/cve-2021-34558 ★ 45 · Jul 13, 2021
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.15.14 · >= 1.16.0-0, < 1.16.6 | 1.15.14, 1.16.6 | GO-2021-0243 |
Advisories 40
- RHSA-2022:0988 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (golang-github-vbatts-tar-split) security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- ALSA-2022:7954 Moderate: podman security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2021:4226 Moderate: grafana security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:2988 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2022:7954 Red Hat Security Advisory: podman security and bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2021:4226 Red Hat Security Advisory: grafana security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 8, 2026
- RHSA-2022:1329 Red Hat Security Advisory: OpenShift Virtualization 4.8.5 RPMs security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2021:5085 Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.9.0 enhancement, security, and bug fix update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2021:3820 Red Hat Security Advisory: OpenShift Container Platform 4.8.15 packages and security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2021:3555 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.17.0 Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2021:3248 Red Hat Security Advisory: OpenShift Container Platform 4.8.9 packages and security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2021:2984 Red Hat Security Advisory: OpenShift Container Platform 4.8.4 bug fix and security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2021:3009 Red Hat Security Advisory: OpenShift Container Platform 4.6.42 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHBA-2021:2979 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.7.23 packages update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2022:0998 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (golang-github-vbatts-tar-split) security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2022:0260 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2022:0237 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2021:4722 Red Hat Security Advisory: OpenShift Virtualization 2.6.8 RPMs security and bug fix update Red Hat Security Advisories (RHSA) · Jun 30, 2026
- RHSA-2021:3076 Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:3015 Red Hat Security Advisory: go-toolset-1.15 and go-toolset-1.15-golang security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHEA-2021:3287 Red Hat Enhancement Advisory: Red Hat OpenShift Service on AWS 1.0 enhancements Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RLSA-2021:4226 Moderate: grafana security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2021:3076 Moderate: go-toolset:rhel8 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2021:2398-1 Security update for go1.15 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:2398-1 Security update for go1.15 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10809-1 go1.16-1.16.8-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1079-1 Security update for go1.15 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1078-1 Security update for go1.16 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:2392-1 Security update for go1.16 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10808-1 go1.15-1.15.15-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2392-1 Security update for go1.16 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2229 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 18, 2025
- WID-SEC-2022-1335 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2025
- RLSA-2024:2988 Moderate: container-tools:rhel8 security update Rocky Linux Security Advisories · May 7, 2025
- ELSA-2024-2988 Moderate: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 24, 2024
- WID-SEC-2022-0966 Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 21, 2024
- ELSA-2022-7954 Moderate: podman security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 22, 2022
- ELSA-2021-4226 Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021
- ELSA-2021-3076 Moderate: go-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 12, 2021
- ALAS2-2021-1694 Moderate: golang security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Aug 5, 2021
References
- https://groups.google.com/g/golang-announce
- https://golang.org/doc/devel/release#go1.16.minor
- FEDORA-2021-25c0011e78 vendor-advisory
- FEDORA-2021-1bfb61f77c vendor-advisory
- FEDORA-2021-3a55403080 vendor-advisory
- FEDORA-2021-47d259d3cf vendor-advisory
- FEDORA-2021-6ac9b98f9e vendor-advisory
- FEDORA-2021-07e4d20196 vendor-advisory
- FEDORA-2021-ffa749f7f7 vendor-advisory
- FEDORA-2021-54f88bebd4 vendor-advisory
- FEDORA-2021-c35235c250 vendor-advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://groups.google.com/g/golang-announce/c/n9FxMelZGAQ
- https://security.netapp.com/advisory/ntap-20210813-0005/
- https://www.oracle.com/security-alerts/cpujan2022.html
- GLSA-202208-02 vendor-advisory