Description
The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Go standard library | html/template | < 1.20.8, 1.21.0-0 – < 1.21.1 | 1.20.8 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | golang-1.19 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | golang-1.17 | 1.17.13-3ubuntu1.2 | USN-7061-1 |
| Ubuntu 22.04 LTS | golang-1.18 | 1.18.1-1ubuntu1.2 | USN-7109-1 |
| Ubuntu 22.04 LTS | golang-1.20 | 1.20.3-1ubuntu0.1~22.04.1 | USN-6574-1 |
| Ubuntu 22.04 LTS | golang-1.21 | 1.21.1-1~ubuntu22.04.2 | USN-6574-1 |
| Ubuntu 20.04 LTS | golang-1.13 +1 | No fix yet | — |
| Ubuntu 20.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~20.04.3 | USN-7109-1 |
| Ubuntu 20.04 LTS | golang-1.20 | 1.20.3-1ubuntu0.1~20.04.1 | USN-6574-1 |
| Ubuntu 20.04 LTS | golang-1.21 | 1.21.1-1~ubuntu20.04.2 | USN-6574-1 |
| Ubuntu 18.04 LTS | golang-1.8 +2 | No fix yet | — |
| Ubuntu 16.04 LTS | golang-1.6 +1 | No fix yet | — |
| Ubuntu 14.04 LTS | golang-1.10 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 22.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | golang-1.16 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.13 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~18.04.4+esm1 | USN-7109-1 |
| Ubuntu Pro 16.04 LTS | golang-1.13 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~16.04.6+esm1 | USN-7109-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | buildah +1 | 1:1.31.3-2.el9_3 | RHSA-2023:7764 |
| RHEL 9 | containernetworking-plugins | 1:1.3.0-6.el9_3 | RHSA-2023:7766 |
| RHEL 9 | golang +6 | 1.20.10-1.el9_3 | RHBA-2023:6364 |
| RHEL 9 | podman +5 | 2:4.6.1-7.el9_3 | RHSA-2023:7765 |
| RHEL 9 | skopeo +1 | 2:1.13.3-3.el9_3 | RHSA-2023:7762 |
| RHEL 9 | toolbox +1 | 0.0.99.5-2.el9 | RHSA-2024:2160 |
| RHEL 8 | buildah +1 | 1:1.24.6-7.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | cockpit-podman | 46-1.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | conmon | 2:2.1.4-2.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | container-selinux | 2:2.205.0-3.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | containernetworking-plugins | 1:1.1.1-6.module+el8.9.0+20875+8dd9d5d2 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | containers-common | 2:1-38.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | crit +4 | 3.15-3.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | crun | 1.8.7-1.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | delve | 1.20.2-1.module+el8.9.0+18926+5193682d | RHBA-2023:6928 |
| RHEL 8 | fuse-overlayfs | 1.9-2.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | golang +6 | 1.20.10-1.module+el8.9.0+20382+04f7fe80 | RHBA-2023:6928 |
| RHEL 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+20326+387084d0 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | netavark +1 | 2:1.0.1-38.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.5-2.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | podman +6 | 2:4.0.2-25.module+el8.9.0+20875+8dd9d5d2 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | python-podman +1 | 4.0.0-2.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | runc | 1:1.1.5-2.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | skopeo +1 | 2:1.6.2-9.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | slirp4netns | 1.1.8-3.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | toolbox +1 | 0.0.99.4-5.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
| RHEL 8 | udica | 0.2.6-4.module+el8.9.0+20656+56f336b9 | RHSA-2024:2988, RHSA-2024:0121 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Openshift Ironic 4 | openstack-ironic +5 | 1:21.5.0-0.20231002130534.0df5961.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | openstack-ironic-inspector +4 | 11.5.0-0.20230706175125.193aa0d.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-automaton +1 | 3.1.0-0.20230608140652.a4f7631.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-cinderclient +1 | 9.3.0-0.20230608143053.f7a612e.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-cliff +2 | 4.3.0-0.20230608150702.72e81d7.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-debtcollector +1 | 2.5.0-0.20230308172820.a6b46c5.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-decorator +1 | 4.4.2-6.0.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-dracclient +1 | 8.0.0-0.20230308200614.9c7499c.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-fixtures +1 | 4.0.1-1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-futurist +1 | 2.4.1-0.20230308173923.159d752.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-glanceclient +1 | 1:4.3.0-0.20230608143056.52fb6b2.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-hardware +2 | 0.30.0-0.20230308190813.f6ff0ed.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-ironic-lib +1 | 5.4.1-0.20230706172632.25d8671.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-ironic-prometheus-exporter +1 | 4.1.1-0.20230614150617.7b35627.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-keystoneauth1 +1 | 5.2.0-0.20230608152518.2e40bbf.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-keystoneclient +2 | 1:5.1.0-0.20230608141554.4763cd8.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-keystonemiddleware +1 | 10.3.0-0.20230608151410.92cdf8a.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-openstacksdk +2 | 1.2.0-0.20230608155226.b7ff031.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-os-service-types +1 | 1.7.0-0.20230308170555.0b2f473.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-os-traits +2 | 3.0.0-0.20230608152745.cff125c.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-osc-lib +2 | 2.8.0-0.20230608151456.db9cdc9.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-cache +3 | 3.4.0-0.20230608153448.a720016.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-concurrency +3 | 5.1.1-0.20230706190204.0af5942.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-config +1 | 2:9.1.1-0.20230608145954.515daab.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-context +2 | 5.1.1-0.20230608143931.7696282.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-db +3 | 12.3.1-0.20230608142355.b689b63.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-i18n +2 | 6.0.0-0.20230608140652.03605c2.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-log +3 | 5.2.0-0.20230608150750.16a8a42.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-messaging +2 | 14.3.1-0.20230608152013.0602d1a.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-middleware +3 | 5.1.1-0.20230608145931.7725ac9.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-policy +3 | 4.2.0-0.20230608153320.93129eb.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-rootwrap +2 | 7.0.1-0.20230608144658.b72372b.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-serialization +2 | 5.1.1-0.20230608144505.b4be3a4.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-service +2 | 3.1.1-0.20230608145222.b3ba591.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-upgradecheck +1 | 2.1.1-0.20230608143829.eeedfc9.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-utils +1 | 6.1.0-0.20230608142355.d49d594.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-oslo-versionedobjects +1 | 3.1.0-0.20230608141554.b4ea834.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-osprofiler | 3.4.3-0.20230308173821.3286301.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-pbr | 5.11.1-0.1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-proliantutils | 2.14.1-0.20230608154738.3de2844.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-pycadf +1 | 3.1.1-0.20230308171749.4179996.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-requestsexceptions | 1.4.0-0.20230308170555.d7ac0ff.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-scciclient | 0.12.3-0.20230308201513.0940a71.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-stevedore | 5.1.0-0.20230608154210.2d99ccc.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-sushy | 4.5.0-0.20230719180619.146ed33.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-sushy-oem-idrac | 5.0.0-0.20230308202122.da9a0e4.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-swiftclient | 4.3.0-0.20230608151934.236c277.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-tenacity | 6.3.1-1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-tooz | 4.1.0-0.20230608154038.d5bf20c.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python-wrapt +1 | 1.14.1-1.el9 | RHSA-2023:5009 |
| Red Hat Openshift Ironic 4 | python3-ironic-python-agent +2 | 9.5.0-0.20230728140546.fce0b8c.el9 | RHSA-2023:5009 |
| Red Hat OpenStack 16 | etcd | 3.3.23-16.el8ost | RHSA-2024:3467, RHSA-2024:3352 |
| Red Hat OpenShift 4 | afterburn +2 | 5.4.3-1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | bpftool | 7.0.0-284.36.1.el9_2 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | buildah +1 | 1:1.29.1-10.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | butane +1 | 0.19.0-1.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | catch +1 | 3.3.2-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | conmon | 3:2.1.7-3.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | container-selinux | 3:2.221.0-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | containernetworking-plugins | 1.0.1-11.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | containers-common | 2:1-51.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | coreos-installer +2 | 0.17.0-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | cri-o | 1.27.1-8.1.rhaos4.14.git3fecb83.el8 | RHSA-2023:6840, RHSA-2023:5009 |
| Red Hat OpenShift 4 | cri-tools | 1.27.0-2.1.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | crun | 1.9.2-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | crun-wasm | 0.0-3.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | fmt +1 | 9.1.0-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | gmock +3 | 1.13.0-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | google-benchmark +2 | 1.8.2-1.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | haproxy +1 | 2.6.13-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | ignition +1 | 2.16.2-1.1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | kata-containers | 3.1.3-4.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | kernel-rt +21 | 5.14.0-284.36.1.rt14.321.el9_2 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | microshift +3 | 4.14.0-202310261440.p0.g1586504.assembly.4.14.0.el9 | RHSA-2023:5008 |
| Red Hat OpenShift 4 | nmstate +4 | 2.2.12-1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift +1 | 4.14.0-202310210404.p0.gf67aeb3.assembly.stream.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift-ansible +1 | 4.14.0-202310062327.p0.gf781421.assembly.stream.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8 | RHSA-2023:6840, RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift-kuryr +4 | 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift-prometheus-promu +1 | 0.15.0-15.1.gitd5383c5.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | openshift4-aws-iso | 4.14.0-202309272140.p0.gd2acdd5.assembly.stream.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | ovn23.09 +3 | 23.09.0-37.el9fdp | RHSA-2023:5009 |
| Red Hat OpenShift 4 | perf +60 | 5.14.0-284.36.1.el9_2 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | podman +6 | 3:4.4.1-10.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | runc | 4:1.1.9-2.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | skopeo +1 | 2:1.11.2-10.1.rhaos4.14.el8 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | spdlog +1 | 1.12.0-1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | toolbox | 0.1.2-1.rhaos4.14.el9 | RHSA-2023:5009 |
| Red Hat OpenShift 4 | wasmedge +2 | 0.12.1-2.rhaos4.14.el9 | RHSA-2023:5009 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | buildah +1 | 1:1.31.3-2.el9_3 | ALSA-2023:7764 |
| AlmaLinux 9 | containernetworking-plugins | 1:1.3.0-6.el9_3 | ALSA-2023:7766 |
| AlmaLinux 9 | podman +5 | 2:4.6.1-7.el9_3 | ALSA-2023:7765 |
| AlmaLinux 9 | skopeo +1 | 2:1.13.3-3.el9_3 | ALSA-2023:7762 |
| AlmaLinux 9 | toolbox +1 | 0.0.99.5-2.el9 | ALSA-2024:2160 |
| AlmaLinux 8 | buildah +1 | 1:1.24.6-7.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | cockpit-podman | 46-1.module_el8.7.0+3344+5bcd850f | ALSA-2024:0121 |
| AlmaLinux 8 | conmon | 2:2.1.4-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | container-selinux | 2:2.205.0-3.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.1.1-6.module_el8.9.0+3711+04fcca5e | ALSA-2024:0121 |
| AlmaLinux 8 | containers-common | 2:1-38.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | crit +4 | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2024:0121 |
| AlmaLinux 8 | crun | 1.8.7-1.module_el8.9.0+3683+33eb0feb | ALSA-2024:0121 |
| AlmaLinux 8 | fuse-overlayfs | 1.9-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | libslirp +1 | 4.4.0-1.module_el8.6.0+2877+8e437bf5 | ALSA-2024:0121 |
| AlmaLinux 8 | netavark +1 | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.5-2.module_el8.8.0+3468+16b86c82 | ALSA-2024:0121 |
| AlmaLinux 8 | podman +6 | 2:4.0.2-25.module_el8.9.0+3711+04fcca5e.alma.1 | ALSA-2024:0121 |
| AlmaLinux 8 | python3-podman | 4.0.0-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | runc | 1:1.1.5-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | skopeo +1 | 2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1 | ALSA-2024:0121 |
| AlmaLinux 8 | slirp4netns | 1.1.8-3.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
| AlmaLinux 8 | udica | 0.2.6-4.module_el8.9.0+3627+db8ec155 | ALSA-2024:0121 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | buildah | 1:1.24.6-7.module+el8.9.0+1445+07728297 | RLSA-2024:0121 |
| Rocky Linux 8 | cockpit-podman | 46-1.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | conmon | 2:2.1.4-2.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | container-selinux | 2:2.205.0-3.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | containers-common | 2:1-38.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | criu | 3.15-3.module+el8.9.0+1445+07728297 | RLSA-2024:0121 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | fuse-overlayfs | 1.9-2.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | libslirp | 4.4.0-1.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.5-2.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | python-podman | 4.0.0-2.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | runc | 1:1.1.5-2.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | skopeo | 2:1.6.2-9.module+el8.9.0+1578+aa900b44 | RLSA-2024:0121 |
| Rocky Linux 8 | slirp4netns | 1.1.8-3.module+el8.9.0+1445+07728297 | RLSA-2024:2988, RLSA-2024:0121 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2024:2988 |
| Rocky Linux 8 | udica | 0.2.6-4.module+el8.9.0+1445+07728297 | RLSA-2024:0121 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | go1.20 | 1.20.8-150000.1.23.1 | SUSE-SU-2023:3700-1 |
| SLES 15 SP5 | go1.20-openssl | 1.20.8.1-150000.1.11.1 | SUSE-SU-2023:3840-1 |
| SLES 15 SP5 | go1.21 | 1.21.1-150000.1.6.1 | SUSE-SU-2023:3701-1 |
| SLES 15 SP5 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
| SLES 15 SP4 | go1.20 | 1.20.8-150000.1.23.1 | SUSE-SU-2023:3700-1 |
| SLES 15 SP4 | go1.20-openssl | 1.20.8.1-150000.1.11.1 | SUSE-SU-2023:3840-1 |
| SLES 15 SP4 | go1.21 | 1.21.1-150000.1.6.1 | SUSE-SU-2023:3701-1 |
| SLES 15 SP4 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 12 | go | 1.21-41.1 | openSUSE-SU-2023:0360-1 |
| SUSE Package Hub 12 | go1.21 | 1.21.3-2.1 | openSUSE-SU-2023:0360-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | go1.20 | 1.20.8-1.1 | openSUSE-SU-2024:13216-1 |
| openSUSE Tumbleweed | go1.21 | 1.21.1-1.1 | openSUSE-SU-2024:13217-1 |
| openSUSE Leap 15.5 | go1.20 | 1.20.8-150000.1.23.1 | SUSE-SU-2023:3700-1 |
| openSUSE Leap 15.5 | go1.20-openssl | 1.20.8.1-150000.1.11.1 | SUSE-SU-2023:3840-1 |
| openSUSE Leap 15.5 | go1.21 | 1.21.1-150000.1.6.1 | SUSE-SU-2023:3701-1 |
| openSUSE Leap 15.5 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
| openSUSE Leap 15.4 | go1.20 | 1.20.8-150000.1.23.1 | SUSE-SU-2023:3700-1 |
| openSUSE Leap 15.4 | go1.20-openssl | 1.20.8.1-150000.1.11.1 | SUSE-SU-2023:3840-1 |
| openSUSE Leap 15.4 | go1.21 | 1.21.1-150000.1.6.1 | SUSE-SU-2023:3701-1 |
| openSUSE Leap 15.4 | go1.21-openssl | 1.21.4.1-150000.1.5.1 | SUSE-SU-2023:4469-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | go | 1.21.1-r0 | — |
| Alpine v3.23 | go | 1.21.1-r0 | — |
| Alpine v3.22 | go | 1.21.1-r0 | — |
| Alpine v3.21 | go | 1.21.1-r0 | — |
| Alpine v3.20 | go | 1.21.1-r0 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | go | 1.21.1-r0 | — |
| Alpine v3.18 | go | 1.20.8-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | golang +6 | 1.20.8-1.amzn2023.0.1 | ALAS2023-2023-367 |
| Amazon Linux 2 | golang +6 | 1.20.10-1.amzn2.0.1 | ALAS2-2023-2313 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | golang | 1.20.10-1 | — |
| Azure Linux 2 (CBL-Mariner) | golang +1 | 1.20.10-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | buildah +1 | 1:1.31.3-2.0.1.el9_3 | ELSA-2023-7764 |
| Oracle Linux 9 | containernetworking-plugins | 1:1.3.0-6.el9_3 | ELSA-2023-7766 |
| Oracle Linux 9 | podman +5 | 2:4.6.1-7.0.1.el9_3 | ELSA-2023-7765 |
| Oracle Linux 9 | skopeo +1 | 2:1.13.3-3.el9_3 | ELSA-2023-7762 |
| Oracle Linux 8 | buildah +1 | 1:1.24.6-7.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | cockpit-podman | 46-1.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | conmon | 2:2.1.4-2.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | container-selinux | 2:2.205.0-3.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.1.1-6.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | containers-common | 2:1-38.0.1.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | crit +4 | 3.15-3.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | crun | 1.8.7-1.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | fuse-overlayfs | 1.9-2.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | netavark +1 | 2:1.0.1-38.0.1.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.5-2.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | podman +6 | 2:4.0.2-25.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | python3-podman | 4.0.0-2.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | runc | 1:1.1.5-2.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | skopeo +1 | 2:1.6.2-9.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | slirp4netns | 1.1.8-3.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
| Oracle Linux 8 | udica | 0.2.6-4.module+el8.9.0+90119+2f9ef15c | ELSA-2024-2988, ELSA-2024-0121 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | katib-earlystopping +8 | 0.19.0-r31 | — |
| Wolfi rolling | katib-suggestion-goptuna-compat | 0.19.0-r40 | — |
| Wolfi rolling | kind | 0.21.0-r0 | — |
| Wolfi rolling | metrics-server | 0.6.4-r1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | stdlib | < 1.20.8 · >= 1.21.0-0, < 1.21.1 | 1.20.8, 1.21.1 | GO-2023-2043 |
Advisories 42
- ALSA-2024:2160 Moderate: toolbox security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7764 Moderate: buildah security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7765 Moderate: podman security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7766 Moderate: containernetworking-plugins security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:7762 Moderate: skopeo security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0121 Moderate: container-tools:4.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:3467 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:3352 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:2988 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:0121 Red Hat Security Advisory: container-tools:4.0 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7766 Red Hat Security Advisory: containernetworking-plugins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7765 Red Hat Security Advisory: podman security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7764 Red Hat Security Advisory: buildah security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:7762 Red Hat Security Advisory: skopeo security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:6840 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5009 Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2023:5008 Red Hat Security Advisory: Red Hat build of MicroShift 4.14.0 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHBA-2023:6928 Red Hat Bug Fix Advisory: go-toolset:rhel8 bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHBA-2023:6364 Red Hat Bug Fix Advisory: golang and delve bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:2160 Red Hat Security Advisory: toolbox security update Red Hat Security Advisories (RHSA) · Oct 18, 2026
- USN-7109-1 golang-1.18 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-7061-1 golang-1.17 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-6574-1 Go vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2023:4469-1 Security update for go1.21-openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13217-1 go1.21-1.21.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2023:0360-1 Security update for go1.21 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3700-1 Security update for go1.20 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13216-1 go1.20-1.20.8-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3701-1 Security update for go1.21 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-2280 Golang Go: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 29, 2025
- RLSA-2024:2988 Moderate: container-tools:rhel8 security update Rocky Linux Security Advisories · May 7, 2025
- RLSA-2024:0121 Moderate: container-tools:4.0 security update Rocky Linux Security Advisories · May 7, 2025
- SUSE-SU-2023:3840-1 Security update for go1.20-openssl SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2024-2988 Moderate: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 24, 2024
- ELSA-2024-0121 Moderate: container-tools:4.0 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jan 11, 2024
- ALAS2-2023-2313 Important: golang security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jan 3, 2024
- ELSA-2023-7765 Moderate: podman security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Dec 14, 2023
- ELSA-2023-7764 Moderate: buildah security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Dec 14, 2023
- WID-SEC-2023-3146 IBM MQ Operator and Queue manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 13, 2023
- ELSA-2023-7762 Moderate: skopeo security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Dec 13, 2023
- ELSA-2023-7766 Moderate: containernetworking-plugins security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Dec 13, 2023
- ALAS2023-2023-367 Moderate: golang security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 3, 2023