critical
CVE-2023-24540
golang: html/template: improper handling of JavaScript whitespace
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami, CBL-Mariner, Photon OS. Rated lower by Red Hat (high), Amazon (high), AlmaLinux (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | golang | 1.19.9, 1.20.4 |
| CBL-Mariner 2.0 | golang, msft-golang | 0:1.21.6-1.cm2 and 1 more |
| Photon OS 3.0 | falco, go | 0.31.1-3.0419285001.ph3 and 1 more |
| Photon OS 4.0 | falco, falco-devel, go and 2 more | 0.35.0-4.0510183001.ph4 and 3 more |
| Photon OS 5.0 | falco, go, kubernetes-dashboard and 1 more | 0.32.2-6.0601037001.ph5 and 3 more |
| alma 8 | container-tools:4.0::aardvark-dns, container-tools:4.0::buildah, container-tools:4.0::buildah-tests and 74 more | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 and 40 more |
| alma 9 | buildah, buildah-tests, containernetworking-plugins and 18 more | 1:1.31.3-1.el9 and 6 more |
| alpine 3.17 | go | 1.19.9-r0 |
| alpine 3.18 | go | 1.20.4-r0 |
| alpine 3.19 | go | 1.20.4-r0 |
| alpine 3.20 | go | 1.20.4-r0 |
| alpine 3.21 | go | 1.20.4-r0 |
Show all 325 entries from 44 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | golang | 1.19.9, 1.20.4 |
| CBL-Mariner 2.0 | golang | 0:1.21.6-1.cm2 |
| CBL-Mariner 2.0 | msft-golang | 0:1.20.11-1.cm2 |
| Photon OS 3.0 | falco | 0.31.1-3.0419285001.ph3 |
| Photon OS 3.0 | go | 1.20.4-1.ph3 |
| Photon OS 4.0 | falco | 0.35.0-4.0510183001.ph4 |
| Photon OS 4.0 | falco-devel | 0.35.0-4.0510183001.ph4 |
| Photon OS 4.0 | go | 1.20.4-1.ph4 |
| Photon OS 4.0 | kubernetes-dashboard | 2.7.0-1.ph4 |
| Photon OS 4.0 | pmd-ng | 0.1-2.ph4 |
| Photon OS 5.0 | falco | 0.32.2-6.0601037001.ph5 |
| Photon OS 5.0 | go | 1.26.3-1.ph5 |
| Photon OS 5.0 | kubernetes-dashboard | 2.7.0-6.ph5 |
| Photon OS 5.0 | pmd-ng | 0.1-3.ph5 |
| alma 8 | container-tools:4.0::aardvark-dns | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::buildah | 1:1.24.6-7.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::buildah-tests | 1:1.24.6-7.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::cockpit-podman | 46-1.module_el8.7.0+3344+5bcd850f |
| alma 8 | container-tools:4.0::conmon | 2:2.1.4-2.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::container-selinux | 2:2.205.0-3.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::containernetworking-plugins | 1:1.1.1-5.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::containers-common | 2:1-38.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::crit | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| alma 8 | container-tools:4.0::criu | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| alma 8 | container-tools:4.0::criu-devel | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| alma 8 | container-tools:4.0::criu-libs | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| alma 8 | container-tools:4.0::crun | 1.8.3-1.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::fuse-overlayfs | 1.9-2.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::libslirp | 4.4.0-1.module_el8.6.0+2877+8e437bf5 |
| alma 8 | container-tools:4.0::libslirp-devel | 4.4.0-1.module_el8.6.0+2877+8e437bf5 |
| alma 8 | container-tools:4.0::netavark | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::oci-seccomp-bpf-hook | 1.2.5-2.module_el8.8.0+3468+16b86c82 |
| alma 8 | container-tools:4.0::podman | 2:4.0.2-24.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::podman-catatonit | 2:4.0.2-24.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::podman-docker | 2:4.0.2-24.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::podman-gvproxy | 2:4.0.2-24.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::podman-plugins | 2:4.0.2-24.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::podman-remote | 2:4.0.2-24.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::podman-tests | 2:4.0.2-24.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::python3-criu | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| alma 8 | container-tools:4.0::python3-podman | 4.0.0-2.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::runc | 1:1.1.5-2.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::skopeo | 2:1.6.2-8.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::skopeo-tests | 2:1.6.2-8.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::slirp4netns | 1.1.8-3.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::toolbox | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::toolbox-tests | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:4.0::udica | 0.2.6-4.module_el8.9.0+3627+db8ec155 |
| alma 8 | container-tools:rhel8::aardvark-dns | 2:1.7.0-1.module_el8.9.0+3657+d86e192f |
| alma 8 | container-tools:rhel8::buildah | 1:1.31.3-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::buildah-tests | 1:1.31.3-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::cockpit-podman | 75-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::conmon | 3:2.1.8-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::container-selinux | 2:2.221.0-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::containernetworking-plugins | 1:1.3.0-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::containers-common | 2:1-54.module_el8.9.0+3673+0c64b403 |
| alma 8 | container-tools:rhel8::crit | 3.18-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::criu | 3.18-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::criu-devel | 3.18-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::criu-libs | 3.18-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::crun | 1.8.7-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::fuse-overlayfs | 1.12-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::libslirp | 4.4.0-1.module_el8.8.0+3615+3543c705 |
| alma 8 | container-tools:rhel8::libslirp-devel | 4.4.0-1.module_el8.8.0+3615+3543c705 |
| alma 8 | container-tools:rhel8::netavark | 2:1.7.0-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::oci-seccomp-bpf-hook | 1.2.9-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::podman | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::podman-catatonit | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::podman-docker | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::podman-gvproxy | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::podman-plugins | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::podman-remote | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::podman-tests | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::python3-criu | 3.18-4.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::python3-podman | 4.6.0-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::runc | 1:1.1.9-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::skopeo | 2:1.13.3-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::skopeo-tests | 2:1.13.3-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::slirp4netns | 1.2.1-1.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::toolbox | 0.0.99.4-5.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::toolbox-tests | 0.0.99.4-5.module_el8.9.0+3643+9234dc3b |
| alma 8 | container-tools:rhel8::udica | 0.2.6-20.module_el8.8.0+3615+3543c705 |
| alma 8 | go-toolset:rhel8::delve | 1.9.1-1.module_el8.8.0+3471+a62632a0 |
| alma 8 | go-toolset:rhel8::go-toolset | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 8 | go-toolset:rhel8::golang | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 8 | go-toolset:rhel8::golang-bin | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 8 | go-toolset:rhel8::golang-docs | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 8 | go-toolset:rhel8::golang-misc | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 8 | go-toolset:rhel8::golang-race | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 8 | go-toolset:rhel8::golang-src | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 8 | go-toolset:rhel8::golang-tests | 1.19.9-1.module_el8.8.0+3570+5dc5ffc3 |
| alma 9 | buildah | 1:1.31.3-1.el9 |
| alma 9 | buildah-tests | 1:1.31.3-1.el9 |
| alma 9 | containernetworking-plugins | 1:1.3.0-4.el9 |
| alma 9 | go-toolset | 1.19.9-1.el9_2 |
| alma 9 | golang | 1.19.9-2.el9_2 |
| alma 9 | golang-bin | 1.19.9-2.el9_2 |
| alma 9 | golang-docs | 1.19.9-2.el9_2 |
| alma 9 | golang-misc | 1.19.9-2.el9_2 |
| alma 9 | golang-race | 1.19.9-2.el9_2 |
| alma 9 | golang-src | 1.19.9-2.el9_2 |
| alma 9 | golang-tests | 1.19.9-2.el9_2 |
| alma 9 | podman | 2:4.6.1-5.el9 |
| alma 9 | podman-docker | 2:4.6.1-5.el9 |
| alma 9 | podman-gvproxy | 2:4.6.1-5.el9 |
| alma 9 | podman-plugins | 2:4.6.1-5.el9 |
| alma 9 | podman-remote | 2:4.6.1-5.el9 |
| alma 9 | podman-tests | 2:4.6.1-5.el9 |
| alma 9 | skopeo | 2:1.13.3-1.el9 |
| alma 9 | skopeo-tests | 2:1.13.3-1.el9 |
| alma 9 | toolbox | 0.0.99.4-6.el9_3 |
| alma 9 | toolbox-tests | 0.0.99.4-6.el9_3 |
| alpine 3.17 | go | 1.19.9-r0 |
| alpine 3.18 | go | 1.20.4-r0 |
| alpine 3.19 | go | 1.20.4-r0 |
| alpine 3.20 | go | 1.20.4-r0 |
| alpine 3.21 | go | 1.20.4-r0 |
| alpine 3.22 | go | 1.20.4-r0 |
| alpine 3.23 | go | 1.20.4-r0 |
| alpine 3.24 | go | 1.20.4-r0 |
| alpine edge | go | 1.20.4-r0 |
| amazon linux 1 | amazon-ssm-agent | 3.2.1705.0-1.amzn1 |
| amazon linux 1 | amazon-ssm-agent-debuginfo | 3.2.1705.0-1.amzn1 |
| amazon linux 1 | golang | 1.20.8-1.47.amzn1 |
| amazon linux 1 | golang-bin | 1.20.8-1.47.amzn1 |
| amazon linux 1 | golang-docs | 1.20.8-1.47.amzn1 |
| amazon linux 1 | golang-misc | 1.20.8-1.47.amzn1 |
| amazon linux 1 | golang-race | 1.18.6-1.44.amzn1 |
| amazon linux 1 | golang-shared | 1.20.8-1.47.amzn1 |
| amazon linux 1 | golang-src | 1.20.8-1.47.amzn1 |
| amazon linux 1 | golang-tests | 1.20.8-1.47.amzn1 |
| amazon linux 2 | amazon-ssm-agent | 3.2.1705.0-1.amzn2 |
| amazon linux 2 | amazon-ssm-agent-debuginfo | 3.2.1705.0-1.amzn2 |
| amazon linux 2 | golang | 1.20.5-1.amzn2.0.2 |
| amazon linux 2 | golang-bin | 1.20.5-1.amzn2.0.2 |
| amazon linux 2 | golang-docs | 1.20.5-1.amzn2.0.2 |
| amazon linux 2 | golang-misc | 1.20.5-1.amzn2.0.2 |
| amazon linux 2 | golang-shared | 1.20.5-1.amzn2.0.2 |
| amazon linux 2 | golang-src | 1.20.5-1.amzn2.0.2 |
| amazon linux 2 | golang-tests | 1.20.5-1.amzn2.0.2 |
| amazon linux 2023 | golang | 1.19.9-1.amzn2023.0.1 |
| amazon linux 2023 | golang-bin | 1.19.9-1.amzn2023.0.1 |
| amazon linux 2023 | golang-docs | 1.19.9-1.amzn2023.0.1 |
| amazon linux 2023 | golang-misc | 1.19.9-1.amzn2023.0.1 |
| amazon linux 2023 | golang-race | 1.19.9-1.amzn2023.0.1 |
| amazon linux 2023 | golang-shared | 1.19.9-1.amzn2023.0.1 |
| amazon linux 2023 | golang-src | 1.19.9-1.amzn2023.0.1 |
| amazon linux 2023 | golang-tests | 1.19.9-1.amzn2023.0.1 |
| chainguard | go-1.20 | 1.20.4-r0 |
| chainguard | kubeflow-katib | 0.19.0-r40 |
| debian 10 | golang-1.11 | no fix listed |
| debian 11 | golang-1.15 | no fix listed |
| debian 11 | golang-1.19 | no fix listed |
| debian 12 | golang-1.19 | no fix listed |
| echo | golang-1.19 | no fix listed |
| go::The Go Vulnerability Database | stdlib | 1.19.9, 1.20.4 |
| Oracle Linux 8 | aardvark-dns | 2:1.7.0-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | buildah | 1:1.31.3-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | buildah-tests | 1:1.31.3-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | cockpit-podman | 75-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | conmon | 3:2.1.8-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | container-selinux | 2:2.221.0-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.3.0-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | containers-common | 2:1-54.0.1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | crit | 3.18-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | criu | 3.18-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | criu-devel | 3.18-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | criu-libs | 3.18-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | crun | 1.8.7-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | delve | 1.9.1-1.0.1.module+el8.8.0+20964+30a27755 |
| Oracle Linux 8 | fuse-overlayfs | 1.12-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | go-toolset | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | golang | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | golang-bin | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | golang-docs | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | golang-misc | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | golang-race | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | golang-src | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | golang-tests | 1.19.9-1.module+el8.8.0+21059+045f0f63 |
| Oracle Linux 8 | libslirp | 4.4.0-1.module+el8.9.0+90044+a34bc939 |
| Oracle Linux 8 | libslirp-devel | 4.4.0-1.module+el8.9.0+90044+a34bc939 |
| Oracle Linux 8 | netavark | 2:1.7.0-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.9-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | podman | 3:4.6.1-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | podman-catatonit | 3:4.6.1-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | podman-docker | 3:4.6.1-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | podman-gvproxy | 3:4.6.1-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | podman-plugins | 3:4.6.1-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | podman-remote | 3:4.6.1-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | podman-tests | 3:4.6.1-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | python3-criu | 3.18-4.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | python3-podman | 4.6.0-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | runc | 1:1.1.9-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | skopeo | 2:1.13.3-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | skopeo-tests | 2:1.13.3-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | slirp4netns | 1.2.1-1.module+el8.9.0+90021+ce997450 |
| Oracle Linux 8 | udica | 0.2.6-20.module+el8.9.0+90021+ce997450 |
| Oracle Linux 9 | buildah | 1:1.31.3-1.0.1.el9 |
| Oracle Linux 9 | buildah-tests | 1:1.31.3-1.0.1.el9 |
| Oracle Linux 9 | containernetworking-plugins | 1:1.3.0-4.el9 |
| Oracle Linux 9 | go-toolset | 1.19.9-1.el9_2 |
| Oracle Linux 9 | golang | 1.19.9-2.el9_2 |
| Oracle Linux 9 | golang-bin | 1.19.9-2.el9_2 |
| Oracle Linux 9 | golang-docs | 1.19.9-2.el9_2 |
| Oracle Linux 9 | golang-misc | 1.19.9-2.el9_2 |
| Oracle Linux 9 | golang-race | 1.19.9-2.el9_2 |
| Oracle Linux 9 | golang-src | 1.19.9-2.el9_2 |
| Oracle Linux 9 | golang-tests | 1.19.9-2.el9_2 |
| Oracle Linux 9 | podman | 2:4.6.1-5.0.1.el9 |
| Oracle Linux 9 | podman-docker | 2:4.6.1-5.0.1.el9 |
| Oracle Linux 9 | podman-gvproxy | 2:4.6.1-5.0.1.el9 |
| Oracle Linux 9 | podman-plugins | 2:4.6.1-5.0.1.el9 |
| Oracle Linux 9 | podman-remote | 2:4.6.1-5.0.1.el9 |
| Oracle Linux 9 | podman-tests | 2:4.6.1-5.0.1.el9 |
| Oracle Linux 9 | skopeo | 2:1.13.3-1.el9 |
| Oracle Linux 9 | skopeo-tests | 2:1.13.3-1.el9 |
| rapidfort alma 8 | osbuild-composer | no fix listed |
| rapidfort alma 8 | osbuild-composer-core | no fix listed |
| rapidfort alma 8 | osbuild-composer-worker | no fix listed |
| rapidfort alma 9 | osbuild-composer | no fix listed |
| rapidfort alma 9 | osbuild-composer-core | no fix listed |
| rapidfort alma 9 | osbuild-composer-worker | no fix listed |
| rapidfort amazon linux 2023 | golang | 1.19.9-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-bin | 1.19.9-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-docs | 1.19.9-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-misc | 1.19.9-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-race | 1.19.9-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-shared | 1.19.9-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-src | 1.19.9-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-tests | 1.19.9-1.amzn2023.0.1 |
| rapidfort debian 12 | golang-1.19 | no fix listed |
| rapidfort debian 13 | golang-1.19 | no fix listed |
| rapidfort Oracle Linux 9 | buildah | 1:1.31.3-1.0.1.el9 |
| rapidfort Oracle Linux 9 | buildah-tests | 1:1.31.3-1.0.1.el9 |
| rapidfort Oracle Linux 9 | containernetworking-plugins | 1:1.3.0-4.el9 |
| rapidfort Oracle Linux 9 | go-toolset | 0:1.19.9-1.el9_2 |
| rapidfort Oracle Linux 9 | golang | 0:1.19.9-2.el9_2 |
| rapidfort Oracle Linux 9 | golang-bin | 0:1.19.9-2.el9_2 |
| rapidfort Oracle Linux 9 | golang-docs | 0:1.19.9-2.el9_2 |
| rapidfort Oracle Linux 9 | golang-misc | 0:1.19.9-2.el9_2 |
| rapidfort Oracle Linux 9 | golang-race | 0:1.19.9-2.el9_2 |
| rapidfort Oracle Linux 9 | golang-src | 0:1.19.9-2.el9_2 |
| rapidfort Oracle Linux 9 | golang-tests | 0:1.19.9-2.el9_2 |
| rapidfort Oracle Linux 9 | osbuild-composer | no fix listed |
| rapidfort Oracle Linux 9 | osbuild-composer-core | no fix listed |
| rapidfort Oracle Linux 9 | osbuild-composer-dnf-json | no fix listed |
| rapidfort Oracle Linux 9 | osbuild-composer-worker | no fix listed |
| rapidfort Oracle Linux 9 | podman | 2:4.6.1-5.0.1.el9 |
| rapidfort Oracle Linux 9 | podman-docker | 2:4.6.1-5.0.1.el9 |
| rapidfort Oracle Linux 9 | podman-gvproxy | 2:4.6.1-5.0.1.el9 |
| rapidfort Oracle Linux 9 | podman-plugins | 2:4.6.1-5.0.1.el9 |
| rapidfort Oracle Linux 9 | podman-remote | 2:4.6.1-5.0.1.el9 |
| rapidfort Oracle Linux 9 | podman-tests | 2:4.6.1-5.0.1.el9 |
| rapidfort Oracle Linux 9 | skopeo | 2:1.13.3-1.el9 |
| rapidfort Oracle Linux 9 | skopeo-tests | 2:1.13.3-1.el9 |
| rapidfort rocky 8 | osbuild-composer | no fix listed |
| rapidfort rocky 8 | osbuild-composer-core | no fix listed |
| rapidfort rocky 8 | osbuild-composer-worker | no fix listed |
| rapidfort rocky 9 | osbuild-composer | no fix listed |
| rapidfort rocky 9 | osbuild-composer-core | no fix listed |
| rapidfort rocky 9 | osbuild-composer-worker | no fix listed |
| rapidfort ubuntu 20.04 | golang-1.20 | 0:1.20.3-1ubuntu0.1 |
| rapidfort ubuntu 22.04 | golang-1.20 | 0:1.20.3-1ubuntu0.1 |
| rapidfort ubuntu 24.04 | golang-1.20 | 0:1.20.3-1ubuntu0.1 |
| Red Hat | container-tools:3.0::containernetworking-plugins | no fix listed |
| Red Hat | container-tools:3.0::containers-common | no fix listed |
| Red Hat | container-tools:3.0::skopeo | no fix listed |
| Red Hat | container-tools:3.0::skopeo-tests | no fix listed |
| Red Hat | container-tools:3.0::toolbox | no fix listed |
| Red Hat | container-tools:3.0::toolbox-tests | no fix listed |
| Red Hat | go-toolset-7-golang | no fix listed |
| Red Hat | golang | no fix listed |
| Red Hat | golang-bin | no fix listed |
| Red Hat | golang-docs | no fix listed |
| Red Hat | golang-misc | no fix listed |
| Red Hat | golang-src | no fix listed |
| Red Hat | golang-tests | no fix listed |
| Red Hat | osbuild-composer | no fix listed |
| Red Hat | osbuild-composer-core | no fix listed |
| Red Hat | osbuild-composer-dnf-json | no fix listed |
| Red Hat | osbuild-composer-worker | no fix listed |
| rocky 8 | container-tools:4.0::aardvark-dns | 2:1.0.1-38.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::buildah | 1:1.24.6-7.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::buildah-tests | 1:1.24.6-7.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::cockpit-podman | 46-1.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::conmon | 2:2.1.4-2.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::container-selinux | 2:2.205.0-3.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::containernetworking-plugins | 1:1.1.1-5.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::containers-common | 2:1-38.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::crit | 3.15-3.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::criu | 3.15-3.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::criu-devel | 3.15-3.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::criu-libs | 3.15-3.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::crun | 1.8.3-1.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::fuse-overlayfs | 1.9-2.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::libslirp | 4.4.0-1.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::libslirp-devel | 4.4.0-1.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::netavark | 2:1.0.1-38.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::oci-seccomp-bpf-hook | 1.2.5-2.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::podman | 2:4.0.2-24.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::podman-catatonit | 2:4.0.2-24.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::podman-docker | 2:4.0.2-24.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::podman-gvproxy | 2:4.0.2-24.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::podman-plugins | 2:4.0.2-24.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::podman-remote | 2:4.0.2-24.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::podman-tests | 2:4.0.2-24.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::python3-criu | 3.15-3.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::python3-podman | 4.0.0-2.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::runc | 1:1.1.5-2.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::slirp4netns | 1.1.8-3.module+el8.9.0+1445+07728297 |
| rocky 8 | container-tools:4.0::udica | 0.2.6-4.module+el8.9.0+1445+07728297 |
| rocky 8 | go-toolset:rhel8::go-toolset | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| rocky 8 | go-toolset:rhel8::golang | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| rocky 8 | go-toolset:rhel8::golang-bin | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| rocky 8 | go-toolset:rhel8::golang-docs | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| rocky 8 | go-toolset:rhel8::golang-misc | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| rocky 8 | go-toolset:rhel8::golang-race | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| rocky 8 | go-toolset:rhel8::golang-src | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| rocky 8 | go-toolset:rhel8::golang-tests | 1.19.9-1.module+el8.8.0+1298+7af20600 |
| root.io debian 12 | rootio-golang-1.19 | no fix listed |
| ubuntu 22.10 | golang-1.19 | 1.19.2-1ubuntu1.1 |
| ubuntu 23.04 | golang-1.19 | 1.19.8-1ubuntu0.1 |
| ubuntu 23.04 | golang-1.20 | 1.20.3-1ubuntu0.1 |
| wolfi | go-1.20 | 1.20.4-r0 |
| wolfi | kubeflow-katib | 0.19.0-r40 |
References
- https://access.redhat.com/errata/RHSA-2023:6474
- https://access.redhat.com/errata/RHSA-2023:6939
- https://access.redhat.com/security/cve/CVE-2023-24540
- https://bugzilla.redhat.com/2174485
- https://bugzilla.redhat.com/2178358
- https://bugzilla.redhat.com/2178488
- https://bugzilla.redhat.com/2178492
- https://bugzilla.redhat.com/2184481
All 66 references
- https://bugzilla.redhat.com/2184482
- https://bugzilla.redhat.com/2184483
- https://bugzilla.redhat.com/2184484
- https://bugzilla.redhat.com/2196026
- https://bugzilla.redhat.com/2196027
- https://bugzilla.redhat.com/2196029
- https://bugzilla.redhat.com/2222167
- https://bugzilla.redhat.com/2228689
- https://bugzilla.redhat.com/show_bug.cgi?id=2163037
- https://bugzilla.redhat.com/show_bug.cgi?id=2174485
- https://bugzilla.redhat.com/show_bug.cgi?id=2175721
- https://bugzilla.redhat.com/show_bug.cgi?id=2178358
- https://bugzilla.redhat.com/show_bug.cgi?id=2178488
- https://bugzilla.redhat.com/show_bug.cgi?id=2178492
- https://bugzilla.redhat.com/show_bug.cgi?id=2182883
- https://bugzilla.redhat.com/show_bug.cgi?id=2182884
- https://bugzilla.redhat.com/show_bug.cgi?id=2184481
- https://bugzilla.redhat.com/show_bug.cgi?id=2184482
- https://bugzilla.redhat.com/show_bug.cgi?id=2184483
- https://bugzilla.redhat.com/show_bug.cgi?id=2184484
- https://bugzilla.redhat.com/show_bug.cgi?id=2196026
- https://bugzilla.redhat.com/show_bug.cgi?id=2196027
- https://bugzilla.redhat.com/show_bug.cgi?id=2196029
- https://bugzilla.redhat.com/show_bug.cgi?id=2222167
- https://bugzilla.redhat.com/show_bug.cgi?id=2228689
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
- https://errata.almalinux.org/9/ALSA-2023-6474.html
- https://errata.rockylinux.org/RLSA-2023:6939
- https://github.com/golang/go/commit/4a28cad66655ee01c6e944271e23c33cab021765%20%28go1.20.4%29
- https://github.com/golang/go/commit/ce7bd33345416e6d8cac901792060591cafc2797%20%28go1.19.9%29
- https://github.com/golang/go/issues/59721
- https://go.dev/cl/491616
- https://go.dev/issue/59721
- https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU
- https://linux.oracle.com/cve/CVE-2023-24540.html
- https://linux.oracle.com/errata/ELSA-2023-6939.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-24540
- https://pkg.go.dev/vuln/GO-2023-1752
- https://security.netapp.com/advisory/ntap-20241115-0008/
- https://ubuntu.com/security/notices/USN-6140-1
- https://www.cve.org/CVERecord?id=CVE-2023-24540