Unchecked Return Value in Go programming language - CVE-2022-23806

Vulnerability identifier: #VU62036

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-23806

CWE-ID: CWE-252

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to unchecked return value within the Curve.IsOnCurve() function in crypto/elliptic. A remote attacker can force the application to incorrectly return true in situations with a big.Int value that is not a valid field element. As a result, an attacker can modify application flow, which can lead to unauthorized data modification or denial of service.

Go programming language
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
Fedora
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Oracle Solaris
Public Cloud Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Development Tools
openSUSE Leap
openEuler
openshift-serverless-clients (Red Hat package)
cri-o (Red Hat package)
servicemesh-ratelimit (Red Hat package)
servicemesh-operator (Red Hat package)
servicemesh (Red Hat package)
servicemesh-proxy (Red Hat package)
servicemesh-prometheus (Red Hat package)
openshift-ansible (Red Hat package)
toolbox (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
rust-bootupd (Red Hat package)
python-oslo-metrics (Red Hat package)
python-logutils (Red Hat package)
python-colorama (Red Hat package)
python-greenlet (Red Hat package)
python-zipp (Red Hat package)
python-tempita (Red Hat package)
python-msgpack (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-scciclient (Red Hat package)
python-voluptuous (Red Hat package)
python-migrate (Red Hat package)
python-fasteners (Red Hat package)
butane (Red Hat package)
coreos-installer (Red Hat package)
python-pyrsistent (Red Hat package)
console-login-helper-messages (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-openstacksdk (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-yappi (Red Hat package)
python-editor (Red Hat package)
libsodium (Red Hat package)
python-flask (Red Hat package)
runc (Red Hat package)
python-dogpile-cache (Red Hat package)
slirp4netns (Red Hat package)
python-rfc3986 (Red Hat package)
python-retrying (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-vine (Red Hat package)
python-pynacl (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-appdirs (Red Hat package)
crun (Red Hat package)
python-alembic (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
skopeo (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
delve
python-webob (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
python-six (Red Hat package)
golang-help
golang-devel
golang
go1.16-race
go1.16-doc
go1.16
golang-tests
golang-bin
golang-race
golang-docs
golang-src
golang-misc
go-toolset
go1.17-doc
go1.17
go1.17-race
containers-common (Red Hat package)
buildah (Red Hat package)
cri-tools (Red Hat package)
NetworkManager (Red Hat package)
python-memcached (Red Hat package)
python-waitress (Red Hat package)
python-paste-deploy (Red Hat package)
python-werkzeug (Red Hat package)
python-webtest (Red Hat package)
python-soupsieve (Red Hat package)
conmon (Red Hat package)
haproxy (Red Hat package)
pyparsing (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
kata-containers (Red Hat package)
python-automaton (Red Hat package)
python-debtcollector (Red Hat package)
python-osc-lib (Red Hat package)
python-amqp (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
python-os-traits (Red Hat package)
python-kazoo (Red Hat package)
python-oslo-service (Red Hat package)
python-oslo-cache (Red Hat package)
python-construct (Red Hat package)
python-tooz (Red Hat package)
python-proliantutils (Red Hat package)
ignition (Red Hat package)
openvswitch2.17 (Red Hat package)
container-selinux (Red Hat package)
python-cachetools (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-stevedore (Red Hat package)
python-glanceclient (Red Hat package)
python-cliff (Red Hat package)
python-oslo-policy (Red Hat package)
python-swiftclient (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
podman (Red Hat package)
python-oslo-context (Red Hat package)
python-sushy (Red Hat package)
python-oslo-serialization (Red Hat package)
python-keystoneclient (Red Hat package)
libslirp (Red Hat package)
python-decorator (Red Hat package)
pysnmp (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-oslo-middleware (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-kombu (Red Hat package)
python-beautifulsoup4 (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
python-oslo-utils (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
rust-afterburn (Red Hat package)
python-pbr (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-dracclient (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
openstack-ironic (Red Hat package)
python-packaging (Red Hat package)
python-keyring (Red Hat package)
ovn22.03 (Red Hat package)
ovn22.06 (Red Hat package)
google-guest-agent
google-osconfig-agent
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
Service Telemetry Framework
IBM Cloud Pak for Multicloud Management Monitoring
Red Hat Advanced Cluster Management for Kubernetes
IBM Cloud Automation Manager
IBM Robotic Process Automation
Operations Dashboard
Automation Assets in IBM Cloud Pak for Integration (CP4I)
Netcool Operations Insight
IBM Cloud Pak for Multicloud Management Security Services
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Spectrum Protect Plus
QRadar Suite
Splunk Enterprise
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
IBM Cloud Pak for Watson AIOps
Watson CP4D Data Stores
Dell PowerProtect Cyber Recovery
Red Hat OpenShift Container Platform
OpenShift Serverless Client

Install updates from vendor's website.

Go programming language - addressed in versions 1.16.14, 1.17.7
openshift-serverless-clients (Red Hat package) - update to 1.1.0-3.el8
Red Hat OpenShift Serverless - update to 1.22.1
QRadar Suite - update to 1.10.17.0
cri-o (Red Hat package) - addressed in versions 1.23.3-13.rhaos4.10.git6af791c.1.el7, 1.23.3-14.rhaos4.10.git6af791c.1.el8, 1.24.1-11.rhaos4.11.gitb0d2ef3.el8
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 5
OpenShift Service Mesh - update to 2.1.3
servicemesh-ratelimit (Red Hat package) - update to 2.1.3-1.el8
servicemesh-operator (Red Hat package) - update to 2.1.3-2.el8
servicemesh (Red Hat package) - update to 2.1.3-1.el8
servicemesh-proxy (Red Hat package) - update to 2.1.3-1.el8
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.11, 2.4.5, 2.5.0
servicemesh-prometheus (Red Hat package) - update to 2.23.0-7.el8
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.3
Red Hat OpenShift Container Platform - addressed in versions 4.10.26, 4.10.28, 4.11.0
openshift-ansible (Red Hat package) - addressed in versions 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el7, 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el8, 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
IBM Robotic Process Automation - update to 21.0.3.1
Operations Dashboard - addressed in versions 2020.4.1-8, 2021.4.1-4
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2020.4.1-6, 2021.4.1-1
Automation Assets in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2020.4.1-5, 2021.4.1-3
toolbox (Red Hat package) - update to 0.0.9-1.rhaos4.11.el8
python-ifaddr (Red Hat package) - update to 0.1.6-6.el8
python-wcwidth (Red Hat package) - update to 0.1.7-15.el8
python-iso8601 (Red Hat package) - update to 0.1.12-9.el8
python-zake (Red Hat package) - update to 0.2.2-19.el8
python-sqlparse (Red Hat package) - update to 0.2.4-10.el8
rust-bootupd (Red Hat package) - update to 0.2.5-3.rhaos4.11.el8
python-oslo-metrics (Red Hat package) - update to 0.3.0-0.20220216012738.43eee50.el8
python-logutils (Red Hat package) - update to 0.3.5-7.1.el8
python-colorama (Red Hat package) - update to 0.4.1-2.el8
python-greenlet (Red Hat package) - update to 0.4.14-6.el8
python-zipp (Red Hat package) - update to 0.5.1-3.el8
python-tempita (Red Hat package) - update to 0.5.1-25.el8
python-msgpack (Red Hat package) - update to 0.6.2-2.el8
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el8
python-repoze-lru (Red Hat package) - update to 0.7-7.el8
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el8
python-dataclasses (Red Hat package) - update to 0.8-3.el8
python-pint (Red Hat package) - update to 0.10.1-3.el8
python-wsme (Red Hat package) - update to 0.11.0-0.20220216004816.80bda90.el8
python-scciclient (Red Hat package) - update to 0.11.1-0.20220216020832.a84332b.el8
python-voluptuous (Red Hat package) - update to 0.11.7-3.el8
python-migrate (Red Hat package) - update to 0.13.0-2.el8
python-fasteners (Red Hat package) - update to 0.14.1-21.el8
butane (Red Hat package) - update to 0.15.0-1.rhaos4.11.el8
coreos-installer (Red Hat package) - update to 0.15.0-2.rhaos4.11.el8
python-pyrsistent (Red Hat package) - update to 0.16.0-4.el8
console-login-helper-messages (Red Hat package) - addressed in versions 0.20.3-2.rhaos4.11.el8, 0.20.4-1.rhaos4.10.el8
python-zeroconf (Red Hat package) - update to 0.24.4-2.el8
python-hardware (Red Hat package) - update to 0.29.0-0.20220216015636.7662a1d.el8
python-openstacksdk (Red Hat package) - update to 0.61.0-0.20220509201549.26c9bc2.el8
containernetworking-plugins (Red Hat package) - update to 1.0.1-5.rhaos4.11.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el8
python-yappi (Red Hat package) - update to 1.0-3.el8
python-editor (Red Hat package) - update to 1.0.4-5.el8
libsodium (Red Hat package) - update to 1.0.16-5.el8
python-flask (Red Hat package) - update to 1.1.1-2.el8
runc (Red Hat package) - update to 1.1.2-1.rhaos4.11.el8
python-dogpile-cache (Red Hat package) - update to 1.1.2-2.el8
slirp4netns (Red Hat package) - update to 1.1.8-1.rhaos4.11.el8
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el8
python-retrying (Red Hat package) - update to 1.2.3-22.el8
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el8
python-vine (Red Hat package) - update to 1.3.0-5.el8
python-pynacl (Red Hat package) - update to 1.3.0-6.el8
python-pecan (Red Hat package) - update to 1.3.2-10.el8
python-warlock (Red Hat package) - update to 1.3.3-2.el8
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20220215231659.d7ac0ff.el8
python-appdirs (Red Hat package) - update to 1.4.0-8.el8
crun (Red Hat package) - update to 1.4.2-1.rhaos4.11.el8
python-alembic (Red Hat package) - update to 1.4.2-6.el8
python-oslo-upgradecheck (Red Hat package) - update to 1.5.0-0.20220509195112.1559e03.el8
skopeo (Red Hat package) - update to 1.5.2-3.rhaos4.11.el8
python-pyperclip (Red Hat package) - update to 1.6.4-7.el8
Netcool Operations Insight - update to 1.6.6
python-os-service-types (Red Hat package) - update to 1.7.0-0.20220215231659.0b2f473.el8
python-importlib-metadata (Red Hat package) - update to 1.7.0-2.el8
delve - update to 1.7.2-1
python-webob (Red Hat package) - update to 1.8.5-5.el8
fuse-overlayfs (Red Hat package) - update to 1.9-1.rhaos4.11.el8
python-pycdlib (Red Hat package) - update to 1.11.0-4.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el8
python-six (Red Hat package) - update to 1.15.0-3.el8
golang-help - update to 1.15.7-9
golang-devel - update to 1.15.7-9
golang - update to 1.15.7-9
go1.16-race - update to 1.16.14-1.43.1
go1.16-doc - update to 1.16.14-1.43.1
go1.16 - update to 1.16.14-1.43.1
golang - addressed in versions 1.16.15-1.38, 1.19.3-2, 1.19.8-1
golang-tests - update to 1.17.7-1
golang-bin - update to 1.17.7-1
golang-race - update to 1.17.7-1
golang-docs - update to 1.17.7-1
golang-src - update to 1.17.7-1
golang-misc - update to 1.17.7-1
golang - update to 1.17.7-1
go-toolset - update to 1.17.7-1
golang - update to 1.17.7-1.el7
go1.17-doc - update to 1.17.7-1.20.1
go1.17 - update to 1.17.7-1.20.1
go1.17-race - update to 1.17.7-1.20.1
containers-common (Red Hat package) - update to 1-21.rhaos4.11.el8
OpenShift Serverless Client - update to 1.22.1
buildah (Red Hat package) - update to 1.23.4-2.el8
cri-tools (Red Hat package) - update to 1.24.2-4.1.el8
NetworkManager (Red Hat package) - update to 1.30.0-16.el8_4
python-memcached (Red Hat package) - update to 1.58-12.el8
python-waitress (Red Hat package) - update to 2.0.0-2.el8
python-paste-deploy (Red Hat package) - update to 2.0.1-5.el8
python-werkzeug (Red Hat package) - update to 2.0.3-1.el8
python-webtest (Red Hat package) - update to 2.0.33-5.el8
python-soupsieve (Red Hat package) - update to 2.1.0-2.el8
conmon (Red Hat package) - update to 2.1.2-2.rhaos4.11.el8
haproxy (Red Hat package) - update to 2.2.24-1.el8
IBM Cloud Pak for Multicloud Management Security Services - update to 2.3 Fix Pack 6
pyparsing (Red Hat package) - update to 2.3.1-2.el8
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el8
python-munch (Red Hat package) - update to 2.3.2-7.el8
python-futurist (Red Hat package) - update to 2.4.1-0.20220509215250.159d752.el8
python-routes (Red Hat package) - update to 2.4.1-12.el8
kata-containers (Red Hat package) - update to 2.4.2-1.el8
python-automaton (Red Hat package) - update to 2.5.0-0.20220509195848.aaca110.el8
python-debtcollector (Red Hat package) - update to 2.5.0-0.20220509211533.a6b46c5.el8
python-osc-lib (Red Hat package) - update to 2.5.0-0.20220509211843.78d276e.el8
python-amqp (Red Hat package) - update to 2.5.2-8.el8
python-oslo-versionedobjects (Red Hat package) - update to 2.6.0-0.20220509202736.25d34d6.el8
python-os-traits (Red Hat package) - update to 2.7.0-0.20220509205801.3d1dbf0.el8
python-kazoo (Red Hat package) - update to 2.7.0-2.el8
python-oslo-service (Red Hat package) - update to 2.8.0-0.20220509203713.6552b9a.el8
python-oslo-cache (Red Hat package) - update to 2.8.1-0.20220216000746.40946a9.el8
python-construct (Red Hat package) - update to 2.10.56-2.el8
python-tooz (Red Hat package) - update to 2.11.1-0.20220509215238.96f91b9.el8
python-proliantutils (Red Hat package) - update to 2.13.2-0.20220509214147.8c7b6b1.el8
ignition (Red Hat package) - update to 2.14.0-3.rhaos4.11.el8
openvswitch2.17 (Red Hat package) - update to 2.17.0-22.el8fdp
container-selinux (Red Hat package) - update to 2.188.0-1.rhaos4.11.el8
python-cachetools (Red Hat package) - update to 3.1.0-3.el8
python-pycadf (Red Hat package) - update to 3.1.1-0.20220215232623.4179996.el8
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20220324125409.db1a824.el8
python-bcrypt (Red Hat package) - update to 3.1.6-3.el8
python-jsonschema (Red Hat package) - update to 3.2.0-6.el8
python-statsd (Red Hat package) - update to 3.2.1-17.el8
python-paste (Red Hat package) - update to 3.2.4-2.el8
IBM Cloud Transformation Advisor - update to 3.3.1
python-redis (Red Hat package) - update to 3.3.8-2.el8
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el8
python-osprofiler (Red Hat package) - update to 3.4.3-0.20220509214403.3286301.el8
python-stevedore (Red Hat package) - update to 3.5.0-0.20220509195112.442f157.el8
IBM Cloud Pak for Watson AIOps - update to 3.6.0
python-glanceclient (Red Hat package) - update to 3.6.0-0.20220509212414.626c500.el8
python-cliff (Red Hat package) - update to 3.10.1-0.20220509200732.a04a48f.el8
python-oslo-policy (Red Hat package) - update to 3.12.1-0.20220509221328.9673a74.el8
python-swiftclient (Red Hat package) - update to 3.13.1-0.20220509204112.4989d94.el8
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el8
python-sushy-oem-idrac (Red Hat package) - update to 4.0.0-0.20220324125409.7b75e6e.el8
podman (Red Hat package) - update to 4.0.2-6.rhaos4.11.el8
python-oslo-context (Red Hat package) - update to 4.1.0-0.20220509205437.3400cc2.el8
python-sushy (Red Hat package) - update to 4.1.1-0.20220302175405.c769149.el8
python-oslo-serialization (Red Hat package) - update to 4.3.0-0.20220509195921.6910f75.el8
python-keystoneclient (Red Hat package) - update to 4.4.0-0.20220509200759.100253d.el8
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-decorator (Red Hat package) - update to 4.4.0-6.el8
pysnmp (Red Hat package) - update to 4.4.8-3.el8
python-keystoneauth1 (Red Hat package) - update to 4.5.0-0.20220509213157.8da0a63.el8
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.5.1
python-oslo-middleware (Red Hat package) - update to 4.5.1-0.20220509203328.2f72b30.el8
python-oslo-concurrency (Red Hat package) - update to 4.5.1-0.20220509221157.145f060.el8
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.5.3
python-oslo-log (Red Hat package) - update to 4.6.0-0.20220216002407.41c8807.el8
python-pexpect (Red Hat package) - update to 4.6-3.el8
python-kombu (Red Hat package) - update to 4.6.6-8.el8
Watson CP4D Data Stores - update to 4.7.0
python-beautifulsoup4 (Red Hat package) - update to 4.9.3-2.el8
OpenShift Virtualization - addressed in versions 4.11.0, 4.12.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.11.0
atomic-openshift-service-idler (Red Hat package) - update to 4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
openshift-kuryr (Red Hat package) - update to 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
openshift (Red Hat package) - update to 4.11.0-202207082037.p0.g9546431.assembly.stream.el8
openshift-clients (Red Hat package) - update to 4.11.0-202207291716.p0.g7075089.assembly.stream.el8
python-oslo-utils (Red Hat package) - update to 4.13.0-0.20220509213520.de4429f.el8
python-oslo-i18n (Red Hat package) - update to 5.1.0-0.20220216011159.b031d17.el8
python-ironic-lib (Red Hat package) - update to 5.1.1-0.20220225151335.e205816.el8
rust-afterburn (Red Hat package) - update to 5.3.0-1.rhaos4.11.el8
python-pbr (Red Hat package) - update to 5.5.1-2.el8
python-tenacity (Red Hat package) - update to 6.2.0-2.el8
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20220509204453.1b1b960.el8
python-dracclient (Red Hat package) - update to 8.0.0-0.20220509201613.9c7499c.el8
python-cinderclient (Red Hat package) - update to 8.3.0-0.20220509212734.ee59b68.el8
openstack-ironic-python-agent (Red Hat package) - update to 8.6.1-0.20220623075054.1d50c23.el8
python-oslo-config (Red Hat package) - update to 8.8.0-0.20220509202553.64c82a0.el8
python-oslo-db (Red Hat package) - update to 9.1.0-0.20220216003829.be2cc6a.el8
python-keystonemiddleware (Red Hat package) - update to 9.4.0-0.20220509211054.8a05709.el8
IBM Spectrum Protect Plus - update to 10.1.12
openstack-ironic-inspector (Red Hat package) - update to 10.12.1-0.20220513095437.6dd37e5.el8
python-oslo-messaging (Red Hat package) - update to 12.13.0-0.20220509210748.2d090b5.el8
Dell PowerProtect Cyber Recovery - update to 19.14.0.1
openstack-ironic (Red Hat package) - update to 20.2.1-0.20220628175043.b5ed57a.el8
python-packaging (Red Hat package) - update to 20.4-2.el8
python-keyring (Red Hat package) - update to 21.0.0-2.el8
ovn22.03 (Red Hat package) - update to 22.03.0-37.el8fdp
ovn22.06 (Red Hat package) - update to 22.06.0-27.el8fdp
google-guest-agent - addressed in versions 20230221.00-1.29.1, 20230221.00-150000.1.34.1
google-osconfig-agent - addressed in versions 20230222.00-1.20.1, 20230222.00-150000.1.27.1

• https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
• https://security.netapp.com/advisory/ntap-20220225-0006/

• Multiple vulnerabilities in Go programming language
• IBM Operations Dashboard update for Go
• Multiple vulnerabilities in OpenShift Serverless Client
• Multiple vulnerabilities in OpenShift Serverless
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.1
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.3
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.1
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring
• Gentoo update for Go
• Denial of service in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• OpenShift Container Platform 4.10 update for golang
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Virtualization
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Amazon Linux AMI update for golang
• SUSE update for google-guest-agent
• SUSE update for google-osconfig-agent
• SUSE update for google-osconfig-agent
• SUSE update for google-guest-agent
• SUSE update for go1.17
• SUSE update for go1.16
• Multiple vulnerabilities in Service Telemetry Framework
• Multiple vulnerabilities in IBM Cloud Automation Manager
• Unchecked return value in IBM Watson CP4D Data Stores
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in IBM QRadar Suite software
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Security Services
• openEuler update for golang
• Amazon Linux AMI update for golang
• Amazon Linux AMI update for golang
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11 packages
• Fedora EPEL 7 update for golang
• Multiple vulnerabilities in IBM Watson Discovery
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Anolis OS update for go-toolset:an8 module
• IBM Platform Navigator and Automation Assets in IBM Cloud Pak for Integration update for Golang Go
• Multiple vulnerabilities in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data