Incorrect authorization in Go programming language - CVE-2022-23773

Vulnerability identifier: #VU62037

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-23773

CWE-ID: CWE-863

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists within cmd/go, which can misinterpret branch names that falsely appear to be version tags. This can lead to  a situation where an attacker can bypass implemented security restrictions and perform restricted actions, e.g. create tags when access was granted to create branches only.

Go programming language
Gentoo Linux
Amazon Linux AMI
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
Fedora
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Oracle Solaris
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Desktop
openEuler
openshift-serverless-clients (Red Hat package)
cri-o (Red Hat package)
servicemesh-ratelimit (Red Hat package)
servicemesh-operator (Red Hat package)
servicemesh (Red Hat package)
servicemesh-proxy (Red Hat package)
servicemesh-prometheus (Red Hat package)
openshift-ansible (Red Hat package)
toolbox (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
rust-bootupd (Red Hat package)
python-oslo-metrics (Red Hat package)
python-logutils (Red Hat package)
python-colorama (Red Hat package)
python-greenlet (Red Hat package)
python-zipp (Red Hat package)
python-tempita (Red Hat package)
python-msgpack (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-scciclient (Red Hat package)
python-voluptuous (Red Hat package)
python-migrate (Red Hat package)
python-fasteners (Red Hat package)
butane (Red Hat package)
coreos-installer (Red Hat package)
python-pyrsistent (Red Hat package)
console-login-helper-messages (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-openstacksdk (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-yappi (Red Hat package)
python-editor (Red Hat package)
libsodium (Red Hat package)
python-flask (Red Hat package)
runc (Red Hat package)
python-dogpile-cache (Red Hat package)
slirp4netns (Red Hat package)
python-rfc3986 (Red Hat package)
python-retrying (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-vine (Red Hat package)
python-pynacl (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-appdirs (Red Hat package)
crun (Red Hat package)
python-alembic (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
skopeo (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
delve
python-webob (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
python-six (Red Hat package)
golang
golang-help
golang-devel
go1.16-doc
go1.16-race
go1.16
golang-tests
go-toolset
golang-src
golang-misc
golang-docs
golang-race
golang-bin
go1.17-doc
go1.17-race
go1.17
containers-common (Red Hat package)
buildah (Red Hat package)
cri-tools (Red Hat package)
NetworkManager (Red Hat package)
python-memcached (Red Hat package)
python-waitress (Red Hat package)
python-paste-deploy (Red Hat package)
python-werkzeug (Red Hat package)
python-webtest (Red Hat package)
python-soupsieve (Red Hat package)
conmon (Red Hat package)
haproxy (Red Hat package)
pyparsing (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
kata-containers (Red Hat package)
python-automaton (Red Hat package)
python-debtcollector (Red Hat package)
python-osc-lib (Red Hat package)
python-amqp (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
python-os-traits (Red Hat package)
python-kazoo (Red Hat package)
python-oslo-service (Red Hat package)
python-oslo-cache (Red Hat package)
python-construct (Red Hat package)
python-tooz (Red Hat package)
python-proliantutils (Red Hat package)
ignition (Red Hat package)
openvswitch2.17 (Red Hat package)
container-selinux (Red Hat package)
python-cachetools (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-stevedore (Red Hat package)
python-glanceclient (Red Hat package)
python-cliff (Red Hat package)
python-oslo-policy (Red Hat package)
python-swiftclient (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
podman (Red Hat package)
python-oslo-context (Red Hat package)
python-sushy (Red Hat package)
python-oslo-serialization (Red Hat package)
python-keystoneclient (Red Hat package)
libslirp (Red Hat package)
python-decorator (Red Hat package)
pysnmp (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-oslo-middleware (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-kombu (Red Hat package)
python-beautifulsoup4 (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
python-oslo-utils (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
rust-afterburn (Red Hat package)
python-pbr (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-dracclient (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
openstack-ironic (Red Hat package)
python-packaging (Red Hat package)
python-keyring (Red Hat package)
ovn22.03 (Red Hat package)
ovn22.06 (Red Hat package)
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
DataPower Operator
Service Telemetry Framework
IBM Cloud Pak for Multicloud Management Monitoring
IBM Cloud Automation Manager
IBM Robotic Process Automation
Netcool Operations Insight
IBM Cloud Pak for Multicloud Management Security Services
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Spectrum Protect Plus
QRadar Suite
Splunk Enterprise
IBM Cloud Pak System
Red Hat OpenShift Container Platform
IBM DataPower Gateway
OpenShift Serverless Client
Watson CP4D Data Stores
IBM Netezza for Cloud Pak for Data
Dell PowerProtect Cyber Recovery

Install updates from vendor's website.

Go programming language - addressed in versions 1.16.14, 1.17.7
openshift-serverless-clients (Red Hat package) - update to 1.1.0-3.el8
Red Hat OpenShift Serverless - update to 1.22.1
DataPower Operator - addressed in versions 1.2.7, 1.5.1
QRadar Suite - update to 1.10.17.0
cri-o (Red Hat package) - addressed in versions 1.23.3-13.rhaos4.10.git6af791c.1.el7, 1.23.3-14.rhaos4.10.git6af791c.1.el8, 1.24.1-11.rhaos4.11.gitb0d2ef3.el8
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 5
OpenShift Service Mesh - update to 2.1.3
servicemesh-ratelimit (Red Hat package) - update to 2.1.3-1.el8
servicemesh-operator (Red Hat package) - update to 2.1.3-2.el8
servicemesh (Red Hat package) - update to 2.1.3-1.el8
servicemesh-proxy (Red Hat package) - update to 2.1.3-1.el8
IBM Cloud Pak System - update to 2.3.3.5
servicemesh-prometheus (Red Hat package) - update to 2.23.0-7.el8
Red Hat OpenShift Container Platform - addressed in versions 4.10.26, 4.10.28, 4.11.0
openshift-ansible (Red Hat package) - addressed in versions 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el7, 4.10.0-202208150436.p0.gb1f6fe3.assembly.stream.el8, 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
IBM DataPower Gateway - addressed in versions 10.0.1.6sr1, 10.0.4.0sr1, 10.0.5.0
IBM Robotic Process Automation - update to 21.0.3.1
toolbox (Red Hat package) - update to 0.0.9-1.rhaos4.11.el8
python-ifaddr (Red Hat package) - update to 0.1.6-6.el8
python-wcwidth (Red Hat package) - update to 0.1.7-15.el8
python-iso8601 (Red Hat package) - update to 0.1.12-9.el8
python-zake (Red Hat package) - update to 0.2.2-19.el8
python-sqlparse (Red Hat package) - update to 0.2.4-10.el8
rust-bootupd (Red Hat package) - update to 0.2.5-3.rhaos4.11.el8
python-oslo-metrics (Red Hat package) - update to 0.3.0-0.20220216012738.43eee50.el8
python-logutils (Red Hat package) - update to 0.3.5-7.1.el8
python-colorama (Red Hat package) - update to 0.4.1-2.el8
python-greenlet (Red Hat package) - update to 0.4.14-6.el8
python-zipp (Red Hat package) - update to 0.5.1-3.el8
python-tempita (Red Hat package) - update to 0.5.1-25.el8
python-msgpack (Red Hat package) - update to 0.6.2-2.el8
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el8
python-repoze-lru (Red Hat package) - update to 0.7-7.el8
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el8
python-dataclasses (Red Hat package) - update to 0.8-3.el8
python-pint (Red Hat package) - update to 0.10.1-3.el8
python-wsme (Red Hat package) - update to 0.11.0-0.20220216004816.80bda90.el8
python-scciclient (Red Hat package) - update to 0.11.1-0.20220216020832.a84332b.el8
python-voluptuous (Red Hat package) - update to 0.11.7-3.el8
python-migrate (Red Hat package) - update to 0.13.0-2.el8
python-fasteners (Red Hat package) - update to 0.14.1-21.el8
butane (Red Hat package) - update to 0.15.0-1.rhaos4.11.el8
coreos-installer (Red Hat package) - update to 0.15.0-2.rhaos4.11.el8
python-pyrsistent (Red Hat package) - update to 0.16.0-4.el8
console-login-helper-messages (Red Hat package) - addressed in versions 0.20.3-2.rhaos4.11.el8, 0.20.4-1.rhaos4.10.el8
python-zeroconf (Red Hat package) - update to 0.24.4-2.el8
python-hardware (Red Hat package) - update to 0.29.0-0.20220216015636.7662a1d.el8
python-openstacksdk (Red Hat package) - update to 0.61.0-0.20220509201549.26c9bc2.el8
containernetworking-plugins (Red Hat package) - update to 1.0.1-5.rhaos4.11.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el8
python-yappi (Red Hat package) - update to 1.0-3.el8
python-editor (Red Hat package) - update to 1.0.4-5.el8
libsodium (Red Hat package) - update to 1.0.16-5.el8
python-flask (Red Hat package) - update to 1.1.1-2.el8
runc (Red Hat package) - update to 1.1.2-1.rhaos4.11.el8
python-dogpile-cache (Red Hat package) - update to 1.1.2-2.el8
slirp4netns (Red Hat package) - update to 1.1.8-1.rhaos4.11.el8
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el8
python-retrying (Red Hat package) - update to 1.2.3-22.el8
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el8
python-vine (Red Hat package) - update to 1.3.0-5.el8
python-pynacl (Red Hat package) - update to 1.3.0-6.el8
python-pecan (Red Hat package) - update to 1.3.2-10.el8
python-warlock (Red Hat package) - update to 1.3.3-2.el8
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20220215231659.d7ac0ff.el8
python-appdirs (Red Hat package) - update to 1.4.0-8.el8
crun (Red Hat package) - update to 1.4.2-1.rhaos4.11.el8
python-alembic (Red Hat package) - update to 1.4.2-6.el8
python-oslo-upgradecheck (Red Hat package) - update to 1.5.0-0.20220509195112.1559e03.el8
skopeo (Red Hat package) - update to 1.5.2-3.rhaos4.11.el8
python-pyperclip (Red Hat package) - update to 1.6.4-7.el8
Netcool Operations Insight - update to 1.6.6
python-os-service-types (Red Hat package) - update to 1.7.0-0.20220215231659.0b2f473.el8
python-importlib-metadata (Red Hat package) - update to 1.7.0-2.el8
delve - update to 1.7.2-1
python-webob (Red Hat package) - update to 1.8.5-5.el8
fuse-overlayfs (Red Hat package) - update to 1.9-1.rhaos4.11.el8
python-pycdlib (Red Hat package) - update to 1.11.0-4.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el8
python-six (Red Hat package) - update to 1.15.0-3.el8
golang - update to 1.15.7-11
golang-help - update to 1.15.7-11
golang-devel - update to 1.15.7-11
go1.16-doc - update to 1.16.14-1.43.1
go1.16-race - update to 1.16.14-1.43.1
go1.16 - update to 1.16.14-1.43.1
golang - addressed in versions 1.16.15-1.38, 1.19.3-2, 1.19.8-1
golang-tests - update to 1.17.7-1
go-toolset - update to 1.17.7-1
golang-src - update to 1.17.7-1
golang - update to 1.17.7-1
golang-misc - update to 1.17.7-1
golang-docs - update to 1.17.7-1
golang-race - update to 1.17.7-1
golang-bin - update to 1.17.7-1
golang - update to 1.17.7-1.el7
go1.17-doc - update to 1.17.7-1.20.1
go1.17-race - update to 1.17.7-1.20.1
go1.17 - update to 1.17.7-1.20.1
containers-common (Red Hat package) - update to 1-21.rhaos4.11.el8
OpenShift Serverless Client - update to 1.22.1
buildah (Red Hat package) - update to 1.23.4-2.el8
cri-tools (Red Hat package) - update to 1.24.2-4.1.el8
NetworkManager (Red Hat package) - update to 1.30.0-16.el8_4
python-memcached (Red Hat package) - update to 1.58-12.el8
python-waitress (Red Hat package) - update to 2.0.0-2.el8
python-paste-deploy (Red Hat package) - update to 2.0.1-5.el8
python-werkzeug (Red Hat package) - update to 2.0.3-1.el8
python-webtest (Red Hat package) - update to 2.0.33-5.el8
python-soupsieve (Red Hat package) - update to 2.1.0-2.el8
conmon (Red Hat package) - update to 2.1.2-2.rhaos4.11.el8
haproxy (Red Hat package) - update to 2.2.24-1.el8
IBM Cloud Pak for Multicloud Management Security Services - update to 2.3 Fix Pack 6
pyparsing (Red Hat package) - update to 2.3.1-2.el8
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el8
python-munch (Red Hat package) - update to 2.3.2-7.el8
python-futurist (Red Hat package) - update to 2.4.1-0.20220509215250.159d752.el8
python-routes (Red Hat package) - update to 2.4.1-12.el8
kata-containers (Red Hat package) - update to 2.4.2-1.el8
python-automaton (Red Hat package) - update to 2.5.0-0.20220509195848.aaca110.el8
python-debtcollector (Red Hat package) - update to 2.5.0-0.20220509211533.a6b46c5.el8
python-osc-lib (Red Hat package) - update to 2.5.0-0.20220509211843.78d276e.el8
python-amqp (Red Hat package) - update to 2.5.2-8.el8
python-oslo-versionedobjects (Red Hat package) - update to 2.6.0-0.20220509202736.25d34d6.el8
python-os-traits (Red Hat package) - update to 2.7.0-0.20220509205801.3d1dbf0.el8
python-kazoo (Red Hat package) - update to 2.7.0-2.el8
python-oslo-service (Red Hat package) - update to 2.8.0-0.20220509203713.6552b9a.el8
python-oslo-cache (Red Hat package) - update to 2.8.1-0.20220216000746.40946a9.el8
python-construct (Red Hat package) - update to 2.10.56-2.el8
python-tooz (Red Hat package) - update to 2.11.1-0.20220509215238.96f91b9.el8
python-proliantutils (Red Hat package) - update to 2.13.2-0.20220509214147.8c7b6b1.el8
ignition (Red Hat package) - update to 2.14.0-3.rhaos4.11.el8
openvswitch2.17 (Red Hat package) - update to 2.17.0-22.el8fdp
container-selinux (Red Hat package) - update to 2.188.0-1.rhaos4.11.el8
python-cachetools (Red Hat package) - update to 3.1.0-3.el8
python-pycadf (Red Hat package) - update to 3.1.1-0.20220215232623.4179996.el8
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20220324125409.db1a824.el8
python-bcrypt (Red Hat package) - update to 3.1.6-3.el8
python-jsonschema (Red Hat package) - update to 3.2.0-6.el8
python-statsd (Red Hat package) - update to 3.2.1-17.el8
python-paste (Red Hat package) - update to 3.2.4-2.el8
IBM Cloud Transformation Advisor - update to 3.3.1
python-redis (Red Hat package) - update to 3.3.8-2.el8
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el8
python-osprofiler (Red Hat package) - update to 3.4.3-0.20220509214403.3286301.el8
python-stevedore (Red Hat package) - update to 3.5.0-0.20220509195112.442f157.el8
python-glanceclient (Red Hat package) - update to 3.6.0-0.20220509212414.626c500.el8
python-cliff (Red Hat package) - update to 3.10.1-0.20220509200732.a04a48f.el8
python-oslo-policy (Red Hat package) - update to 3.12.1-0.20220509221328.9673a74.el8
python-swiftclient (Red Hat package) - update to 3.13.1-0.20220509204112.4989d94.el8
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el8
python-sushy-oem-idrac (Red Hat package) - update to 4.0.0-0.20220324125409.7b75e6e.el8
podman (Red Hat package) - update to 4.0.2-6.rhaos4.11.el8
python-oslo-context (Red Hat package) - update to 4.1.0-0.20220509205437.3400cc2.el8
python-sushy (Red Hat package) - update to 4.1.1-0.20220302175405.c769149.el8
python-oslo-serialization (Red Hat package) - update to 4.3.0-0.20220509195921.6910f75.el8
python-keystoneclient (Red Hat package) - update to 4.4.0-0.20220509200759.100253d.el8
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-decorator (Red Hat package) - update to 4.4.0-6.el8
pysnmp (Red Hat package) - update to 4.4.8-3.el8
python-keystoneauth1 (Red Hat package) - update to 4.5.0-0.20220509213157.8da0a63.el8
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.5.1
python-oslo-middleware (Red Hat package) - update to 4.5.1-0.20220509203328.2f72b30.el8
python-oslo-concurrency (Red Hat package) - update to 4.5.1-0.20220509221157.145f060.el8
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.5.3
python-oslo-log (Red Hat package) - update to 4.6.0-0.20220216002407.41c8807.el8
python-pexpect (Red Hat package) - update to 4.6-3.el8
python-kombu (Red Hat package) - update to 4.6.6-8.el8
Watson CP4D Data Stores - update to 4.7.0
python-beautifulsoup4 (Red Hat package) - update to 4.9.3-2.el8
OpenShift Virtualization - addressed in versions 4.11.0, 4.12.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.11.0
atomic-openshift-service-idler (Red Hat package) - update to 4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
openshift-kuryr (Red Hat package) - update to 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
openshift (Red Hat package) - update to 4.11.0-202207082037.p0.g9546431.assembly.stream.el8
openshift-clients (Red Hat package) - update to 4.11.0-202207291716.p0.g7075089.assembly.stream.el8
python-oslo-utils (Red Hat package) - update to 4.13.0-0.20220509213520.de4429f.el8
python-oslo-i18n (Red Hat package) - update to 5.1.0-0.20220216011159.b031d17.el8
python-ironic-lib (Red Hat package) - update to 5.1.1-0.20220225151335.e205816.el8
rust-afterburn (Red Hat package) - update to 5.3.0-1.rhaos4.11.el8
python-pbr (Red Hat package) - update to 5.5.1-2.el8
python-tenacity (Red Hat package) - update to 6.2.0-2.el8
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20220509204453.1b1b960.el8
python-dracclient (Red Hat package) - update to 8.0.0-0.20220509201613.9c7499c.el8
python-cinderclient (Red Hat package) - update to 8.3.0-0.20220509212734.ee59b68.el8
openstack-ironic-python-agent (Red Hat package) - update to 8.6.1-0.20220623075054.1d50c23.el8
python-oslo-config (Red Hat package) - update to 8.8.0-0.20220509202553.64c82a0.el8
python-oslo-db (Red Hat package) - update to 9.1.0-0.20220216003829.be2cc6a.el8
python-keystonemiddleware (Red Hat package) - update to 9.4.0-0.20220509211054.8a05709.el8
IBM Spectrum Protect Plus - update to 10.1.12
openstack-ironic-inspector (Red Hat package) - update to 10.12.1-0.20220513095437.6dd37e5.el8
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
python-oslo-messaging (Red Hat package) - update to 12.13.0-0.20220509210748.2d090b5.el8
Dell PowerProtect Cyber Recovery - update to 19.14.0.1
openstack-ironic (Red Hat package) - update to 20.2.1-0.20220628175043.b5ed57a.el8
python-packaging (Red Hat package) - update to 20.4-2.el8
python-keyring (Red Hat package) - update to 21.0.0-2.el8
ovn22.03 (Red Hat package) - update to 22.03.0-37.el8fdp
ovn22.06 (Red Hat package) - update to 22.06.0-27.el8fdp

• Exploit #8371 - CVE-2022-23773-repro-target () (September 18, 2022)

• https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
• https://security.netapp.com/advisory/ntap-20220225-0006/

• Multiple vulnerabilities in Go programming language
• Multiple vulnerabilities in OpenShift Serverless Client
• Multiple vulnerabilities in OpenShift Serverless
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.1
• Incorrect authorization in IBM DataPower Gateway
• Incorrect authorization in IBM DataPower Operator
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.1
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring
• Gentoo update for Go
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• OpenShift Container Platform 4.10 update for golang
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Virtualization
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Cloud Pak System
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for Golang Go
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Amazon Linux AMI update for golang
• SUSE update for go1.17
• SUSE update for go1.16
• Multiple vulnerabilities in Service Telemetry Framework
• Multiple vulnerabilities in IBM Cloud Automation Manager
• Incorrect authorization in IBM Cloud Pak for Data Version
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in IBM QRadar Suite software
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Security Services
• openEuler update for golang
• Amazon Linux AMI update for golang
• Amazon Linux AMI update for golang
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11 packages
• Fedora EPEL 7 update for golang
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• Multiple vulnerabilities in IBM Watson Discovery
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Anolis OS update for go-toolset:an8 module