Input validation error in Go programming language - CVE-2022-27664

Vulnerability identifier: #VU67396

CSH Severity: Medium

CVSS v4 BT: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-27664

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Go programming language
Amazon Linux AMI
Oracle Linux
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE CaaS Platform
SUSE Manager Proxy Module
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Manager Client Tools Beta for SLE Micro
SUSE Manager Client Tools for SLE Micro
Fedora
SUSE Linux Enterprise Storage
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Manager Client Tools for RHEL, Liberty and Clones
Oracle Solaris
SUSE Manager Client Tools for SLE
SUSE Manager Client Tools Beta for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server 12 SP4 LTSS
SUSE Linux Enterprise Server 12 SP4 ESPOS
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server 15 SP3 LTSS
Development Tools Module
SUSE Package Hub 15
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Custom Metrics Autoscaler Operator for Red Hat OpenShift
Submariner
Service Binding Operator
Service Telemetry Framework
Consul Enterprise
IBM Spectrum Copy Data Management
Ansible Automation Platform
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Red Hat Migration Toolkit for Applications
IBM Spectrum Protect Plus
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Operations Dashboard
WebSphere Automation
Netcool Operations Insight
IBM MQ Operator
IBM Cloud Pak for Multicloud Management Security Services
IBM Cloud Pak for Multicloud Management Monitoring
IBM Fusion HCI
IBM Decision Optimization for Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
Data Replication on Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Robotic Process Automation
cadvisor
Routing Release
OpenShift Service Mesh
Red Hat OpenShift Serverless
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
Astronomer with IBM
node_exporter
DB2 Data Management Console
Guardium Data Security Center (GDSC)
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Storage Fusion Data Foundation
Db2 Rest
ObjectScale
Dell EMC Streaming Data Platform
containerd
IBM Cloud Pak for Watson AIOps
DB2 Warehouse on Cloud Pak for Data
DB2 Data Management Console on CPD
Storage Ceph
IBM Sterling Order Management
IBM Netezza for Cloud Pak for Data
EMC Cloud Tiering Appliance
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
IBM Cloud Pak for Multicloud Management
IBM Edge Application Manager
Red Hat OpenShift Container Platform
Dell EMC Container Storage Modules
OpenShift Serverless Client
QRadar Suite
Splunk Enterprise
IBM Cloud Pak System
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
golang-1.16-src (Ubuntu package)
golang-1.13 (Ubuntu package)
golang-1.13-go (Ubuntu package)
golang-1.13-src (Ubuntu package)
golang-1.16 (Ubuntu package)
golang-1.16-go (Ubuntu package)
golang-golang-x-net-dev (Ubuntu package)
golang-golang-x-net (Ubuntu package)
crun-wasm (Red Hat package)
toolbox (Red Hat package)
firewalld-prometheus-config
dracut-saltboot
kiwi-desc-saltboot
golang-github-QubitProducts-exporter_exporter
wire-debuginfo
wire
adsys (Ubuntu package)
prometheus-postgres_exporter
wasmedge (Red Hat package)
golang-github-prometheus-promu
golang-github-prometheus-promu (Red Hat package)
butane (Red Hat package)
coreos-installer (Red Hat package)
prometheus-blackbox_exporter
prometheus-blackbox_exporter-debuginfo
golang-github-prometheus-alertmanager
system-user-prometheus
system-user-grafana
golang-github-lusitaniae-apache_exporter
golang-github-lusitaniae-apache_exporter-debuginfo
containernetworking-plugins (Red Hat package)
zypp-plugin-spacewalk
python2-zypp-plugin-spacewalk
python3-zypp-plugin-spacewalk
runc (Red Hat package)
supportutils-plugin-salt
golang-github-prometheus-node_exporter-debugsource
golang-github-prometheus-node_exporter
golang-github-prometheus-node_exporter-debuginfo
openshift-serverless-clients (Red Hat package)
golang-github-boynux-squid_exporter
golang-github-boynux-squid_exporter-debuginfo
google-benchmark (Red Hat package)
crun (Red Hat package)
skopeo (Red Hat package)
spdlog (Red Hat package)
gtest (Red Hat package)
golang
golang-devel
golang-help
golang-1.18-src (Ubuntu package)
golang-1.18-go (Ubuntu package)
golang-1.18 (Ubuntu package)
dev-lang/go
go1.18
go1.18-doc
go1.18-race
go1.18-openssl-race
go1.18-openssl-doc
go1.18-openssl
go1.19
go1.19-doc
go1.19-race
buildah (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
containers-common (Red Hat package)
conmon (Red Hat package)
nmstate (Red Hat package)
python2-hwdata
python3-hwdata
haproxy (Red Hat package)
ansible
ansible-doc
git-lfs (Red Hat package)
git-lfs
ignition (Red Hat package)
golang-github-prometheus-prometheus
container-selinux (Red Hat package)
kata-containers (Red Hat package)
grafana-pcp (Red Hat package)
grafana-pcp
amazon-ssm-agent
catch (Red Hat package)
etcd (Red Hat package)
python-sushy (Red Hat package)
podman (Red Hat package)
mgr-daemon
python2-uyuni-common-libs
python3-uyuni-common-libs
spacecmd
openshift (Red Hat package)
openshift-clients (Red Hat package)
openshift-ansible (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-kuryr (Red Hat package)
kubevirt (Red Hat package)
kernel-rt (Red Hat package)
kernel (Red Hat package)
python2-mgr-push
mgr-push
supportutils-plugin-susemanager-client
python2-rhnlib
uyuni-proxy-systemd-services
python3-mgr-push
python3-rhnlib
spacewalk-client-setup
python3-spacewalk-check
python3-spacewalk-client-setup
python3-spacewalk-client-tools
spacewalk-client-tools
spacewalk-check
python-ironic-lib (Red Hat package)
rust-afterburn (Red Hat package)
python3-pyvmomi
grafana (Red Hat package)
grafana
fmt (Red Hat package)
grafana-debuginfo
libisc1606
libns1604
libisc1606-64bit
libisccfg1600-64bit
libirs1601-64bit
libbind9-1600-64bit
libdns1605-64bit
python3-bind
bind
libisccc1600
libbind9-1600
libisccfg1600
bind-utils
bind-debuginfo
bind-utils-debuginfo
libisccc1600-64bit
bind-devel
libisc1606-debuginfo
libbind9-1600-debuginfo
libns1604-debuginfo
libdns1605-debuginfo
libirs1601-debuginfo
bind-doc
libisccc1600-debuginfo
libisccfg1600-debuginfo
libirs-devel
bind-chrootenv
bind-debugsource
libirs1601
libisccc1600-32bit
libirs1601-32bit
libisc1606-32bit-debuginfo
libbind9-1600-32bit-debuginfo
libisc1606-32bit
libisccfg1600-32bit-debuginfo
libdns1605
libbind9-1600-32bit
libisccfg1600-32bit
libdns1605-32bit
libns1604-32bit-debuginfo
libirs1601-32bit-debuginfo
libns1604-32bit
libdns1605-32bit-debuginfo
libisccc1600-32bit-debuginfo
bind-devel-32bit
python-oslo-messaging (Red Hat package)
ovn23.09 (Red Hat package)
weldr-client (Red Hat package)
cockpit-composer
cockpit-composer (Red Hat package)
osbuild-composer (Red Hat package)
osbuild-composer-worker
osbuild-composer-core
osbuild-composer
osbuild (Red Hat package)
python3-osbuild
osbuild-selinux
osbuild-ostree
osbuild
Grafana
Event Streams
Cloud Pak for Security (CP4S)
Cloud Pak for Data
watsonx.data
IBM DB2
Red Hat Ceph Storage
AMQ Broker
Spectrum Protect Server
IBM CICS TX Standard

Install updates from vendor's website.

Go programming language - addressed in versions 1.18.6, 1.19.1
Submariner - update to 0.14.0
Service Binding Operator - update to 1.4.0
cadvisor - update to 0.48.0
Routing Release - update to 0.239.0
Astronomer with IBM - update to 1.0.1
node_exporter - update to 1.4.1
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.1.1
OpenShift API for Data Protection (OADP) - update to 1.1.1
Migration Toolkit for Containers - addressed in versions 1.7.6, 1.7.7, 1.7.8
QRadar Suite - update to 1.10.18.0
Consul Enterprise - addressed in versions 1.13.8, 1.14.7, 1.15.3
OpenShift Service Mesh - addressed in versions 2.2.7, 2.3.1, 2.4.0
IBM Spectrum Copy Data Management - update to 2.2.18
IBM Cloud Pak for Multicloud Management - update to 2.3.8
IBM Cloud Pak System - update to 2.3.3.6
DB2 Data Management Console - update to 3.1.13.1
Guardium Data Security Center (GDSC) - update to 3.7.2
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.3
Storage Fusion Data Foundation - update to 4.13
Red Hat OpenShift Container Platform - addressed in versions 4.11.16, 4.11.17, 4.11.26, 4.11.44, 4.12.0, 4.12.22, 4.12.30, 4.13.10, 4.14.0
OpenShift Logging - addressed in versions 5.5.5, 5.6.0
Red Hat Migration Toolkit for Applications - update to 6.1.0
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
Grafana - update to 9.2.0
Event Streams - update to 11.1.1
IBM Spectrum Protect Plus - update to 10.1.13
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes - update to 10.1.12.2
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift - update to 10.1.12.2
Operations Dashboard - addressed in versions 2020.4.1-14, 2022.2.1-3
golang-1.16-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.16.2-0ubuntu1~20.04.1
golang-1.13 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.13.8-1ubuntu1.2, 1.13.8-1ubuntu2.22.04.2
golang-1.13-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.13.8-1ubuntu1.2, 1.13.8-1ubuntu2.22.04.2
golang-1.13-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.13.8-1ubuntu1.2, 1.13.8-1ubuntu2.22.04.2
golang-1.16 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.16.2-0ubuntu1~20.04.1
golang-1.16-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.16.2-0ubuntu1~20.04.1
golang-golang-x-net-dev (Ubuntu package) - addressed in versions 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2, 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2, 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
golang-golang-x-net (Ubuntu package) - addressed in versions 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2, 1:0.21.0+dfsg-1ubuntu0.1~esm2
crun-wasm (Red Hat package) - addressed in versions 0.0-3.rhaos4.14.el8, 1.8.5-3.rhaos4.14.el9
toolbox (Red Hat package) - addressed in versions 0.0.99.3-9.el9, 0.1.2-1.rhaos4.14.el9
firewalld-prometheus-config - update to 0.1-159000.6.33.1
dracut-saltboot - addressed in versions 0.1.1681904360.84ef141-150000.1.50.1, 0.1.1681904360.84ef141-159000.3.30.1
kiwi-desc-saltboot - update to 0.1.1687520761.cefb248-4.15.2
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-4.6.2, 0.4.0-159000.4.6.1
wire-debuginfo - update to 0.5.0-150000.1.12.3
wire - update to 0.5.0-150000.1.12.3
adsys (Ubuntu package) - addressed in versions 0.9.2~20.04.2ubuntu0.1+esm1, 2.0.11-0ubuntu1~16.04.4+esm2, 2.3.7-0ubuntu0.16.04.1+esm2, 3.0.3-0ubuntu1~18.04.2+esm2
prometheus-postgres_exporter - addressed in versions 0.10.1-1.6.2, 0.10.1-1.11.5, 0.10.1-3.6.4, 0.10.1-159000.3.6.1
wasmedge (Red Hat package) - update to 0.12.1-2.rhaos4.14.el9
golang-github-prometheus-promu - addressed in versions 0.14.0-1.12.1, 0.14.0-4.12.2
golang-github-prometheus-promu (Red Hat package) - update to 0.15.0-15.1.gitd5383c5.el8
butane (Red Hat package) - addressed in versions 0.16.0-1.el9, 0.19.0-1.1.rhaos4.14.el8
coreos-installer (Red Hat package) - addressed in versions 0.17.0-1.rhaos4.14.el8, 0.17.0-1.rhaos4.14.el9
prometheus-blackbox_exporter - addressed in versions 0.19.0-1.17.1, 0.24.0-3.6.3, 0.24.0-159000.3.6.1
prometheus-blackbox_exporter-debuginfo - addressed in versions 0.19.0-1.17.1, 0.24.0-3.6.3
golang-github-prometheus-alertmanager - addressed in versions 0.23.0-1.18.3, 0.23.0-150100.4.13.2, 0.26.0-4.12.4
system-user-prometheus - update to 1.0.0-3.7.2
system-user-grafana - update to 1.0.0-3.7.2
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.0-4.12.4, 1.0.0-159000.4.12.1
Db2 Rest - update to 1.0.0.258
golang-github-lusitaniae-apache_exporter-debuginfo - update to 1.0.0-159000.4.12.1
containernetworking-plugins (Red Hat package) - addressed in versions 1.0.1-7.rhaos4.12.el8, 1.0.1-11.1.rhaos4.14.el8
zypp-plugin-spacewalk - addressed in versions 1.0.14-30.42.1, 1.0.14-150000.3.35.1
python2-zypp-plugin-spacewalk - update to 1.0.14-30.42.1
python3-zypp-plugin-spacewalk - update to 1.0.14-150000.3.35.1
runc (Red Hat package) - addressed in versions 1.1.6-4.rhaos4.12.el8, 1.1.9-2.1.rhaos4.14.el8, 1.1.9-2.1.rhaos4.14.el9
supportutils-plugin-salt - addressed in versions 1.2.2-9.9.2, 1.2.2-159000.5.9.1
ObjectScale - update to 1.4.0
Dell EMC Container Storage Modules - update to 1.5.0
golang-github-prometheus-node_exporter-debugsource - update to 1.5.0-1.6.1
golang-github-prometheus-node_exporter - addressed in versions 1.5.0-1.6.1, 1.5.0-1.24.4, 1.5.0-4.15.4, 1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter-debuginfo - update to 1.5.0-1.6.1
WebSphere Automation - update to 1.5.2
openshift-serverless-clients (Red Hat package) - update to 1.6.1-1.el8
golang-github-boynux-squid_exporter - addressed in versions 1.6-4.9.2, 1.6-159000.4.9.1
Netcool Operations Insight - update to 1.6.9
golang-github-boynux-squid_exporter-debuginfo - update to 1.6-159000.4.9.1
Dell EMC Streaming Data Platform - update to 1.7.0
containerd - update to 1.7.0
google-benchmark (Red Hat package) - update to 1.8.2-1.el9
crun (Red Hat package) - addressed in versions 1.9.2-1.rhaos4.14.el8, 1.9.2-1.rhaos4.14.el9
skopeo (Red Hat package) - addressed in versions 1.9.4-3.rhaos4.12.el9, 1.9.4-3.1.rhaos4.12.el8, 1.11.2-10.1.rhaos4.14.el8, 1.11.2-10.1.rhaos4.14.el9
Cloud Pak for Security (CP4S) - update to 1.10.10.0
spdlog (Red Hat package) - update to 1.12.0-1.rhaos4.14.el9
gtest (Red Hat package) - update to 1.13.0-1.el9
golang - update to 1.15.7-19
golang-devel - update to 1.15.7-19
golang-help - update to 1.15.7-19
golang-1.18-src (Ubuntu package) - addressed in versions 1.18.1-1ubuntu1.1, 1.18.1-1ubuntu1~18.04.4, 1.18.1-1ubuntu1~20.04.2
golang-1.18-go (Ubuntu package) - addressed in versions 1.18.1-1ubuntu1.1, 1.18.1-1ubuntu1~18.04.4, 1.18.1-1ubuntu1~20.04.2
golang-1.18 (Ubuntu package) - addressed in versions 1.18.1-1ubuntu1.1, 1.18.1-1ubuntu1~18.04.4, 1.18.1-1ubuntu1~20.04.2
dev-lang/go - update to 1.18.6
golang - addressed in versions 1.18.6-1.fc36, 1.18.9-1.el7, 1.19.1-1.fc37
go1.18 - update to 1.18.6-150000.1.31.1
go1.18-doc - update to 1.18.6-150000.1.31.1
go1.18-race - update to 1.18.6-150000.1.31.1
go1.18-openssl-race - update to 1.18.10.1-150000.1.9.1
go1.18-openssl-doc - update to 1.18.10.1-150000.1.9.1
go1.18-openssl - update to 1.18.10.1-150000.1.9.1
go1.19 - update to 1.19.1-150000.1.9.1
go1.19-doc - update to 1.19.1-150000.1.9.1
go1.19-race - update to 1.19.1-150000.1.9.1
golang - update to 1.19.3-2
buildah (Red Hat package) - addressed in versions 1.23.4-5.rhaos4.12.el9, 1.23.4-5.1.rhaos4.12.el8, 1.29.1-10.1.rhaos4.14.el8, 1.29.1-10.1.rhaos4.14.el9
cri-tools (Red Hat package) - addressed in versions 1.24.2-7.el8, 1.27.0-2.1.el8, 1.27.0-2.1.el9
cri-o (Red Hat package) - addressed in versions 1.24.3-6.rhaos4.11.gitc4567c0.el8, 1.24.4-5.rhaos4.11.git57d7127.el8, 1.25.4-4.rhaos4.12.gitb9319a2.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el8, 1.27.1-8.1.rhaos4.14.git3fecb83.el9
Red Hat OpenShift Serverless - update to 1.27.0
OpenShift Serverless Client - update to 1.27.0
containers-common (Red Hat package) - update to 1-51.rhaos4.14.el8
watsonx.data - update to 2.0.1
IBM MQ Operator - addressed in versions 2.0.13, 2.4.1
conmon (Red Hat package) - addressed in versions 2.1.2-4.rhaos4.12.el8, 2.1.2-5.rhaos4.12.el9, 2.1.7-3.1.rhaos4.14.el8, 2.1.7-3.1.rhaos4.14.el9
nmstate (Red Hat package) - update to 2.2.12-1.rhaos4.14.el8
IBM Cloud Pak for Multicloud Management Security Services - update to 2.3 Fix Pack 6
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 7
python2-hwdata - update to 2.3.5-15.12.2
python3-hwdata - update to 2.3.5-159000.5.13.1
haproxy (Red Hat package) - update to 2.6.13-1.rhaos4.14.el8
IBM Fusion HCI - update to 2.7.0
ansible - update to 2.9.27-159000.3.9.1
ansible-doc - update to 2.9.27-159000.3.9.1
git-lfs (Red Hat package) - addressed in versions 2.13.3-3.el8_6, 3.2.0-1.el9
git-lfs - update to 2.13.3-3.0.1
ignition (Red Hat package) - addressed in versions 2.14.0-5.rhaos4.11.el8, 2.16.2-1.1.rhaos4.14.el9
golang-github-prometheus-prometheus - addressed in versions 2.37.6-1.44.3, 2.45.0-4.33.3, 2.45.0-159000.6.33.1
container-selinux (Red Hat package) - addressed in versions 2.221.0-1.rhaos4.13.el8, 2.221.0-1.rhaos4.13.el9, 2.221.0-1.rhaos4.14.el8, 2.221.0-2.rhaos4.14.el9
kata-containers (Red Hat package) - update to 3.1.3-4.rhaos4.14.el9
grafana-pcp (Red Hat package) - addressed in versions 3.2.0-3.el8, 5.1.1-1.el9
grafana-pcp - update to 3.2.0-3.0.1
amazon-ssm-agent - update to 3.2.1377.0-1
catch (Red Hat package) - update to 3.3.2-1.el9
etcd (Red Hat package) - update to 3.3.23-12.el8ost
python-sushy (Red Hat package) - update to 4.1.3-0.20221107175431.1da4385.el8
podman (Red Hat package) - addressed in versions 4.2.0-6.1.rhaos4.12.el8, 4.2.0-7.rhaos4.12.el9, 4.4.1-10.1.rhaos4.14.el8, 4.4.1-10.1.rhaos4.14.el9
mgr-daemon - addressed in versions 4.3.7-1.41.1, 4.3.7-150000.1.41.1
python2-uyuni-common-libs - addressed in versions 4.3.8-1.33.1, 5.0.1-3.33.3
python3-uyuni-common-libs - addressed in versions 4.3.8-150000.1.33.1, 5.0.1-159000.3.33.1
spacecmd - addressed in versions 4.3.21-38.121.1, 4.3.21-150000.3.98.1, 5.0.1-41.42.3, 5.0.1-159000.6.42.1
IBM Cloud Pak for Watson AIOps - update to 4.4.0
IBM DB2 - update to 4.6
DB2 Warehouse on Cloud Pak for Data - update to 4.6
IBM Decision Optimization for Cloud Pak for Data - update to 4.6.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.3
Data Replication on Cloud Pak for Data - update to 4.6.5
Cloud Pak for Data - update to 4.8.5
openshift (Red Hat package) - addressed in versions 4.11.0-202211091106.p0.g5658434.assembly.stream.el8, 4.11.0-202301232245.p0.g263df15.assembly.stream.el8, 4.12.0-202306121916.p0.g8c21020.assembly.stream.el8, 4.12.0-202306121916.p0.g8c21020.assembly.stream.el9, 4.13.0-202308112024.p0.g0ef5eae.assembly.stream.el8, 4.13.0-202308112024.p0.g0ef5eae.assembly.stream.el9, 4.14.0-202310210404.p0.gf67aeb3.assembly.stream.el8, 4.14.0-202310210404.p0.gf67aeb3.assembly.stream.el9
openshift-clients (Red Hat package) - addressed in versions 4.12.0-202306090942.p0.g3c01edd.assembly.stream.el8, 4.12.0-202306090942.p0.g3c01edd.assembly.stream.el9, 4.12.0-202308151125.p0.gf61957e.assembly.stream.el8, 4.12.0-202308151125.p0.gf61957e.assembly.stream.el9, 4.13.0-202308112024.p0.g17b7acc.assembly.stream.el8, 4.13.0-202308112024.p0.g17b7acc.assembly.stream.el9, 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8, 4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el9
openshift-ansible (Red Hat package) - addressed in versions 4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8, 4.14.0-202310062327.p0.gf781421.assembly.stream.el8, 4.14.0-202310062327.p0.gf781421.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - addressed in versions 4.12.0-202306090942.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202309272140.p0.gd2acdd5.assembly.stream.el8
openshift-kuryr (Red Hat package) - addressed in versions 4.12.0-202306140156.p0.g31dd228.assembly.stream.el8, 4.14.0-202309272140.p0.g8926a29.assembly.stream.el8
OpenShift Virtualization - update to 4.13.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
kubevirt (Red Hat package) - addressed in versions 4.13.0-1469.el7, 4.13.0-1469.el8, 4.13.0-1469.el9
kernel-rt (Red Hat package) - addressed in versions 4.18.0-372.41.1.rt7.198.el8_6, 4.18.0-372.59.1.rt7.217.el8_6, 5.14.0-284.28.1.rt14.313.el9_2, 5.14.0-284.36.1.rt14.321.el9_2
kernel (Red Hat package) - addressed in versions 4.18.0-372.59.1.el8_6, 5.14.0-284.28.1.el9_2, 5.14.0-284.36.1.el9_2
python2-mgr-push - update to 5.0.1-4.21.4
mgr-push - addressed in versions 5.0.1-4.21.4, 5.0.1-159000.4.21.1
supportutils-plugin-susemanager-client - addressed in versions 5.0.1-9.15.2, 5.0.1-159000.6.15.1
python2-rhnlib - update to 5.0.1-24.30.3
uyuni-proxy-systemd-services - update to 5.0.1-159000.3.9.1
python3-mgr-push - update to 5.0.1-159000.4.21.1
python3-rhnlib - update to 5.0.1-159000.6.30.1
spacewalk-client-setup - update to 5.0.1-159000.6.48.1
python3-spacewalk-check - update to 5.0.1-159000.6.48.1
python3-spacewalk-client-setup - update to 5.0.1-159000.6.48.1
python3-spacewalk-client-tools - update to 5.0.1-159000.6.48.1
spacewalk-client-tools - update to 5.0.1-159000.6.48.1
spacewalk-check - update to 5.0.1-159000.6.48.1
App Connect Enterprise Certified Container - addressed in versions 5.0.3, 7.0.0
DB2 Data Management Console on CPD - update to 5.1.2
python-ironic-lib (Red Hat package) - update to 5.4.1-0.20230410165532.b393f4c.el9
rust-afterburn (Red Hat package) - update to 5.4.3-1.rhaos4.14.el9
Storage Ceph - update to 6.1
Red Hat Ceph Storage - update to 6.1
python3-pyvmomi - update to 6.7.3-159000.3.6.1
grafana (Red Hat package) - addressed in versions 7.5.15-4.el8, 9.0.9-2.el9
grafana - update to 7.5.15-4.0.2
AMQ Broker - update to 7.12.0
Spectrum Protect Server - update to 8.1.17
fmt (Red Hat package) - update to 9.1.0-1.el9
grafana - addressed in versions 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1
grafana-debuginfo - addressed in versions 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.8-159000.4.24.1
libisc1606 - update to 9.16.6-150000.12.65.1
libns1604 - update to 9.16.6-150000.12.65.1
libisc1606-64bit - update to 9.16.6-150000.12.65.1
libisccfg1600-64bit - update to 9.16.6-150000.12.65.1
libirs1601-64bit - update to 9.16.6-150000.12.65.1
libbind9-1600-64bit - update to 9.16.6-150000.12.65.1
libdns1605-64bit - update to 9.16.6-150000.12.65.1
python3-bind - update to 9.16.6-150000.12.65.1
bind - update to 9.16.6-150000.12.65.1
libisccc1600 - update to 9.16.6-150000.12.65.1
libbind9-1600 - update to 9.16.6-150000.12.65.1
libisccfg1600 - update to 9.16.6-150000.12.65.1
bind-utils - update to 9.16.6-150000.12.65.1
bind-debuginfo - update to 9.16.6-150000.12.65.1
bind-utils-debuginfo - update to 9.16.6-150000.12.65.1
libisccc1600-64bit - update to 9.16.6-150000.12.65.1
bind-devel - update to 9.16.6-150000.12.65.1
libisc1606-debuginfo - update to 9.16.6-150000.12.65.1
libbind9-1600-debuginfo - update to 9.16.6-150000.12.65.1
libns1604-debuginfo - update to 9.16.6-150000.12.65.1
libdns1605-debuginfo - update to 9.16.6-150000.12.65.1
libirs1601-debuginfo - update to 9.16.6-150000.12.65.1
bind-doc - update to 9.16.6-150000.12.65.1
libisccc1600-debuginfo - update to 9.16.6-150000.12.65.1
libisccfg1600-debuginfo - update to 9.16.6-150000.12.65.1
libirs-devel - update to 9.16.6-150000.12.65.1
bind-chrootenv - update to 9.16.6-150000.12.65.1
bind-debugsource - update to 9.16.6-150000.12.65.1
libirs1601 - update to 9.16.6-150000.12.65.1
libisccc1600-32bit - update to 9.16.6-150000.12.65.1
libirs1601-32bit - update to 9.16.6-150000.12.65.1
libisc1606-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libbind9-1600-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libisc1606-32bit - update to 9.16.6-150000.12.65.1
libisccfg1600-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libdns1605 - update to 9.16.6-150000.12.65.1
libbind9-1600-32bit - update to 9.16.6-150000.12.65.1
libisccfg1600-32bit - update to 9.16.6-150000.12.65.1
libdns1605-32bit - update to 9.16.6-150000.12.65.1
libns1604-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libirs1601-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libns1604-32bit - update to 9.16.6-150000.12.65.1
libdns1605-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libisccc1600-32bit-debuginfo - update to 9.16.6-150000.12.65.1
bind-devel-32bit - update to 9.16.6-150000.12.65.1
IBM Sterling Order Management - update to 10.0.0.29
IBM CICS TX Standard - update to 11.1.0.0 ifix6
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
EMC Cloud Tiering Appliance - update to 13.2.0.2.24
python-oslo-messaging (Red Hat package) - update to 14.1.0-0.20230308164807.9f710ce.el9
Dell PowerProtect Cyber Recovery - update to 19.14.0.2
IBM Robotic Process Automation - update to 21.0.6
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.3
ovn23.09 (Red Hat package) - update to 23.09.0-37.el9fdp
weldr-client (Red Hat package) - addressed in versions 35.9-1.el9, 35.9-2.el8
cockpit-composer - update to 45-1
cockpit-composer (Red Hat package) - addressed in versions 45-1.el8_8, 45-1.el9_2
osbuild-composer (Red Hat package) - addressed in versions 75-1.el8, 76-2.el9_2
osbuild-composer-worker - update to 76-2.0.1
osbuild-composer-core - update to 76-2.0.1
osbuild-composer - update to 76-2.0.1
osbuild (Red Hat package) - addressed in versions 81-1.el8, 81-1.el9
python3-osbuild - update to 81-1.0.1
osbuild-selinux - update to 81-1.0.1
osbuild-ostree - update to 81-1.0.1
osbuild - update to 81-1.0.1

• https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
• https://groups.google.com/g/golang-announce
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/

• Multiple vulnerabilities in Go
• Denial of service in routing-release
• SUSE update for go1.18
• SUSE update for go1.19
• Gentoo update for Go
• Grafana update for Go
• Multiple vulnerabilities in Operations Dashboard
• Red Hat Enterprise Linux 8 update for git-lfs
• Multiple vulnerabilities in IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in node_exporter
• Multiple vulnerabilities in OpenShift Logging 5.5
• Input validation error in IBM Event Streams
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in IBM Spectrum Protect Server
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Input validation error in Dell Container Storage Modules
• Input validation error in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in OpenShift Container Platform 4.12
• Input validation error in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Input validation error in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Submariner
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• OpenShift Container Platform 4.11 update for Golang
• Multiple vulnerabilities in OpenShift Serverless
• Multiple vulnerabilities in OpenShift Serverless Client
• Multiple vulnerabilities in IBM Decision Optimization in IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in Custom Metrics Autoscaler Operator for Red Hat OpenShift
• Multiple vulnerabilities in containerd
• Red Hat OpenStack Platform update for etcd
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Service Telemetry Framework
• Multiple vulnerabilities in IBM WebSphere Automation
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in IBM Cloud Pak System
• Input validation error in IBM Sterling Order Management
• Multiple vulnerabilities in IBM Db2 REST
• Ubuntu update for golang-1.18
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications
• Red Hat Enterprise Linux 9 update for git-lfs
• Red Hat Enterprise Linux 9 update for toolbox
• Red Hat Enterprise Linux 9 update for butane
• Red Hat Enterprise Linux 9 update for grafana-pcp
• Red Hat Enterprise Linux 9 update for grafana
• Red Hat Enterprise Linux 9 update for Image Builder
• Multiple vulnerabilities in OpenShift Container Platform 4.12
• SUSE update for Prometheus Golang clients
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• IBM Edge Application Manager update for Go
• Red Hat Enterprise Linux 8 update for grafana-pcp
• Red Hat Enterprise Linux 8 update for grafana
• Red Hat Enterprise Linux 8 update for golang
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 8 update for the container-tools:4.0 module
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in OpenShift Virtualization 4.13 images
• Multiple vulnerabilities in OpenShift Virtualization 4.13 RPMs
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift
• SUSE update for go1.18-openssl
• Multiple vulnerabilities in HashiCorp consul
• Multiple vulnerabilities in Red Hat Ceph Storage
• Multiple vulnerabiltiies in Red Hat OpenShift Service Mesh Containers 2.4
• Multiple vulnerabiltiies in Red Hat OpenShift Service Mesh Containers 2.2
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• OpenShift Container Platform 4.12 update for golang
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Dell Streaming Data Platform
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Fedora EPEL 7 update for golang
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• OpenShift Container Platform 4.12 update for golang
• Multiple vulnerabilities in Service Binding Operator
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• OpenShift Container Platform 4.13 update for golang
• Splunk Enterprise update for third-party packages
• Amazon Linux AMI update for amazon-ssm-agent
• Denial of service in cadvisor
• Multiple vulnerabilities in IBM Ceph Storage
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring
• Multiple vulnerabilities in OpenShift Container Platform 4.14
• IBM Data Replication on Cloud Pak for Data update for Go
• Multiple vulnerabilities in IBM Storage Fusion
• Ubuntu update for golang-1.13
• SUSE update for Security Beta update for SUSE Manager Client Tools and Salt
• SUSE update for Security Beta update for SUSE Manager Client Tools
• Multiple vulnerabilities in IBM QRadar Suite Software
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Security Services
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• openEuler update for golang
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4 for RHEL 9
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in AMQ Broker 7.12
• Amazon Linux AMI update for golang
• Multiple vulnerabilities in Dell ObjectScale
• Input validation error in IBM Cloud Pak for Data
• Input validation error in IBM watsonx.data
• Fedora 37 update for golang
• Fedora 36 update for golang
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• Amazon Linux AMI update for amazon-ssm-agent
• Anolis OS update for grafana
• Anolis OS update for grafana-pcp
• Anolis OS update for multiple packages
• Anolis OS update for git-lfs
• Multiple vulnerabilities in IBM Storage Fusion Data Foundation
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM DB2 Data Management Console
• Multiple vulnerabilities in IBM Astronomer with IBM
• Multiple vulnerabilities in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
• Ubuntu update for golang-golang-x-net
• Ubuntu update for golang-golang-x-net-dev
• Ubuntu update for adsys