Resource exhaustion in Go Text - CVE-2022-32149

Vulnerability identifier: #VU68897

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-32149

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to ParseAcceptLanguage does not properly control consumption of internal resources. A remote attacker can send a specially crafted Accept-Language header that will take a significant time to parse and perform a denial of service (DoS) attack.

Go Text
client_golang
Custom Metrics Autoscaler Operator for Red Hat OpenShift
Service Binding Operator
IBM Security Verify Bridge
IBM Spectrum Copy Data Management
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift
Automation Assets in IBM Cloud Pak for Integration (CP4I)
Netcool Operations Insight
IBM MQ Operator
IBM Fusion HCI
IBM Cloud Transformation Advisor
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Decision Optimization for Cloud Pak for Data
IBM Cloud Pak for Data Scheduling
Data Replication on Cloud Pak for Data
IBM Cloud Pak for Business Automation
Operations Dashboard
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE CaaS Platform
SUSE Manager Proxy Module
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Server Module
SUSE Manager Client Tools for SLE Micro
SUSE Manager Client Tools Beta for SLE Micro
SUSE Linux Enterprise Micro
Fedora
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Manager Client Tools for SLE
SUSE Manager Client Tools Beta for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
Astronomer with IBM
DB2 Data Management Console
Planning Analytics Cartridge for Cloud Pak for Data
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
Db2 Rest
ObjectScale
Dell EMC Streaming Data Platform
IBM Planning Analytics Workspace
Cloud Pak for Network Automation
IBM Cloud Pak for Watson AIOps
DB2 on Cloud Pak for Data
DB2 Warehouse on Cloud Pak for Data
DB2 Data Management Console on CPD
IBM supplied MQ Advanced container images
IBM Sterling Order Management
IBM Netezza for Cloud Pak for Data
EMC Cloud Tiering Appliance
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Dell EMC Container Storage Modules
Jaeger
Cloud Pak for Security (CP4S)
Cloud Pak for Data
Splunk Enterprise
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
golang-x-text-dev (Ubuntu package)
golang-golang-x-text-dev (Ubuntu package)
scap-security-guide-redhat
firewalld-prometheus-config
dracut-saltboot
kiwi-desc-saltboot
golang-github-QubitProducts-exporter_exporter-debugsource
golang-github-QubitProducts-exporter_exporter
golang-github-QubitProducts-exporter_exporter-debuginfo
wire-debuginfo
wire
prometheus-postgres_exporter
golang-github-prometheus-promu
golang-github-prometheus-alertmanager
prometheus-blackbox_exporter-debuginfo
prometheus-blackbox_exporter
golang-github-lusitaniae-apache_exporter
golang-github-lusitaniae-apache_exporter-debugsource
system-user-grafana
system-user-prometheus
golang-github-lusitaniae-apache_exporter-debuginfo
containernetworking-plugins (Red Hat package)
zypp-plugin-spacewalk
python2-zypp-plugin-spacewalk
python3-zypp-plugin-spacewalk
runc (Red Hat package)
supportutils-plugin-salt
golang-github-prometheus-node_exporter-debuginfo
golang-github-prometheus-node_exporter
golang-github-prometheus-node_exporter-debugsource
golang-github-boynux-squid_exporter
golang-github-boynux-squid_exporter-debuginfo
skopeo (Red Hat package)
golang
buildah (Red Hat package)
conmon (Red Hat package)
python2-hwdata
python3-hwdata
ansible-doc
ansible
golang-github-prometheus-prometheus
podman-help
podman-remote
podman-debuginfo
podman
podman-docker
podman-gvproxy
podman-plugins
podman-debugsource
podman (Red Hat package)
supportutils-plugin-susemanager-client
mgr-daemon
python2-uyuni-common-libs
python3-uyuni-common-libs
spacecmd
openshift-clients (Red Hat package)
openshift-ansible (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift (Red Hat package)
openshift-kuryr (Red Hat package)
kubevirt (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
mgr-push
python2-mgr-push
python2-rhnlib
uyuni-proxy-systemd-services
python3-mgr-push
python3-rhnlib
python3-spacewalk-check
spacewalk-client-setup
spacewalk-check
python3-spacewalk-client-setup
python3-spacewalk-client-tools
spacewalk-client-tools
python3-pyvmomi
grafana
grafana-debuginfo
libdns1605
libisccfg1600
libbind9-1600
libisc1606
libirs1601
bind-doc
libisccc1600-debuginfo
libisccfg1600-debuginfo
libirs-devel
bind-chrootenv
bind-debugsource
bind-utils
bind-debuginfo
python3-bind
libisccc1600-64bit
libdns1605-64bit
libbind9-1600-64bit
libirs1601-64bit
libisccfg1600-64bit
libisc1606-64bit
libns1604
libirs1601-debuginfo
bind-utils-debuginfo
bind
bind-devel
libisc1606-debuginfo
libbind9-1600-debuginfo
libns1604-debuginfo
libdns1605-debuginfo
libirs1601-32bit-debuginfo
libirs1601-32bit
libisc1606-32bit-debuginfo
libbind9-1600-32bit-debuginfo
libisc1606-32bit
libisccc1600-32bit
libbind9-1600-32bit
libisccfg1600-32bit
libdns1605-32bit
libns1604-32bit-debuginfo
libns1604-32bit
libisccfg1600-32bit-debuginfo
libisccc1600
libdns1605-32bit-debuginfo
libisccc1600-32bit-debuginfo
bind-devel-32bit
Grafana
watsonx.data
OpenShift Virtualization
IBM CICS TX Standard
IBM CICS TX Advanced

Install updates from vendor's website.

Go Text - update to 0.3.8
Service Binding Operator - addressed in versions 1.3.1, 1.4.0
client_golang - update to 1.15.0
Astronomer with IBM - update to 1.0.1
OpenShift API for Data Protection (OADP) - update to 1.0.7
IBM Security Verify Bridge - addressed in versions 1.0.13, 1.0.13.0
Migration Toolkit for Containers - update to 1.7.7
Jaeger - update to 1.39.0
IBM Spectrum Copy Data Management - update to 2.2.18
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.5.6, 2.6.4
DB2 Data Management Console - update to 3.1.13.1
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.11.44, 4.12.22
OpenShift Logging - addressed in versions 5.3.13, 5.4.8, 5.5.4
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
Grafana - update to 9.2.3
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes - update to 10.1.12.2
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift - update to 10.1.12.2
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2022.2.1-5, 2022.4.1-0
Automation Assets in IBM Cloud Pak for Integration (CP4I) - update to 2022.2.1-4
golang-x-text-dev (Ubuntu package) - update to 0.0~git20170627.0.6353ef0-1ubuntu2.1
golang-golang-x-text-dev (Ubuntu package) - addressed in versions 0.0~git20170627.0.6353ef0-1ubuntu2.1, 0.3.2-4ubuntu0.1, 0.3.7-1ubuntu0.20.04.1, 0.3.7-1ubuntu0.22.10.1
scap-security-guide-redhat - update to 0.1.69-1.12.2
firewalld-prometheus-config - addressed in versions 0.1-150000.3.50.3, 0.1-159000.6.33.1
dracut-saltboot - addressed in versions 0.1.1681904360.84ef141-150000.1.50.1, 0.1.1681904360.84ef141-159000.3.30.1
kiwi-desc-saltboot - update to 0.1.1687520761.cefb248-4.15.2
golang-github-QubitProducts-exporter_exporter-debugsource - update to 0.4.0-1.6.1
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-1.6.1, 0.4.0-1.12.2, 0.4.0-4.6.2, 0.4.0-150000.1.18.3, 0.4.0-159000.4.6.1
golang-github-QubitProducts-exporter_exporter-debuginfo - update to 0.4.0-1.6.1
wire-debuginfo - update to 0.5.0-150000.1.12.3
wire - update to 0.5.0-150000.1.12.3
prometheus-postgres_exporter - addressed in versions 0.10.1-1.9.2, 0.10.1-1.14.3, 0.10.1-3.6.4, 0.10.1-150000.1.14.3, 0.10.1-159000.3.6.1
golang-github-prometheus-promu - update to 0.14.0-4.12.2
golang-github-prometheus-alertmanager - addressed in versions 0.23.0-1.21.2, 0.26.0-4.12.4
prometheus-blackbox_exporter-debuginfo - addressed in versions 0.24.0-1.23.2, 0.24.0-3.6.3
prometheus-blackbox_exporter - addressed in versions 0.24.0-1.23.2, 0.24.0-3.6.3, 0.24.0-150000.1.23.3, 0.24.0-159000.3.6.1
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.0-1.8.1, 1.0.0-1.18.2, 1.0.0-4.12.4, 1.0.0-150000.1.17.2, 1.0.0-159000.4.12.1
golang-github-lusitaniae-apache_exporter-debugsource - update to 1.0.0-1.8.1
system-user-grafana - update to 1.0.0-3.7.2
system-user-prometheus - update to 1.0.0-3.7.2
Db2 Rest - update to 1.0.0.258
golang-github-lusitaniae-apache_exporter-debuginfo - addressed in versions 1.0.0-150000.1.17.2, 1.0.0-159000.4.12.1
containernetworking-plugins (Red Hat package) - update to 1.0.1-7.rhaos4.12.el8
zypp-plugin-spacewalk - addressed in versions 1.0.14-30.42.1, 1.0.14-150000.3.35.1
python2-zypp-plugin-spacewalk - update to 1.0.14-30.42.1
python3-zypp-plugin-spacewalk - update to 1.0.14-150000.3.35.1
runc (Red Hat package) - update to 1.1.6-4.rhaos4.12.el8
supportutils-plugin-salt - addressed in versions 1.2.2-9.9.2, 1.2.2-159000.5.9.1
ObjectScale - update to 1.4.0
golang-github-prometheus-node_exporter-debuginfo - update to 1.5.0-1.9.2
golang-github-prometheus-node_exporter - addressed in versions 1.5.0-1.9.2, 1.5.0-1.27.2, 1.5.0-4.15.4
golang-github-prometheus-node_exporter-debugsource - update to 1.5.0-1.9.2
golang-github-boynux-squid_exporter - addressed in versions 1.6-4.9.2, 1.6-159000.4.9.1
Netcool Operations Insight - update to 1.6.9
golang-github-boynux-squid_exporter-debuginfo - update to 1.6-159000.4.9.1
Dell EMC Container Storage Modules - update to 1.7.0
Dell EMC Streaming Data Platform - update to 1.7.0
skopeo (Red Hat package) - addressed in versions 1.9.4-3.rhaos4.12.el9, 1.9.4-3.1.rhaos4.12.el8
Cloud Pak for Security (CP4S) - update to 1.10.10.0
golang - update to 1.19.10-1.el7
buildah (Red Hat package) - addressed in versions 1.23.4-5.rhaos4.12.el9, 1.23.4-5.1.rhaos4.12.el8
watsonx.data - update to 2.0.1
IBM MQ Operator - addressed in versions 2.0.13, 2.4.2
IBM Planning Analytics Workspace - update to 2.0.84
conmon (Red Hat package) - addressed in versions 2.1.2-4.rhaos4.12.el8, 2.1.2-5.rhaos4.12.el9
python2-hwdata - update to 2.3.5-15.12.2
python3-hwdata - update to 2.3.5-159000.5.13.1
Cloud Pak for Network Automation - update to 2.4.7
IBM Fusion HCI - addressed in versions 2.6.1, 2.7.0
ansible-doc - update to 2.9.27-159000.3.9.1
ansible - update to 2.9.27-159000.3.9.1
golang-github-prometheus-prometheus - addressed in versions 2.45.0-1.47.3, 2.45.0-4.33.3, 2.45.0-150000.3.50.3, 2.45.0-159000.6.33.1
podman-help - update to 3.4.4-2
podman-remote - update to 3.4.4-2
podman-debuginfo - update to 3.4.4-2
podman - update to 3.4.4-2
podman-docker - update to 3.4.4-2
podman-gvproxy - update to 3.4.4-2
podman-plugins - update to 3.4.4-2
podman-debugsource - update to 3.4.4-2
IBM Cloud Transformation Advisor - update to 3.8.2
podman (Red Hat package) - addressed in versions 4.2.0-6.1.rhaos4.12.el8, 4.2.0-7.rhaos4.12.el9
supportutils-plugin-susemanager-client - addressed in versions 4.3.3-6.27.2, 4.3.3-150000.3.21.2, 5.0.1-9.15.2, 5.0.1-159000.6.15.1
mgr-daemon - addressed in versions 4.3.7-1.41.1, 4.3.7-150000.1.41.1
python2-uyuni-common-libs - addressed in versions 4.3.8-1.33.1, 4.3.9-1.36.3, 5.0.1-3.33.3
python3-uyuni-common-libs - addressed in versions 4.3.8-150000.1.33.1, 4.3.9-150000.1.36.2, 5.0.1-159000.3.33.1
spacecmd - addressed in versions 4.3.21-38.121.1, 4.3.21-150000.3.98.1, 4.3.23-1.18.2, 4.3.23-38.127.3, 4.3.23-150000.3.104.2, 5.0.1-41.42.3, 5.0.1-159000.6.42.1
IBM Cloud Pak for Watson AIOps - update to 4.4.0
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.3
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.7
IBM Decision Optimization for Cloud Pak for Data - update to 4.8
IBM Cloud Pak for Data Scheduling - update to 4.8.0
Data Replication on Cloud Pak for Data - update to 4.8.0
DB2 on Cloud Pak for Data - update to 4.8.2
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
Cloud Pak for Data - update to 4.8.5
openshift-clients (Red Hat package) - addressed in versions 4.12.0-202306090942.p0.g3c01edd.assembly.stream.el8, 4.12.0-202306090942.p0.g3c01edd.assembly.stream.el9
openshift-ansible (Red Hat package) - update to 4.12.0-202306090942.p0.g74dc7b3.assembly.stream.el8
openshift4-aws-iso (Red Hat package) - update to 4.12.0-202306090942.p0.gd2acdd5.assembly.stream.el8
openshift (Red Hat package) - addressed in versions 4.12.0-202306121916.p0.g8c21020.assembly.stream.el8, 4.12.0-202306121916.p0.g8c21020.assembly.stream.el9
openshift-kuryr (Red Hat package) - update to 4.12.0-202306140156.p0.g31dd228.assembly.stream.el8
OpenShift Virtualization - update to 4.13.0
kubevirt (Red Hat package) - addressed in versions 4.13.0-1469.el7, 4.13.0-1469.el8, 4.13.0-1469.el9
kernel (Red Hat package) - update to 4.18.0-372.59.1.el8_6
kernel-rt (Red Hat package) - update to 4.18.0-372.59.1.rt7.217.el8_6
mgr-push - addressed in versions 5.0.1-4.21.4, 5.0.1-159000.4.21.1
python2-mgr-push - update to 5.0.1-4.21.4
python2-rhnlib - update to 5.0.1-24.30.3
uyuni-proxy-systemd-services - update to 5.0.1-159000.3.9.1
python3-mgr-push - update to 5.0.1-159000.4.21.1
python3-rhnlib - update to 5.0.1-159000.6.30.1
python3-spacewalk-check - update to 5.0.1-159000.6.48.1
spacewalk-client-setup - update to 5.0.1-159000.6.48.1
spacewalk-check - update to 5.0.1-159000.6.48.1
python3-spacewalk-client-setup - update to 5.0.1-159000.6.48.1
python3-spacewalk-client-tools - update to 5.0.1-159000.6.48.1
spacewalk-client-tools - update to 5.0.1-159000.6.48.1
DB2 Data Management Console on CPD - update to 5.1.2
python3-pyvmomi - addressed in versions 6.7.3-150000.1.6.2, 6.7.3-159000.3.6.1
IBM supplied MQ Advanced container images - update to 9.3.0.10-r1
grafana - addressed in versions 9.5.1-1.48.1, 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.5-1.54.3, 9.5.5-150000.1.54.3, 9.5.8-4.21.2, 9.5.8-159000.4.24.1
grafana-debuginfo - addressed in versions 9.5.1-150000.1.48.5, 9.5.1-150200.3.41.3, 9.5.5-150000.1.54.3, 9.5.8-159000.4.24.1
libdns1605 - update to 9.16.6-150000.12.65.1
libisccfg1600 - update to 9.16.6-150000.12.65.1
libbind9-1600 - update to 9.16.6-150000.12.65.1
libisc1606 - update to 9.16.6-150000.12.65.1
libirs1601 - update to 9.16.6-150000.12.65.1
bind-doc - update to 9.16.6-150000.12.65.1
libisccc1600-debuginfo - update to 9.16.6-150000.12.65.1
libisccfg1600-debuginfo - update to 9.16.6-150000.12.65.1
libirs-devel - update to 9.16.6-150000.12.65.1
bind-chrootenv - update to 9.16.6-150000.12.65.1
bind-debugsource - update to 9.16.6-150000.12.65.1
bind-utils - update to 9.16.6-150000.12.65.1
bind-debuginfo - update to 9.16.6-150000.12.65.1
python3-bind - update to 9.16.6-150000.12.65.1
libisccc1600-64bit - update to 9.16.6-150000.12.65.1
libdns1605-64bit - update to 9.16.6-150000.12.65.1
libbind9-1600-64bit - update to 9.16.6-150000.12.65.1
libirs1601-64bit - update to 9.16.6-150000.12.65.1
libisccfg1600-64bit - update to 9.16.6-150000.12.65.1
libisc1606-64bit - update to 9.16.6-150000.12.65.1
libns1604 - update to 9.16.6-150000.12.65.1
libirs1601-debuginfo - update to 9.16.6-150000.12.65.1
bind-utils-debuginfo - update to 9.16.6-150000.12.65.1
bind - update to 9.16.6-150000.12.65.1
bind-devel - update to 9.16.6-150000.12.65.1
libisc1606-debuginfo - update to 9.16.6-150000.12.65.1
libbind9-1600-debuginfo - update to 9.16.6-150000.12.65.1
libns1604-debuginfo - update to 9.16.6-150000.12.65.1
libdns1605-debuginfo - update to 9.16.6-150000.12.65.1
libirs1601-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libirs1601-32bit - update to 9.16.6-150000.12.65.1
libisc1606-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libbind9-1600-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libisc1606-32bit - update to 9.16.6-150000.12.65.1
libisccc1600-32bit - update to 9.16.6-150000.12.65.1
libbind9-1600-32bit - update to 9.16.6-150000.12.65.1
libisccfg1600-32bit - update to 9.16.6-150000.12.65.1
libdns1605-32bit - update to 9.16.6-150000.12.65.1
libns1604-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libns1604-32bit - update to 9.16.6-150000.12.65.1
libisccfg1600-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libisccc1600 - update to 9.16.6-150000.12.65.1
libdns1605-32bit-debuginfo - update to 9.16.6-150000.12.65.1
libisccc1600-32bit-debuginfo - update to 9.16.6-150000.12.65.1
bind-devel-32bit - update to 9.16.6-150000.12.65.1
IBM Sterling Order Management - update to 10.0.0.29
IBM CICS TX Standard - update to 11.1.0.0 ifix6
IBM CICS TX Advanced - update to 11.1.0.0 ifix6
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
EMC Cloud Tiering Appliance - update to 13.2.0.2.24
Dell PowerProtect Cyber Recovery - update to 19.15.0.1
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.18, 22.0.2.2
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.3
Operations Dashboard - update to 2022.2.1-6-lts

• https://go.dev/cl/442235
• https://go.dev/issue/56152
• https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ
• https://pkg.go.dev/vuln/GO-2022-1059

• Denial of service in Go Text
• Grafana update for Go Text
• jaeger update for Go Text
• Multiple vulnerabilities in Openshift Logging 5.3
• Multiple vulnerabilities in OpenShift Logging 5.5
• Multiple vulnerabilities in Service Binding Operator
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and OpenShift
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Resource exhaustion in Platform Navigator and Automation Assets in IBM Cloud Pak for Integration
• Multiple vulnerabilities in IBM Operations Dashboard
• Red Hat Advanced Cluster Management for Kubernetes update for Submariner
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Red Hat Advanced Cluster Management for Kubernetes 2.6 update for Submariner
• Ubuntu update for golang-golang-x-text
• Resource exhaustion in IBM Security Verify Bridge (windows and docker versions)
• Resource exhaustion in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Resource exhaustion in IBM CICS TX Standard
• Resource exhaustion in IBM CICS TX Advanced
• Multiple vulnerabilities in IBM Planning Analytics Workspace
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in Custom Metrics Autoscaler Operator for Red Hat OpenShift
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Resource exhaustion in IBM Sterling Order Management
• Denial of service in client_golang
• Multiple vulnerabilities in IBM Db2 REST
• Multiple vulnerabilities in OpenShift Virtualization 4.13 images
• Multiple vulnerabilities in OpenShift Virtualization 4.13 RPMs
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• OpenShift Container Platform 4.12 update for golang
• Resource exhaustion in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in Dell Streaming Data Platform
• Multiple vulnerabilities in Dell Container Storage Modules
• Fedora EPEL 7 update for golang
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Service Binding Operator
• Multiple vulnerabilities in IBM MQ Operator
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in IBM Storage Fusion and IBM Storage Fusion HCI
• Multiple vulnerabilities in IBM Planning Analytics Cartridge for IBM Cloud Pak for Data
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• Multiple vulnerabilities in IBM Storage Fusion
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Data Replication on Cloud Pak for Data update for Go
• Multiple vulnerabilities in IBM Decision Optimization for Cloud Pak for Data
• SUSE update for Security Beta update for SUSE Manager Client Tools and Salt
• SUSE update for Security Beta update for SUSE Manager Client Tools
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in IBM Cloud Pak for Data Scheduling
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 8.8 Extended Update Support update for the container-tools:rhel8 module
• openEuler 22.03 LTS SP2 update for podman
• openEuler 22.03 LTS SP3 update for podman
• Multiple vulnerabilities in Dell ObjectScale
• Resource exhaustion in IBM watsonx.data
• Multiple vulnerabilities in IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• Multiple vulnerabilities in IBM DB2 Data Management Console
• Multiple vulnerabilities in IBM Astronomer with IBM