Allocation of Resources Without Limits or Throttling in Go programming language - CVE-2022-41717

Vulnerability identifier: #VU70334

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-41717

CWE-ID: CWE-770

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to excessive memory growth when handling HTTP/2 server requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.

Go programming language
Gentoo Linux
Amazon Linux AMI
Oracle Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Desktop
Fedora
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Anolis OS
Oracle Solaris
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Server 15 SP3 LTSS
Development Tools Module
openSUSE Leap
Ubuntu
openEuler
Submariner
Service Binding Operator
Consul
Consul Enterprise
Service Telemetry Framework
Ansible Automation Platform
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Red Hat Migration Toolkit for Applications
Red Hat OpenStack
Red Hat OpenStack for IBM Power
IBM MQ Operator
IBM Spectrum Copy Data Management
IBM Cloud Pak for Multicloud Management Monitoring
Red Hat OpenShift distributed tracing (RHOSDT)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
Red Hat Satellite
IBM Workload Scheduler
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes
IBM Spectrum Protect Plus
Automation Assets in IBM Cloud Pak for Integration (CP4I)
Operations Dashboard
Boundary
Waypoint
OpenShift Developer Tools and Services
IBM CICS TX Advanced
IBM CICS TX Standard
Vault Enterprise
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
Vault
Network Observability plugin for the Openshift Console
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Virtualization
OpenShift Container Platform for Windows Containers
Migration Toolkit for Containers
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
Dell EMC Container Storage Modules
OpenShift Serverless Client
QRadar Suite
Red Hat Ceph Storage
Event Streams
Cloud Pak for Security (CP4S)
golang-1.16 (Ubuntu package)
golang-1.16-src (Ubuntu package)
golang-1.16-go (Ubuntu package)
golang-1.13-src (Ubuntu package)
golang-1.13-go (Ubuntu package)
golang-1.13 (Ubuntu package)
python-tox-current-env (Red Hat package)
golang-github-cncf-xds
python-testrepository (Red Hat package)
toolbox (Red Hat package)
python-nose-cover3 (Red Hat package)
git-credential-oauth
python-requests-unixsocket (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-m2r (Red Hat package)
foreman_ygg_worker (Red Hat package)
python-zake (Red Hat package)
yggdrasil (Red Hat package)
python-sqlparse (Red Hat package)
python-oslo-metrics (Red Hat package)
python-smi (Red Hat package)
python-logutils (Red Hat package)
python-entrypoints (Red Hat package)
golang-github-projectdiscovery-chaos-client
python-colorama (Red Hat package)
python-zipp (Red Hat package)
conmon-rs (Red Hat package)
python-tempita (Red Hat package)
python-pyroute2 (Red Hat package)
python-msgpack (Red Hat package)
python-trustme (Red Hat package)
golang-github-google-dap
python-defusedxml (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
golang-github-mailru-easyjson
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-mistune (Red Hat package)
crudini (Red Hat package)
golang-github-openprinting-ipp-usb
python-pint (Red Hat package)
gmailctl
python-wsme (Red Hat package)
python-lockfile (Red Hat package)
golang-github-envoyproxy-control-plane
python-voluptuous (Red Hat package)
python-scciclient (Red Hat package)
python-migrate (Red Hat package)
golang-x-mod
golang-x-text
stargz-snapshotter
aerc
python-pyrsistent (Red Hat package)
tini (Red Hat package)
coreos-installer (Red Hat package)
htmltest
python-fasteners (Red Hat package)
python-pytest-xprocess (Red Hat package)
python-zeroconf (Red Hat package)
pack
python-hardware (Red Hat package)
python-eventlet (Red Hat package)
python-binary-memcached (Red Hat package)
qpid-proton (Red Hat package)
python-openstacksdk (Red Hat package)
ansible-runner-http (Red Hat package)
python-linecache2 (Red Hat package)
python-hacking (Red Hat package)
python-werkzeug (Red Hat package)
containernetworking-plugins (Red Hat package)
golang-github-schollz-mnemonicode
python-funcsigs (Red Hat package)
collectd-libpod-stats (Red Hat package)
python-editor (Red Hat package)
caddy
python-pretend (Red Hat package)
python-mox3 (Red Hat package)
python-kiwisolver (Red Hat package)
python-unittest2 (Red Hat package)
python-flask (Red Hat package)
containernetworking-plugins
runc (Red Hat package)
python-greenlet (Red Hat package)
dnsx
python-dogpile-cache (Red Hat package)
python-rfc3986 (Red Hat package)
python-jsonpath-rw (Red Hat package)
skopeo (Red Hat package)
python-yappi (Red Hat package)
python-pecan (Red Hat package)
golang-github-prometheus-prom2json
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-cmd2 (Red Hat package)
python-traceback2 (Red Hat package)
python-ddt (Red Hat package)
python-alembic (Red Hat package)
python-kafka (Red Hat package)
ansible-runner (Red Hat package)
python-sqlalchemy (Red Hat package)
python-case (Red Hat package)
python-pyghmi (Red Hat package)
golang-github-prometheus-node-exporter
openshift-serverless-clients (Red Hat package)
golang-github-cloudflare-cfssl
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
crun (Red Hat package)
python-webob (Red Hat package)
chisel
node-exporter
fuse-overlayfs (Red Hat package)
golang-github-rogpeppe-internal
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
golang-devel
golang-help
golang
app-admin/consul
grpc (Red Hat package)
golang-1.18-go (Ubuntu package)
golang-1.18 (Ubuntu package)
golang-1.18-src (Ubuntu package)
go1.18-race
go1.18-doc
go1.18
go1.18-openssl-doc
go1.18-openssl
go1.18-openssl-race
go1.19
go1.19-doc
go1.19-race
buildah (Red Hat package)
dev-lang/go
syncthing
cri-o (Red Hat package)
cri-tools (Red Hat package)
golang-github-nats-io
golang-google-protobuf
containers-common (Red Hat package)
python-memcached (Red Hat package)
rclone
golang-github-need-being-tree-0.1.0-1.fc36 golang-helm-3-3.11.1-2.fc36 golang-oras-0.15.1-1.20221105git690716b.fc36 golang-oras-1-1.2.1-1.fc36 golang-oras-2
golang-github-need-being-tree-0.1.0-1.fc37 golang-helm-3-3.11.1-1.fc37 golang-oras-0.15.1-1.20221105git690716b.fc37 golang-oras-1-1.2.1-1.fc37 golang-oras-2
golang-github-need-being-tree-0.1.0-1.fc38 golang-helm-3-3.11.1-1.fc38 golang-oras-0.15.1-1.20221105git690716b.fc38 golang-oras-1-1.2.1-1.fc38 golang-oras-2
python-oslo-upgradecheck (Red Hat package)
python-waitress (Red Hat package)
python-markupsafe (Red Hat package)
python-testresources (Red Hat package)
python-itsdangerous (Red Hat package)
python-paste-deploy (Red Hat package)
python-webtest (Red Hat package)
python-os-client-config (Red Hat package)
python-uhashring (Red Hat package)
conmon (Red Hat package)
python-pytest-xdist (Red Hat package)
nmstate (Red Hat package)
haproxy (Red Hat package)
python-oslo-reports (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
golang-github-colinmarc-hdfs-2
python-futurist (Red Hat package)
python-routes (Red Hat package)
python-debtcollector (Red Hat package)
python-stestr (Red Hat package)
python-osc-lib (Red Hat package)
python-kazoo (Red Hat package)
python-os-traits (Red Hat package)
python-typeguard (Red Hat package)
nats-server
python-construct (Red Hat package)
golang-github-onsi-ginkgo-2
python-proliantutils (Red Hat package)
container-selinux (Red Hat package)
jenkins (Red Hat package)
python-oslo-service (Red Hat package)
openvswitch3.0 (Red Hat package)
python-automaton (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
kata-containers (Red Hat package)
python-oslo-cache (Red Hat package)
python-cachetools (Red Hat package)
openvswitch3.1 (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-tooz (Red Hat package)
git-lfs (Red Hat package)
exercism
git-lfs-doc
git-lfs
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
podman (Red Hat package)
python-paste (Red Hat package)
python-oslo-context (Red Hat package)
python-redis (Red Hat package)
etcd (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-pymemcache (Red Hat package)
python-oslo-policy (Red Hat package)
golang-helm-3
criu (Red Hat package)
python-simplejson (Red Hat package)
python-cliff (Red Hat package)
python-swiftclient (Red Hat package)
python-glanceclient (Red Hat package)
python-stevedore (Red Hat package)
python-oslo-serialization (Red Hat package)
libslirp (Red Hat package)
python-pyfakefs (Red Hat package)
python-decorator (Red Hat package)
python-oslotest (Red Hat package)
python-sushy (Red Hat package)
pysnmp (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-rsa (Red Hat package)
python-ironicclient (Red Hat package)
openshift-kuryr (Red Hat package)
openshift (Red Hat package)
openshift-ansible (Red Hat package)
openshift-clients (Red Hat package)
jenkins-2-plugins (Red Hat package)
kubevirt (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift4-aws-iso (Red Hat package)
microshift (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
reposurgeon
python-oslo-middleware (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python-vine (Red Hat package)
python-keystoneclient (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-amqp (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
python-zope-interface (Red Hat package)
python-coverage (Red Hat package)
python-oslo-utils (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-more-itertools (Red Hat package)
python-neutronclient (Red Hat package)
puppet-agent (Red Hat package)
python-dracclient (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
grafana (Red Hat package)
golang-github-schollz-croc
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
python-service-identity (Red Hat package)
python-gunicorn (Red Hat package)
python-packaging (Red Hat package)
python-virtualenv (Red Hat package)
python-keyring (Red Hat package)
python-gevent (Red Hat package)
openstack-ironic (Red Hat package)
ovn22.12 (Red Hat package)
ovn23.03 (Red Hat package)
app-containers/docker
python-kubernetes (Red Hat package)
weldr-client (Red Hat package)
cockpit-composer
cockpit-composer (Red Hat package)
osbuild-composer (Red Hat package)
osbuild-composer-worker
osbuild-composer-core
osbuild-composer
osbuild (Red Hat package)
osbuild
osbuild-ostree
osbuild-selinux
python3-osbuild
openstack-macros (Red Hat package)
golang-honnef-tools
Db2 Rest
ObjectScale
Dell EMC Streaming Data Platform
Cloud Pak for Network Automation
IBM Cloud Pak for Watson AIOps
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
IBM Sterling Order Management
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
watsonx.data
IBM Cloud Pak System
IBM Spectrum Scale
Spectrum Protect Server

Install updates from vendor's website.

Go programming language - addressed in versions 1.18.9, 1.19.4
Submariner - update to 0.14.0
Service Binding Operator - addressed in versions 1.3.2, 1.4.0
Boundary - update to 0.11.2
Waypoint - update to 0.10.5
Consul - addressed in versions 1.12.8, 1.13.5, 1.14.3
Vault Enterprise - addressed in versions 1.10.10, 1.11.7, 1.12.3
Consul Enterprise - addressed in versions 1.12.8, 1.13.5, 1.14.3
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.1.1
Red Hat OpenShift Serverless - update to 1.27.1
OpenShift API for Data Protection (OADP) - addressed in versions 1.0.7, 1.1.2
Vault - addressed in versions 1.10.10, 1.11.7, 1.12.3
Migration Toolkit for Containers - addressed in versions 1.7.7, 1.7.10
QRadar Suite - update to 1.10.18.0
OpenShift Service Mesh - update to 2.3.2
IBM Cloud Pak for Multicloud Management - update to 2.3.8
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.10.53, 4.10.54, 4.10.63, 4.11.28, 4.11.30, 4.11.44, 4.12.3, 4.12.4, 4.12.23, 4.13.0, 4.13.2, 4.13.4, 4.13.5
OpenShift Developer Tools and Services - update to 4.9
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.12.2, 4.13.0
OpenShift Logging - addressed in versions 5.4.11, 5.4.12, 5.5.8, 5.5.9, 5.6.3
Red Hat Migration Toolkit for Applications - update to 6.0.1
Event Streams - update to 11.1.5
golang-1.16 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.16.2-0ubuntu1~20.04.1
golang-1.16-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.16.2-0ubuntu1~20.04.1
golang-1.16-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.16.2-0ubuntu1~20.04.1
golang-1.13-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.13.8-1ubuntu1.2, 1.13.8-1ubuntu2.22.04.2
golang-1.13-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.13.8-1ubuntu1.2, 1.13.8-1ubuntu2.22.04.2
golang-1.13 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.13.8-1ubuntu1.2, 1.13.8-1ubuntu2.22.04.2
python-tox-current-env (Red Hat package) - update to 0.0.6-1.el9
golang-github-cncf-xds - update to 0-0.10.20230912gite9ce688.fc40
python-testrepository (Red Hat package) - update to 0.0.20-20.el9
toolbox (Red Hat package) - addressed in versions 0.0.99.3-9.el9, 0.1.2-1.rhaos4.13.el9
python-nose-cover3 (Red Hat package) - update to 0.1.0-31.el9
git-credential-oauth - addressed in versions 0.1.5-1.fc36, 0.4.1-1.fc37
python-requests-unixsocket (Red Hat package) - addressed in versions 0.1.5-5.el8ar, 0.2.0-2.el9
python-ifaddr (Red Hat package) - addressed in versions 0.1.6-5.el8ost, 0.1.6-6.el9
python-wcwidth (Red Hat package) - update to 0.1.7-14.el8ost
python-iso8601 (Red Hat package) - update to 0.1.12-9.el9
python-m2r (Red Hat package) - update to 0.2.1-3.1.20190604git66f4a5a.el9
foreman_ygg_worker (Red Hat package) - addressed in versions 0.2.2-1.el7sat, 0.2.2-1.el8sat, 0.2.2-1.el9sat
python-zake (Red Hat package) - update to 0.2.2-19.el9
yggdrasil (Red Hat package) - addressed in versions 0.2.3-1.el7sat, 0.2.3-1.el8sat, 0.2.3-1.el9sat
python-sqlparse (Red Hat package) - update to 0.2.4-10.el9
python-oslo-metrics (Red Hat package) - addressed in versions 0.3.0-0.20211020174122.43eee50.el8, 0.5.0-0.20221128141719.fc22d0d.el9
python-smi (Red Hat package) - update to 0.3.4-10.el9
python-logutils (Red Hat package) - update to 0.3.5-7.1.el9
python-entrypoints (Red Hat package) - update to 0.3-8.el9
golang-github-projectdiscovery-chaos-client - update to 0.4.0-3.fc37
python-colorama (Red Hat package) - update to 0.4.1-2.el9
python-zipp (Red Hat package) - addressed in versions 0.5.1-2.el8ost, 0.5.1-3.el9
conmon-rs (Red Hat package) - update to 0.5.1-5.rhaos4.13.git.el9
python-tempita (Red Hat package) - update to 0.5.1-25.el9
python-pyroute2 (Red Hat package) - update to 0.5.13-1.el8ost
python-msgpack (Red Hat package) - addressed in versions 0.6.2-1.el8ost, 0.6.2-2.el9
python-trustme (Red Hat package) - update to 0.7.0-1.el9
golang-github-google-dap - addressed in versions 0.7.0-1.fc36, 0.7.0-1.fc37, 0.7.0-1.fc38
python-defusedxml (Red Hat package) - update to 0.7.1-1.el9
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el9
python-repoze-lru (Red Hat package) - update to 0.7-7.el9
golang-github-mailru-easyjson - update to 0.7.7-1.fc39
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el9
python-dataclasses (Red Hat package) - update to 0.8-2.el9
python-mistune (Red Hat package) - update to 0.8.3-15.1.el9
crudini (Red Hat package) - update to 0.9.3-4.el9
golang-github-openprinting-ipp-usb - update to 0.9.23-5.fc37
python-pint (Red Hat package) - addressed in versions 0.10.1-1.el8ost, 0.10.1-3.el9
gmailctl - addressed in versions 0.10.6-2.fc36, 0.10.6-2.fc37, 0.10.6-3.fc38
python-wsme (Red Hat package) - update to 0.11.0-0.20221128135154.80bda90.el9
python-lockfile (Red Hat package) - update to 0.11.0-8.el8ar
golang-github-envoyproxy-control-plane - update to 0.11.1-1.fc40
python-voluptuous (Red Hat package) - update to 0.11.7-3.el9
python-scciclient (Red Hat package) - update to 0.12.3-0.20221128150506.0940a71.el9
python-migrate (Red Hat package) - update to 0.13.0-2.el9
golang-x-mod - addressed in versions 0.14.0-1.el9, 0.14.0-1.fc38, 0.14.0-1.fc39
golang-x-text - addressed in versions 0.14.0-1.fc38, 0.14.0-1.fc39
stargz-snapshotter - addressed in versions 0.14.2-1.fc37, 0.14.2-1.fc38
aerc - addressed in versions 0.15.2-1.fc37, 0.15.2-1.fc38
python-pyrsistent (Red Hat package) - update to 0.16.0-3.el8ost
tini (Red Hat package) - update to 0.16.1-1.el8ar
coreos-installer (Red Hat package) - update to 0.17.0-1.rhaos4.13.el9
htmltest - addressed in versions 0.17.0-4.fc37, 0.17.0-4.fc38, 0.17.0-4.fc39
python-fasteners (Red Hat package) - update to 0.18-1.el9
python-pytest-xprocess (Red Hat package) - update to 0.18.1-4.el9
python-zeroconf (Red Hat package) - addressed in versions 0.24.4-1.el8ost, 0.24.4-2.el9
pack - addressed in versions 0.29.0~rc1-1.el8, 0.29.0~rc1-1.el9, 0.29.0~rc1-1.fc36, 0.29.0~rc1-1.fc37, 0.29.0~rc1-1.fc38
python-hardware (Red Hat package) - update to 0.30.0-0.20221128155150.f6ff0ed.el9
python-eventlet (Red Hat package) - addressed in versions 0.30.2-1.el8, 0.33.1-4.el9
python-binary-memcached (Red Hat package) - update to 0.31.1-1.el9
qpid-proton (Red Hat package) - addressed in versions 0.37.0-2.el8, 0.37.0-2.el9
python-openstacksdk (Red Hat package) - update to 0.102.0-0.20221128160622.9a17781.el9
ansible-runner-http (Red Hat package) - update to 1.0.0-2.el8ar
python-linecache2 (Red Hat package) - update to 1.0.0-25.el9
Db2 Rest - addressed in versions 1.0.0.240, 1.0.0.246
python-hacking (Red Hat package) - update to 1.0.1-0.20210812104123.865398f.el9
python-werkzeug (Red Hat package) - addressed in versions 1.0.1-3.el8ost, 2.0.3-4.el9
containernetworking-plugins (Red Hat package) - addressed in versions 1.0.1-6.rhaos4.11.el8, 1.0.1-6.rhaos4.13.el8, 1.0.1-7.rhaos4.13.el8, 1.2.0-1.el9
golang-github-schollz-mnemonicode - update to 1.0.1-6.20230519git63fa713.fc38
python-funcsigs (Red Hat package) - update to 1.0.2-17.el9
collectd-libpod-stats (Red Hat package) - update to 1.0.4-3.el8ost
python-editor (Red Hat package) - update to 1.0.4-5.el9
caddy - addressed in versions 1.0.5-1.el7, 2.4.6-5.el9, 2.4.6-5.fc36, 2.5.2-3.fc37, 2.7.0~beta2-1.fc39
python-pretend (Red Hat package) - update to 1.0.8-19.el9
python-mox3 (Red Hat package) - update to 1.1.0-0.20210812114029.99a302f.el9
python-kiwisolver (Red Hat package) - update to 1.1.0-4.el9
python-unittest2 (Red Hat package) - update to 1.1.0-24.el9
python-flask (Red Hat package) - update to 1.1.1-1.el8ost
containernetworking-plugins - addressed in versions 1.1.1-16.fc36, 1.1.1-16.fc37, 1.1.1-16.fc38
runc (Red Hat package) - addressed in versions 1.1.2-2.rhaos4.11.el8, 1.1.6-3.rhaos4.13.el8, 1.1.6-3.rhaos4.13.el9, 1.1.6-4.rhaos4.13.el8
python-greenlet (Red Hat package) - update to 1.1.3-1.el9
dnsx - update to 1.1.5-1.fc40
python-dogpile-cache (Red Hat package) - update to 1.1.5-3.el9
Network Observability plugin for the Openshift Console - update to 1.2.0
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el9
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el9
skopeo (Red Hat package) - addressed in versions 1.2.4-1.1.el8, 1.5.2-4.rhaos4.11.el8, 1.10.0-1.rhaos4.13.el9, 1.11.2-0.1.el9, 1.11.2-2.rhaos4.13.el8, 1.11.2-2.1.rhaos4.13.el9
python-yappi (Red Hat package) - update to 1.3.1-2.el9
python-pecan (Red Hat package) - update to 1.3.2-10.el9
golang-github-prometheus-prom2json - update to 1.3.3-1.fc40
python-warlock (Red Hat package) - update to 1.3.3-2.el9
ObjectScale - update to 1.4.0
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20221128134625.d7ac0ff.el9
python-cmd2 (Red Hat package) - update to 1.4.0-1.1.el8
python-traceback2 (Red Hat package) - update to 1.4.0-25.el9
python-ddt (Red Hat package) - update to 1.4.2-1.el9
python-alembic (Red Hat package) - addressed in versions 1.4.2-5.el8ost, 1.6.0-1.el9
python-kafka (Red Hat package) - update to 1.4.3-3.el9
ansible-runner (Red Hat package) - update to 1.4.6-2.el8ar
python-sqlalchemy (Red Hat package) - update to 1.4.39-2.el9
python-case (Red Hat package) - update to 1.5.3-5.el9
python-pyghmi (Red Hat package) - update to 1.5.14-2.1.el8ost
Dell EMC Container Storage Modules - update to 1.6.0
golang-github-prometheus-node-exporter - update to 1.6.1-1.fc40
openshift-serverless-clients (Red Hat package) - update to 1.6.1-2.el8
golang-github-cloudflare-cfssl - update to 1.6.4-1.fc39
python-pyperclip (Red Hat package) - update to 1.6.4-6.el8ost
Dell EMC Streaming Data Platform - update to 1.7.0
python-os-service-types (Red Hat package) - update to 1.7.0-0.20221128134625.0b2f473.el9
python-importlib-metadata (Red Hat package) - addressed in versions 1.7.0-1.el8ost, 4.12.0-2.el9
crun (Red Hat package) - update to 1.8.4-1.rhaos4.13.el9
python-webob (Red Hat package) - update to 1.8.5-5.el9
chisel - update to 1.9.0-1.fc40
node-exporter - update to 1.9.1-2.el9
fuse-overlayfs (Red Hat package) - update to 1.10-2.rhaos4.13.el8
Cloud Pak for Security (CP4S) - update to 1.10.10.0
golang-github-rogpeppe-internal - update to 1.11.0-1.fc40
python-pycdlib (Red Hat package) - update to 1.11.0-3.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el9
golang-devel - addressed in versions 1.15.7-23, 1.17.3-14
golang-help - addressed in versions 1.15.7-23, 1.17.3-14
golang - addressed in versions 1.15.7-23, 1.17.3-14
app-admin/consul - update to 1.15.10
grpc (Red Hat package) - update to 1.18.0-4.el8ost
golang-1.18-go (Ubuntu package) - addressed in versions 1.18.1-1ubuntu1.1, 1.18.1-1ubuntu1~18.04.4, 1.18.1-1ubuntu1~20.04.2
golang-1.18 (Ubuntu package) - addressed in versions 1.18.1-1ubuntu1.1, 1.18.1-1ubuntu1~18.04.4, 1.18.1-1ubuntu1~20.04.2
golang-1.18-src (Ubuntu package) - addressed in versions 1.18.1-1ubuntu1.1, 1.18.1-1ubuntu1~18.04.4, 1.18.1-1ubuntu1~20.04.2
golang - addressed in versions 1.18.6-1.43, 1.19.8-1
golang - update to 1.18.9-1.el7
go1.18-race - update to 1.18.9-150000.1.40.1
go1.18-doc - update to 1.18.9-150000.1.40.1
go1.18 - update to 1.18.9-150000.1.40.1
go1.18-openssl-doc - update to 1.18.10.1-150000.1.9.1
go1.18-openssl - update to 1.18.10.1-150000.1.9.1
go1.18-openssl-race - update to 1.18.10.1-150000.1.9.1
go1.19 - update to 1.19.4-150000.1.18.1
go1.19-doc - update to 1.19.4-150000.1.18.1
go1.19-race - update to 1.19.4-150000.1.18.1
buildah (Red Hat package) - addressed in versions 1.19.9-1.1.el8, 1.23.4-3.rhaos4.11.el8, 1.29.1-1.el9, 1.29.1-1.rhaos4.13.el9, 1.29.1-2.rhaos4.13.el8, 1.29.1-2.1.rhaos4.13.el9
dev-lang/go - update to 1.20.10
syncthing - addressed in versions 1.23.0-2.el8, 1.23.0-2.el9, 1.23.0-2.fc36, 1.23.0-2.fc37
cri-o (Red Hat package) - addressed in versions 1.24.6-2.rhaos4.11.git4bfe15a.el8, 1.26.3-3.rhaos4.13.git641290e.el9, 1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git994242a.el9
cri-tools (Red Hat package) - update to 1.26.0-1.el9
OpenShift Serverless Client - update to 1.27.1
golang-github-nats-io - update to 1.29.0-5.fc40
golang-google-protobuf - update to 1.31.0-1.fc40
containers-common (Red Hat package) - update to 1-35.rhaos4.13.el9
python-memcached (Red Hat package) - update to 1.58-12.el9
rclone - addressed in versions 1.63.1-1.fc39, 1.70.3-1.el9
golang-github-need-being-tree-0.1.0-1.fc36 golang-helm-3-3.11.1-2.fc36 golang-oras-0.15.1-1.20221105git690716b.fc36 golang-oras-1-1.2.1-1.fc36 golang-oras-2 - update to 2.0.0~rc.4-1.fc36
golang-github-need-being-tree-0.1.0-1.fc37 golang-helm-3-3.11.1-1.fc37 golang-oras-0.15.1-1.20221105git690716b.fc37 golang-oras-1-1.2.1-1.fc37 golang-oras-2 - update to 2.0.0~rc.4-1.fc37
golang-github-need-being-tree-0.1.0-1.fc38 golang-helm-3-3.11.1-1.fc38 golang-oras-0.15.1-1.20221105git690716b.fc38 golang-oras-1-1.2.1-1.fc38 golang-oras-2 - update to 2.0.0~rc.4-1.fc38
python-oslo-upgradecheck (Red Hat package) - update to 2.0.0-0.20221128142932.b3a2b19.el9
python-waitress (Red Hat package) - update to 2.0.0-2.el9
python-markupsafe (Red Hat package) - update to 2.0.0-2.el9
watsonx.data - update to 2.0.1
python-testresources (Red Hat package) - update to 2.0.1-2.el9
python-itsdangerous (Red Hat package) - update to 2.0.1-2.el9
python-paste-deploy (Red Hat package) - addressed in versions 2.0.1-4.el8ost, 2.0.1-5.el9
IBM MQ Operator - addressed in versions 2.0.17, 3.0.0
python-webtest (Red Hat package) - update to 2.0.33-5.el9
python-os-client-config (Red Hat package) - update to 2.1.0-0.20210722194729.bc96c23.el9
python-uhashring (Red Hat package) - update to 2.1-2.el9
conmon (Red Hat package) - addressed in versions 2.1.2-3.rhaos4.11.el8, 2.1.7-1.el9_2, 2.1.7-1.rhaos4.13.el8, 2.1.7-1.rhaos4.13.el9, 2.1.7-2.rhaos4.13.el8, 2.1.7-2.1.rhaos4.13.el9
python-pytest-xdist (Red Hat package) - update to 2.2.1-1.el9
nmstate (Red Hat package) - update to 2.2.9-6.rhaos4.13.el8
IBM Spectrum Copy Data Management - update to 2.2.19.0
haproxy (Red Hat package) - update to 2.2.24-3.rhaos4.13.el8
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 7
python-oslo-reports (Red Hat package) - update to 2.3.0-0.20211012151507.f2799dc.el9
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el9
python-munch (Red Hat package) - update to 2.3.2-7.el9
IBM Cloud Pak System - update to 2.3.3.6 iFix 1
golang-github-colinmarc-hdfs-2 - update to 2.4.0-1.fc40
python-futurist (Red Hat package) - update to 2.4.1-0.20221128140910.159d752.el9
python-routes (Red Hat package) - update to 2.4.1-12.el9
Cloud Pak for Network Automation - update to 2.4.7
python-debtcollector (Red Hat package) - update to 2.5.0-0.20221128140303.a6b46c5.el9
python-stestr (Red Hat package) - update to 2.6.0-8.el9
python-osc-lib (Red Hat package) - update to 2.6.2-0.20221128150506.d438afa.el9
python-kazoo (Red Hat package) - update to 2.7.0-2.el9
Red Hat OpenShift distributed tracing (RHOSDT) - update to 2.8.0
python-os-traits (Red Hat package) - update to 2.9.0-0.20221128153153.fc91a78.el9
python-typeguard (Red Hat package) - update to 2.9.1-1.el9
nats-server - update to 2.9.22-1.fc40
python-construct (Red Hat package) - addressed in versions 2.10.56-1.el8ost, 2.10.56-2.el9
golang-github-onsi-ginkgo-2 - update to 2.11.0-1.fc39
python-proliantutils (Red Hat package) - update to 2.14.0-0.20221128154535.de9759c.el9
container-selinux (Red Hat package) - addressed in versions 2.208.0-2.rhaos4.13.el8, 2.208.0-2.rhaos4.13.el9
jenkins (Red Hat package) - update to 2.401.1.1687268694-1.el8
python-oslo-service (Red Hat package) - update to 3.0.0-0.20221128144658.a27acfe.el9
openvswitch3.0 (Red Hat package) - update to 3.0.0-28.el9fdp
python-automaton (Red Hat package) - update to 3.0.1-0.20221128143847.0ea747e.el9
python-oslo-versionedobjects (Red Hat package) - update to 3.0.1-0.20221128145846.2b12029.el9
kata-containers (Red Hat package) - update to 3.0.2-5.el9
python-oslo-cache (Red Hat package) - update to 3.1.0-0.20221129203427.7fb06bc.el9
python-cachetools (Red Hat package) - update to 3.1.0-4.el9
openvswitch3.1 (Red Hat package) - update to 3.1.0-10.el9fdp
python-pycadf (Red Hat package) - update to 3.1.1-0.20221128135153.4179996.el9
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20221128155706.eb27243.el9
python-bcrypt (Red Hat package) - update to 3.1.6-3.el9
python-tooz (Red Hat package) - update to 3.2.0-0.20221128162335.1a76dd6.el9
git-lfs (Red Hat package) - addressed in versions 3.2.0-1.el9, 3.2.0-2.el8
exercism - addressed in versions 3.2.0-1.fc37, 3.2.0-1.fc38, 3.2.0-1.fc39
git-lfs-doc - update to 3.2.0-2.0.1
git-lfs - update to 3.2.0-2.0.1
python-jsonschema (Red Hat package) - update to 3.2.0-5.el8ost
python-statsd (Red Hat package) - update to 3.2.1-20.el9
podman (Red Hat package) - addressed in versions 3.2.3-1.1.rhaos4.10.el8, 4.0.2-7.rhaos4.11.el8, 4.4.1-3.el9, 4.4.1-3.rhaos4.13.el8, 4.4.1-3.rhaos4.13.el9, 4.4.1-4.rhaos4.13.el8, 4.4.1-5.1.rhaos4.13.el9
python-paste (Red Hat package) - update to 3.2.4-1.el8ost
python-oslo-context (Red Hat package) - addressed in versions 3.3.1-0.20211012152439.641a1e0.el8, 5.0.0-0.20221128142633.f388eb9.el9
python-redis (Red Hat package) - update to 3.3.8-2.el9
etcd (Red Hat package) - update to 3.3.23-12.el8ost
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el9
python-osprofiler (Red Hat package) - update to 3.4.3-0.20221128140710.3286301.el9
python-pymemcache (Red Hat package) - update to 3.5.0-1.el9
python-oslo-policy (Red Hat package) - addressed in versions 3.8.2-0.20211012161944.c7fd9f4.el8, 4.0.0-0.20221128143837.5bd767b.el9
golang-helm-3 - update to 3.11.1-1.fc39
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el9
python-cliff (Red Hat package) - update to 4.0.0-0.20221128185800.58c853d.el9
python-swiftclient (Red Hat package) - update to 4.1.0-0.20221128153149.662e530.el9
python-glanceclient (Red Hat package) - update to 4.1.0-0.20221128153803.f2999ce.el9
python-stevedore (Red Hat package) - update to 4.1.0-0.20221128161654.9eb8094.el9
python-oslo-serialization (Red Hat package) - addressed in versions 4.2.0-0.20211012151454.2b94a4f.el8, 5.0.0-0.20221128142424.dd2a819.el9
IBM Cloud Pak for Watson AIOps - update to 4.4.0
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-pyfakefs (Red Hat package) - update to 4.4.0-4.el9
python-decorator (Red Hat package) - update to 4.4.0-6.el9
python-oslotest (Red Hat package) - update to 4.4.1-0.20210812115053.aaf3a72.el9
python-sushy (Red Hat package) - update to 4.4.3-0.20230425095526.9f708cf.el9
pysnmp (Red Hat package) - update to 4.4.12-6.el9
python-oslo-log (Red Hat package) - addressed in versions 4.6.0-0.20211012154701.41c8807.el8, 5.0.0-0.20221128143137.6401da7.el9
python-pexpect (Red Hat package) - addressed in versions 4.6-2.el8ar, 4.6-3.el9
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.4
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.5
python-rsa (Red Hat package) - update to 4.7-1.el8
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
DB2 on Cloud Pak for Data - update to 4.8.2
python-ironicclient (Red Hat package) - update to 4.9.0-0.20211209154934.6f1be06.el9
openshift-kuryr (Red Hat package) - addressed in versions 4.10.0-202306170106.p0.g8e4df8b.assembly.stream.el8, 4.11.0-202306280915.p0.gc732699.assembly.stream.el8, 4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
openshift (Red Hat package) - addressed in versions 4.10.0-202306170106.p0.g16bcd69.assembly.stream.el7, 4.10.0-202306170106.p0.g16bcd69.assembly.stream.el8, 4.11.0-202306260054.p0.g990d55b.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el9, 4.13.0-202306072143.p0.g7d22122.assembly.stream.el8, 4.13.0-202306072143.p0.g7d22122.assembly.stream.el9
openshift-ansible (Red Hat package) - addressed in versions 4.10.0-202306170106.p0.g72c7be6.assembly.stream.el7, 4.10.0-202306170106.p0.g72c7be6.assembly.stream.el8, 4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9
openshift-clients (Red Hat package) - addressed in versions 4.10.0-202306261054.p0.g22cf04a.assembly.stream.el7, 4.10.0-202306261054.p0.g22cf04a.assembly.stream.el8, 4.11.0-202306231116.p0.g2ae2303.assembly.stream.el8, 4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
jenkins-2-plugins (Red Hat package) - update to 4.10.1687341544-1.el8
OpenShift Virtualization - update to 4.13.0
kubevirt (Red Hat package) - addressed in versions 4.13.0-1469.el7, 4.13.0-1469.el8, 4.13.0-1469.el9
atomic-openshift-service-idler (Red Hat package) - update to 4.13.0-202303172327.p0.ga0f9090.assembly.stream.el8
openshift4-aws-iso (Red Hat package) - update to 4.13.0-202304052215.p0.gd2acdd5.assembly.stream.el8
microshift (Red Hat package) - update to 4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9
kernel (Red Hat package) - addressed in versions 4.18.0-305.95.1.el8_4, 5.14.0-284.13.1.el9_2, 5.14.0-284.18.1.el9_2
kernel-rt (Red Hat package) - addressed in versions 4.18.0-305.95.1.rt7.170.el8_4, 5.14.0-284.13.1.rt14.298.el9_2, 5.14.0-284.18.1.rt14.303.el9_2
reposurgeon - update to 4.35-1.fc38
python-oslo-middleware (Red Hat package) - update to 5.0.0-0.20221128142027.51e1882.el9
python-keystoneauth1 (Red Hat package) - update to 5.0.0-0.20221128144522.2445a5d.el9
python-sushy-oem-idrac (Red Hat package) - update to 5.0.0-0.20221128204359.da9a0e4.el9
python-vine (Red Hat package) - update to 5.0.0-3.el9
python-keystoneclient (Red Hat package) - update to 5.0.1-0.20221128145838.bc8e9e7.el9
python-oslo-concurrency (Red Hat package) - update to 5.0.1-0.20221129205158.01cf2ff.el9
App Connect Enterprise Certified Container - addressed in versions 5.0.6, 8.1.0
python-amqp (Red Hat package) - update to 5.0.6-1.el9
python-oslo-i18n (Red Hat package) - addressed in versions 5.1.0-0.20211012165753.b031d17.el8, 5.1.0-0.20221128135758.b031d17.el9
IBM Spectrum Scale - update to 5.1.7.0
python-ironic-lib (Red Hat package) - update to 5.3.0-0.20221128152640.340a4b2.el9
python-zope-interface (Red Hat package) - update to 5.4.0-1.el9
python-coverage (Red Hat package) - update to 5.6-0.1b1.el9
python-oslo-utils (Red Hat package) - update to 6.0.1-0.20221128145135.760deb9.el9
python-tenacity (Red Hat package) - addressed in versions 6.2.0-1.el8ost, 6.2.0-2.el9
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20221128140202.1b1b960.el9
Red Hat Satellite - update to 6.14
python-more-itertools (Red Hat package) - update to 7.2.0-3.el9
python-neutronclient (Red Hat package) - update to 7.6.0-0.20211012175718.983f0ab.el9
puppet-agent (Red Hat package) - addressed in versions 7.26.0-3.el6sat, 7.26.0-3.el7sat, 7.26.0-3.el8sat, 7.26.0-3.el9sat
OpenShift Container Platform for Windows Containers - update to 8.0.0
python-dracclient (Red Hat package) - update to 8.0.0-0.20221128135758.9c7499c.el9
Spectrum Protect Server - update to 8.1.18
python-oslo-config (Red Hat package) - addressed in versions 8.7.1-0.20211012155707.1a7bd66.el8, 9.0.0-0.20221128141318.9eaae04.el9
python-oslo-db (Red Hat package) - addressed in versions 9.1.0-0.20211020204148.be2cc6a.el8, 12.2.0-0.20221128163146.a191d2e.el9
python-cinderclient (Red Hat package) - update to 9.1.0-0.20221128151726.730a8c7.el9
openstack-ironic-python-agent (Red Hat package) - update to 9.2.0-0.20221128164006.a167075.el9
grafana (Red Hat package) - update to 9.2.10-7.el9_3
golang-github-schollz-croc - addressed in versions 9.6.4-1.fc39, 9.6.4-2.fc38
IBM Sterling Order Management - update to 10.0.0.29
python-keystonemiddleware (Red Hat package) - update to 10.1.0-0.20221128152538.f7ac6a1.el9
IBM Workload Scheduler - update to 10.1.0.3
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift - update to 10.1.12.4
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes - update to 10.1.12.4
IBM Spectrum Protect Plus - update to 10.1.15
IBM CICS TX Advanced - update to 11.1.0.0 ifix7
IBM CICS TX Standard - update to 11.1.0.0 ifix7
openstack-ironic-inspector (Red Hat package) - update to 11.2.0-0.20221128164644.d83454c.el9
python-oslo-messaging (Red Hat package) - addressed in versions 12.9.1-0.20211020204149.f9de265.el8, 14.0.0-0.20221128151928.e44f286.el9
python-service-identity (Red Hat package) - update to 18.1.0-9.1.el9
Dell PowerProtect Cyber Recovery - update to 19.14.0.2
python-gunicorn (Red Hat package) - update to 20.0.4-2.el9
python-packaging (Red Hat package) - update to 20.4-1.el8ost
python-virtualenv (Red Hat package) - update to 20.4.4-1.el9
python-keyring (Red Hat package) - update to 21.0.0-2.el9
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.3
python-gevent (Red Hat package) - update to 21.1.2-1.el9
openstack-ironic (Red Hat package) - update to 21.2.0-0.20221209211422.b70b418.el9
ovn22.12 (Red Hat package) - update to 22.12.0-25.el9fdp
ovn23.03 (Red Hat package) - update to 23.03.0-7.el9fdp
app-containers/docker - update to 25.0.4
python-kubernetes (Red Hat package) - update to 25.3.0-1.el8
weldr-client (Red Hat package) - addressed in versions 35.9-1.el9, 35.9-2.el8
cockpit-composer - update to 45-1
cockpit-composer (Red Hat package) - addressed in versions 45-1.el8_8, 45-1.el9_2
osbuild-composer (Red Hat package) - addressed in versions 75-1.el8, 76-2.el9_2
osbuild-composer-worker - update to 76-2.0.1
osbuild-composer-core - update to 76-2.0.1
osbuild-composer - update to 76-2.0.1
osbuild (Red Hat package) - addressed in versions 81-1.el8, 81-1.el9
osbuild - update to 81-1.0.1
osbuild-ostree - update to 81-1.0.1
osbuild-selinux - update to 81-1.0.1
python3-osbuild - update to 81-1.0.1
openstack-macros (Red Hat package) - update to 2020.1.2-1.el9
Automation Assets in IBM Cloud Pak for Integration (CP4I) - update to 2022.2.1-5
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2022.2.1-6, 2022.4.1-1
Operations Dashboard - update to 2022.2.1-7-lts
golang-honnef-tools - update to 2023.1.3-1.20230802git0e3cc29.fc39

• Exploit #8669 - h2conn-exploit (Exploit for CVE-2022-41717) (December 15, 2022)

• https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ
• https://pkg.go.dev/vuln/GO-2022-1144
• https://go.dev/cl/455717
• https://go.dev/issue/56350
• https://go.dev/cl/455635

• Multiple vulnerabilities in Go programming language
• Consul update for Go programming language
• SUSE update for go1.19
• SUSE update for go1.18
• HashiCorp Consul update for Go
• service-binding-operator update for Go
• Multiple vulnerabilities in Submariner
• HashiCorp Vault update for Go
• HashiCorp Boundary update for Go
• HashiCorp Waypoint update for Go
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in OpenShift Container Platform 4.12
• Multiple vulnerabilities in OpenShift Container Platform 4.12
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Developer Tools and Services
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications
• Allocation of resources without limits or throttling in Platform Navigator and Automation Assets in IBM Cloud Pak for Integration
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• IBM Operations Dashboard update for Go
• Denial of service in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.5
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in OpenShift Logging 5.6
• Denial of service in OpenShift Serverless Client
• Multiple vulnerabilities in OpenShift Serverless
• Red Hat OpenStack Platform update for etcd
• Red Hat OpenStack Platform update for collectd-libpod-stats
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in IBM Spectrum Protect Server
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Allocation of resources without limits or throttling in IBM Spectrum Scale Data Access Services (DAS)
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.5
• Multiple vulnerabilities in Service Telemetry Framework
• Allocation of resources without limits or throttling in IBM Event Streams
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Allocation of resources without limits or throttling in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Allocation of resources without limits or throttling in IBM Sterling Order Management
• Multiple vulnerabilities in IBM Db2 REST
• Multiple vulnerabilities in Network Observability for OpenShift
• Amazon Linux AMI update for golang
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.12
• Ubuntu update for golang-1.18
• IBM App Connect Enterprise Certified Container update for Go programming language
• Allocation of resources without limits or throttling in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Red Hat Enterprise Linux 9 update for containernetworking-plugins
• Red Hat Enterprise Linux 9 update for git-lfs
• Red Hat Enterprise Linux 9 update for skopeo
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 9 update for buildah
• Red Hat Enterprise Linux 9 update for toolbox
• Red Hat Enterprise Linux 9 update for conmon
• Red Hat Enterprise Linux 9 update for Image Builder
• Multiple vulnerabilities in Red Hat OpenShift Distributed Tracing
• Red Hat Enterprise Linux 8 update for git-lfs
• Red Hat Enterprise Linux 8 update for golang
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 8 update for the container-tools:4.0 module
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• OpenShift Container Platform 4.13 update for go
• OpenShift Container Platform release 4.13 update for golang
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift support for Windows Containers
• Multiple vulnerabilities in OpenShift Virtualization 4.13 images
• Multiple vulnerabilities in OpenShift Virtualization 4.13 RPMs
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift
• SUSE update for go1.18-openssl
• Migration Toolkit for Containers (MTC) 1.7 update for golang
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in OpenShift Developer Tools and Services 4.11
• Multiple vulnerabilities in OpenShift Developer Tools and Services 4.12
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in OpenShift Container Platform 4.12
• Multiple vulnerabilities in Dell Streaming Data Platform
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Dell Container Storage Modules
• Red Hat Ansible Automation Platform 2.3 update for golang
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Fedora 39 update for rclone
• Fedora 37 update for git-credential-oauth
• Fedora 36 update for git-credential-oauth
• Fedora 36 update for caddy
• Fedora EPEL 9 update for caddy
• Fedora 37 update for caddy
• Fedora EPEL 7 update for golang
• Fedora 37 update for syncthing
• Fedora EPEL 9 update for syncthing
• Fedora 36 update for syncthing
• Fedora EPEL 8 update for syncthing
• Fedora 36 update for golang-github-google-dap
• Fedora 37 update for golang-github-google-dap
• Fedora 39 update for golang-helm-3
• Fedora 38 update for golang-github-need-being-tree-0.1.0-1.fc38 golang-helm-3-3.11.1-1.fc38 golang-oras-0.15.1-1.20221105git690716b.fc38 golang-oras-1-1.2.1-1.fc38 golang-oras-2
• Fedora 37 update for golang-github-need-being-tree-0.1.0-1.fc37 golang-helm-3-3.11.1-1.fc37 golang-oras-0.15.1-1.20221105git690716b.fc37 golang-oras-1-1.2.1-1.fc37 golang-oras-2
• Fedora 36 update for golang-github-need-being-tree-0.1.0-1.fc36 golang-helm-3-3.11.1-2.fc36 golang-oras-0.15.1-1.20221105git690716b.fc36 golang-oras-1-1.2.1-1.fc36 golang-oras-2
• Fedora 37 update for golang-github-projectdiscovery-chaos-client
• Fedora 37 update for stargz-snapshotter
• Fedora 38 update for stargz-snapshotter
• Fedora 38 update for containernetworking-plugins
• Fedora 37 update for containernetworking-plugins
• Fedora 36 update for containernetworking-plugins
• Fedora 38 update for pack
• Fedora 37 update for pack
• Fedora 36 update for pack
• Fedora EPEL 9 update for pack
• Fedora EPEL 8 update for pack
• Fedora 38 update for golang-github-google-dap
• Fedora 36 update for gmailctl
• Fedora 37 update for gmailctl
• Fedora 38 update for gmailctl
• Fedora 38 update for reposurgeon
• Fedora 39 update for golang-github-onsi-ginkgo-2
• Fedora 39 update for golang-github-schollz-croc
• Fedora 38 update for golang-github-schollz-croc, golang-github-schollz-mnemonicode
• Fedora 39 update for golang-github-cloudflare-cfssl
• Fedora 39 update for golang-github-mailru-easyjson
• Fedora 37 update for aerc
• Fedora 38 update for aerc
• Fedora EPEL 7 update for caddy
• Fedora 39 update for caddy
• Fedora 39 update for golang-honnef-tools
• Fedora 40 update for chisel
• Multiple vulnerabilities in Oracle Solaris third-party software
• Multiple vulnerabilities in Service Binding Operator
• Fedora 38 update for exercism
• Fedora 37 update for exercism
• Fedora 39 update for exercism
• Fedora 37 update for htmltest
• Fedora 38 update for htmltest
• Fedora 39 update for htmltest
• Fedora 40 update for golang-github-cncf-xds, golang-github-envoyproxy-control-plane, golang-github-nats-io, golang-google-protobuf, nats-server
• Fedora 40 update for golang-github-colinmarc-hdfs-2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.13
• Multiple vulnerabilities in IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift
• Multiple vulnerabilities in Red Hat Satellite Client
• Fedora 40 update for dnsx
• Multiple vulnerabilities in IBM Cloud Pak System
• Red Hat Enterprise Linux 9 update for grafana
• Allocation of resources without limits or throttling in IBM Workload Scheduler
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring
• Multiple vulnerabilities in Oracle Linux
• Fedora 37 update for golang-github-openprinting-ipp-usb
• Gentoo update for Go
• Multiple vulnerabilities in Red Hat Satellite 6.14
• Fedora 40 update for golang-github-prometheus-node-exporter
• Fedora 40 update for golang-github-prometheus-prom2json
• Fedora 40 update for golang-github-rogpeppe-internal
• Multiple vulnerabilities in IBM MQ Operator
• Ubuntu update for golang-1.13
• Fedora 38 update for golang-x-mod
• Fedora EPEL 9 update for golang-x-mod
• Fedora 39 update for golang-x-mod
• Fedora 38 update for golang-x-text
• Fedora 39 update for golang-x-text
• Multiple vulnerabilities in Red Hat Ceph Storage 5.3
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in IBM QRadar Suite Software
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• openEuler 22.03 LTS SP1 update for golang
• openEuler 20.03 LTS SP1 update for golang
• openEuler 22.03 LTS update for golang
• openEuler 20.03 LTS SP3 update for golang
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4 for RHEL 9
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Amazon Linux AMI update for golang
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in IBM watsonx.data
• Gentoo update for Docker
• Gentoo update for HashiCorp Consul
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Anolis OS update for git-lfs
• Anolis OS update for multiple packages
• Fedora EPEL 9 update for node-exporter
• Fedora EPEL 9 update for rclone