Resource management error in Go programming language - CVE-2022-41724

Vulnerability identifier: #VU72685

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-41724

CWE-ID: CWE-399

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources in crypto/tls when handling large TLS handshake records. A remote attacker can send specially crafted data to the application and perform a denial of service (DoS) attack.

The vulnerability affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert).

Go programming language
Oracle Linux
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
Fedora
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Oracle Solaris
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Development Tools Module
Containers Module
openSUSE Leap
Ubuntu
openEuler
DB2 on Cloud Pak for Data
DB2 Warehouse on Cloud Pak for Data
Db2 Rest
ObjectScale
Dell EMC Streaming Data Platform
DB2 Data Management Console
IBM Cloud Pak for Watson AIOps
IBM Watson Machine Learning Accelerator
Watson CP4D Data Stores
IBM Sterling Order Management
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
Red Hat OpenShift Serverless
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Virtualization
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Consul Enterprise
Service Telemetry Framework
cert-manager Operator for Red Hat OpenShift
Consul
Ansible Automation Platform
Migration Toolkit for Virtualization
IBM Watson Assistant for IBM Cloud Pak for Data
Red Hat OpenStack
Operations Dashboard
Red Hat Application Interconnect
DataPower Operator
Netcool Operations Insight
Cryostat
IBM Cloud Pak for Multicloud Management Monitoring
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Data Replication on Cloud Pak for Data
IBM Decision Optimization for Cloud Pak for Data
IBM Cloud Pak for Data Scheduling
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
IBM Spectrum Protect Storage Agent
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes
IBM Spectrum Protect Plus
IBM Observability with Instana
Automation Assets in IBM Cloud Pak for Integration (CP4I)
Migration Toolkit for Containers
OpenShift Serverless Client
Red Hat OpenShift Container Platform
QRadar Suite
Event Streams
Cloud Pak for Data
golang-1.18 (Ubuntu package)
golang-1.18-src (Ubuntu package)
golang-1.18-go (Ubuntu package)
python-tox-current-env (Red Hat package)
python-testrepository (Red Hat package)
toolbox-tests
toolbox
python-nose-cover3 (Red Hat package)
toolbox (Red Hat package)
python-requests-unixsocket (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-m2r (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
udica
python-oslo-metrics (Red Hat package)
python-smi (Red Hat package)
python-logutils (Red Hat package)
python-entrypoints (Red Hat package)
python-colorama (Red Hat package)
python-zipp (Red Hat package)
conmon-rs (Red Hat package)
python-tempita (Red Hat package)
python-pyroute2 (Red Hat package)
python-msgpack (Red Hat package)
python-trustme (Red Hat package)
python-defusedxml (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-mistune (Red Hat package)
crudini (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-lockfile (Red Hat package)
python-voluptuous (Red Hat package)
python-scciclient (Red Hat package)
python-migrate (Red Hat package)
python-pyrsistent (Red Hat package)
tini (Red Hat package)
coreos-installer (Red Hat package)
python-fasteners (Red Hat package)
python-pytest-xprocess (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-eventlet (Red Hat package)
python-binary-memcached (Red Hat package)
qpid-proton (Red Hat package)
python-openstacksdk (Red Hat package)
ansible-runner-http (Red Hat package)
python-linecache2 (Red Hat package)
python-hacking (Red Hat package)
python-werkzeug (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
collectd-libpod-stats (Red Hat package)
python-editor (Red Hat package)
python-pretend (Red Hat package)
python-mox3 (Red Hat package)
python-kiwisolver (Red Hat package)
python-unittest2 (Red Hat package)
python-flask (Red Hat package)
python-greenlet (Red Hat package)
python-dogpile-cache (Red Hat package)
runc (Red Hat package)
runc
python-rfc3986 (Red Hat package)
slirp4netns
python-jsonpath-rw (Red Hat package)
oci-seccomp-bpf-hook
containernetworking-plugins
python-yappi (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-cmd2 (Red Hat package)
python-traceback2 (Red Hat package)
skupper-cli (Red Hat package)
python-ddt (Red Hat package)
python-alembic (Red Hat package)
python-kafka (Red Hat package)
ansible-runner (Red Hat package)
python-sqlalchemy (Red Hat package)
python-case (Red Hat package)
python-pyghmi (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
netavark
aardvark-dns
openshift-serverless-clients (Red Hat package)
crun (Red Hat package)
python-webob (Red Hat package)
crun
delve (Red Hat package)
jsoncpp (Red Hat package)
skopeo (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
fuse-overlayfs
skopeo
skopeo-tests
golang
golang-help
golang-devel
golang-1.17-go (Ubuntu package)
golang-1.17-src (Ubuntu package)
golang-1.17 (Ubuntu package)
grpc (Red Hat package)
go1.18-openssl
go1.18-openssl-doc
go1.18-openssl-race
go1.18
go1.18-doc
go1.18-race
golang-1.19 (Ubuntu package)
golang-1.19-go (Ubuntu package)
golang-1.19-src (Ubuntu package)
go-toolset (Red Hat package)
golang (Red Hat package)
go1.19-doc
go1.19-race
go1.19
go1.20-race
go1.20
go1.20-doc
golang-1.20-go (Ubuntu package)
golang-1.20 (Ubuntu package)
golang-1.20-src (Ubuntu package)
dev-lang/go
cri-tools (Red Hat package)
cri-o (Red Hat package)
buildah (Red Hat package)
buildah
buildah-tests
containers-common (Red Hat package)
python-memcached (Red Hat package)
containers-common
python-oslo-upgradecheck (Red Hat package)
python-markupsafe (Red Hat package)
python-waitress (Red Hat package)
python-testresources (Red Hat package)
python-itsdangerous (Red Hat package)
python-paste-deploy (Red Hat package)
python-webtest (Red Hat package)
python-os-client-config (Red Hat package)
python-uhashring (Red Hat package)
conmon (Red Hat package)
conmon
python-pytest-xdist (Red Hat package)
nmstate (Red Hat package)
haproxy (Red Hat package)
python-oslo-reports (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
container-suseconnect
python-futurist (Red Hat package)
skupper-router (Red Hat package)
python-routes (Red Hat package)
python-debtcollector (Red Hat package)
python-stestr (Red Hat package)
python-osc-lib (Red Hat package)
python-kazoo (Red Hat package)
python-os-traits (Red Hat package)
python-typeguard (Red Hat package)
python-construct (Red Hat package)
python-proliantutils (Red Hat package)
container-selinux (Red Hat package)
container-selinux
python-oslo-service (Red Hat package)
openvswitch3.0 (Red Hat package)
python-automaton (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
kata-containers (Red Hat package)
python-oslo-cache (Red Hat package)
python-cachetools (Red Hat package)
openvswitch3.1 (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-tooz (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-oslo-context (Red Hat package)
python-redis (Red Hat package)
etcd (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-pymemcache (Red Hat package)
python-oslo-policy (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
crit
criu-libs
criu-devel
criu
python3-criu
python-cliff (Red Hat package)
python-swiftclient (Red Hat package)
python-glanceclient (Red Hat package)
python-stevedore (Red Hat package)
python-oslo-serialization (Red Hat package)
libwebsockets (Red Hat package)
libslirp-devel
libslirp
libslirp (Red Hat package)
python-pyfakefs (Red Hat package)
python-decorator (Red Hat package)
python-oslotest (Red Hat package)
podman (Red Hat package)
python-sushy (Red Hat package)
pysnmp (Red Hat package)
python-oslo-log (Red Hat package)
python3-podman
podman-plugins
podman-tests
podman-remote
podman-gvproxy
podman-catatonit
podman
podman-docker
python-pexpect (Red Hat package)
python-rsa (Red Hat package)
python-ironicclient (Red Hat package)
openshift-clients (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-ansible (Red Hat package)
openshift-kuryr (Red Hat package)
openshift (Red Hat package)
kubevirt (Red Hat package)
python-oslo-middleware (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python-vine (Red Hat package)
python-keystoneclient (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-amqp (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
python-zope-interface (Red Hat package)
python-coverage (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python-oslo-utils (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-more-itertools (Red Hat package)
python-neutronclient (Red Hat package)
python-dracclient (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
python-service-identity (Red Hat package)
python-gunicorn (Red Hat package)
python-packaging (Red Hat package)
python-virtualenv (Red Hat package)
python-keyring (Red Hat package)
python-gevent (Red Hat package)
openstack-ironic (Red Hat package)
ovn22.12 (Red Hat package)
ovn23.03 (Red Hat package)
python-kubernetes (Red Hat package)
cockpit-podman
openstack-macros (Red Hat package)
watsonx.data
IBM Cloud Pak System
AMQ Broker

Install updates from vendor's website.

Go programming language - addressed in versions 1.19.6, 1.20.1
Red Hat OpenShift Serverless - update to 1.29.0
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.1.1
Consul Enterprise - addressed in versions 1.13.7, 1.13.8, 1.14.5, 1.15.0
OpenShift API for Data Protection (OADP) - update to 1.1.3
Service Telemetry Framework - update to 1.5.2
Migration Toolkit for Containers - update to 1.7.9
cert-manager Operator for Red Hat OpenShift - update to 1.10.3
QRadar Suite - update to 1.10.18.0
Consul - addressed in versions 1.13.7, 1.14.5
OpenShift Serverless Client - update to 1.29.0
Migration Toolkit for Virtualization - update to 2.4.3
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.12.23, 4.13.0, 4.13.1, 4.13.2, 4.13.4
Event Streams - update to 11.1.6
Red Hat OpenStack - update to 16.2.5
Operations Dashboard - update to 2022.2.1-9-lts
golang-1.18 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
python-tox-current-env (Red Hat package) - update to 0.0.6-1.el9
python-testrepository (Red Hat package) - update to 0.0.20-20.el9
toolbox-tests - update to 0.0.99.4-5.0.1
toolbox - update to 0.0.99.4-5.0.1
python-nose-cover3 (Red Hat package) - update to 0.1.0-31.el9
toolbox (Red Hat package) - update to 0.1.2-1.rhaos4.13.el9
python-requests-unixsocket (Red Hat package) - addressed in versions 0.1.5-5.el8ar, 0.2.0-2.el9
python-ifaddr (Red Hat package) - addressed in versions 0.1.6-5.el8ost, 0.1.6-6.el9
python-wcwidth (Red Hat package) - update to 0.1.7-14.el8ost
python-iso8601 (Red Hat package) - update to 0.1.12-9.el9
python-m2r (Red Hat package) - update to 0.2.1-3.1.20190604git66f4a5a.el9
python-zake (Red Hat package) - update to 0.2.2-19.el9
python-sqlparse (Red Hat package) - update to 0.2.4-10.el9
udica - update to 0.2.6-20
python-oslo-metrics (Red Hat package) - addressed in versions 0.3.0-0.20211020174122.43eee50.el8, 0.5.0-0.20221128141719.fc22d0d.el9
python-smi (Red Hat package) - update to 0.3.4-10.el9
python-logutils (Red Hat package) - update to 0.3.5-7.1.el9
python-entrypoints (Red Hat package) - update to 0.3-8.el9
python-colorama (Red Hat package) - update to 0.4.1-2.el9
python-zipp (Red Hat package) - addressed in versions 0.5.1-2.el8ost, 0.5.1-3.el9
conmon-rs (Red Hat package) - update to 0.5.1-5.rhaos4.13.git.el9
python-tempita (Red Hat package) - update to 0.5.1-25.el9
python-pyroute2 (Red Hat package) - update to 0.5.13-1.el8ost
python-msgpack (Red Hat package) - addressed in versions 0.6.2-1.el8ost, 0.6.2-2.el9
python-trustme (Red Hat package) - update to 0.7.0-1.el9
python-defusedxml (Red Hat package) - update to 0.7.1-1.el9
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el9
python-repoze-lru (Red Hat package) - update to 0.7-7.el9
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el9
python-dataclasses (Red Hat package) - update to 0.8-2.el9
python-mistune (Red Hat package) - update to 0.8.3-15.1.el9
crudini (Red Hat package) - update to 0.9.3-4.el9
python-pint (Red Hat package) - addressed in versions 0.10.1-1.el8ost, 0.10.1-3.el9
python-wsme (Red Hat package) - update to 0.11.0-0.20221128135154.80bda90.el9
python-lockfile (Red Hat package) - update to 0.11.0-8.el8ar
python-voluptuous (Red Hat package) - update to 0.11.7-3.el9
python-scciclient (Red Hat package) - update to 0.12.3-0.20221128150506.0940a71.el9
python-migrate (Red Hat package) - update to 0.13.0-2.el9
python-pyrsistent (Red Hat package) - update to 0.16.0-3.el8ost
tini (Red Hat package) - update to 0.16.1-1.el8ar
coreos-installer (Red Hat package) - update to 0.17.0-1.rhaos4.13.el9
python-fasteners (Red Hat package) - update to 0.18-1.el9
python-pytest-xprocess (Red Hat package) - update to 0.18.1-4.el9
python-zeroconf (Red Hat package) - addressed in versions 0.24.4-1.el8ost, 0.24.4-2.el9
python-hardware (Red Hat package) - update to 0.30.0-0.20221128155150.f6ff0ed.el9
python-eventlet (Red Hat package) - addressed in versions 0.30.2-1.el8, 0.33.1-4.el9
python-binary-memcached (Red Hat package) - update to 0.31.1-1.el9
qpid-proton (Red Hat package) - addressed in versions 0.37.0-2.el8ai, 0.37.0-2.el9ai
python-openstacksdk (Red Hat package) - update to 0.102.0-0.20221128160622.9a17781.el9
ansible-runner-http (Red Hat package) - update to 1.0.0-2.el8ar
python-linecache2 (Red Hat package) - update to 1.0.0-25.el9
Db2 Rest - update to 1.0.0.266
python-hacking (Red Hat package) - update to 1.0.1-0.20210812104123.865398f.el9
python-werkzeug (Red Hat package) - addressed in versions 1.0.1-3.el8ost, 2.0.3-4.el9
containernetworking-plugins (Red Hat package) - addressed in versions 1.0.1-6.rhaos4.13.el8, 1.0.1-7.rhaos4.13.el8, 1.3.0-4.el9
python-funcsigs (Red Hat package) - update to 1.0.2-17.el9
collectd-libpod-stats (Red Hat package) - update to 1.0.4-5.el8ost
python-editor (Red Hat package) - update to 1.0.4-5.el9
python-pretend (Red Hat package) - update to 1.0.8-19.el9
python-mox3 (Red Hat package) - update to 1.1.0-0.20210812114029.99a302f.el9
python-kiwisolver (Red Hat package) - update to 1.1.0-4.el9
python-unittest2 (Red Hat package) - update to 1.1.0-24.el9
python-flask (Red Hat package) - update to 1.1.1-1.el8ost
python-greenlet (Red Hat package) - update to 1.1.3-1.el9
python-dogpile-cache (Red Hat package) - update to 1.1.5-3.el9
runc (Red Hat package) - addressed in versions 1.1.6-3.rhaos4.13.el8, 1.1.6-3.rhaos4.13.el9, 1.1.6-4.rhaos4.13.el8, 1.1.9-1.el9
runc - update to 1.1.12-1.0.1
Network Observability plugin for the Openshift Console - update to 1.2.0
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el9
slirp4netns - update to 1.2.1-1
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el9
oci-seccomp-bpf-hook - update to 1.2.9-1
containernetworking-plugins - update to 1.3.0-8.0.1
python-yappi (Red Hat package) - update to 1.3.1-2.el9
python-pecan (Red Hat package) - update to 1.3.2-10.el9
python-warlock (Red Hat package) - update to 1.3.3-2.el9
Red Hat Application Interconnect - update to 1.4
ObjectScale - update to 1.4.0
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20221128134625.d7ac0ff.el9
python-cmd2 (Red Hat package) - update to 1.4.0-1.1.el8
python-traceback2 (Red Hat package) - update to 1.4.0-25.el9
skupper-cli (Red Hat package) - addressed in versions 1.4.1-2.el8, 1.4.1-2.el9
python-ddt (Red Hat package) - update to 1.4.2-1.el9
python-alembic (Red Hat package) - addressed in versions 1.4.2-5.el8ost, 1.6.0-1.el9
python-kafka (Red Hat package) - update to 1.4.3-3.el9
ansible-runner (Red Hat package) - update to 1.4.6-2.el8ar
python-sqlalchemy (Red Hat package) - update to 1.4.39-2.el9
python-case (Red Hat package) - update to 1.5.3-5.el9
python-pyghmi (Red Hat package) - update to 1.5.14-2.1.el8ost
python-pyperclip (Red Hat package) - update to 1.6.4-6.el8ost
DataPower Operator - update to 1.6.6
Netcool Operations Insight - update to 1.6.11
Dell EMC Streaming Data Platform - update to 1.7.0
python-os-service-types (Red Hat package) - update to 1.7.0-0.20221128134625.0b2f473.el9
python-importlib-metadata (Red Hat package) - addressed in versions 1.7.0-1.el8ost, 4.12.0-2.el9
netavark - update to 1.7.0-2.0.1
aardvark-dns - update to 1.7.0-2.0.1
openshift-serverless-clients (Red Hat package) - update to 1.8.1-3.el8
crun (Red Hat package) - update to 1.8.4-1.rhaos4.13.el9
python-webob (Red Hat package) - update to 1.8.5-5.el9
crun - update to 1.8.7-1
delve (Red Hat package) - update to 1.9.1-1.el9
jsoncpp (Red Hat package) - update to 1.9.4-3.el9
skopeo (Red Hat package) - addressed in versions 1.10.0-1.rhaos4.13.el9, 1.11.2-2.rhaos4.13.el8, 1.11.2-2.1.rhaos4.13.el9, 1.13.3-1.el9
fuse-overlayfs (Red Hat package) - update to 1.10-2.rhaos4.13.el8
python-pycdlib (Red Hat package) - update to 1.11.0-3.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el9
fuse-overlayfs - update to 1.12-1.0.1
skopeo - update to 1.13.3-3.0.1
skopeo-tests - update to 1.13.3-3.0.1
golang - update to 1.15.7-24
golang-help - update to 1.15.7-24
golang-devel - update to 1.15.7-24
golang-1.17-go (Ubuntu package) - update to 1.17.13-3ubuntu1.3
golang-1.17-src (Ubuntu package) - update to 1.17.13-3ubuntu1.3
golang-1.17 (Ubuntu package) - update to 1.17.13-3ubuntu1.3
grpc (Red Hat package) - update to 1.18.0-4.el8ost
golang - addressed in versions 1.18.6-1.43, 1.19.8-1
go1.18-openssl - update to 1.18.10.1-150000.1.9.1
go1.18-openssl-doc - update to 1.18.10.1-150000.1.9.1
go1.18-openssl-race - update to 1.18.10.1-150000.1.9.1
go1.18 - update to 1.18.10-150000.1.46.1
go1.18-doc - update to 1.18.10-150000.1.46.1
go1.18-race - update to 1.18.10-150000.1.46.1
golang-1.19 (Ubuntu package) - addressed in versions 1.19.2-1ubuntu1.1, 1.19.8-1ubuntu0.1
golang-1.19-go (Ubuntu package) - addressed in versions 1.19.2-1ubuntu1.1, 1.19.8-1ubuntu0.1
golang-1.19-src (Ubuntu package) - addressed in versions 1.19.2-1ubuntu1.1, 1.19.8-1ubuntu0.1
golang - update to 1.19.6-1.el7
go-toolset (Red Hat package) - update to 1.19.6-2.el9_2
golang (Red Hat package) - update to 1.19.6-2.el9_2
go1.19-doc - update to 1.19.7-150000.1.23.1
go1.19-race - update to 1.19.7-150000.1.23.1
go1.19 - update to 1.19.7-150000.1.23.1
go1.20-race - update to 1.20.2-150000.1.5.1
go1.20 - update to 1.20.2-150000.1.5.1
go1.20-doc - update to 1.20.2-150000.1.5.1
golang-1.20-go (Ubuntu package) - update to 1.20.3-1ubuntu0.1
golang-1.20 (Ubuntu package) - update to 1.20.3-1ubuntu0.1
golang-1.20-src (Ubuntu package) - update to 1.20.3-1ubuntu0.1
dev-lang/go - update to 1.20.10
cri-tools (Red Hat package) - update to 1.26.0-1.el9
cri-o (Red Hat package) - addressed in versions 1.26.3-3.rhaos4.13.git641290e.el9, 1.26.3-9.rhaos4.13.git994242a.el8, 1.26.3-10.rhaos4.13.git994242a.el9
buildah (Red Hat package) - addressed in versions 1.29.1-1.rhaos4.13.el9, 1.29.1-2.rhaos4.13.el8, 1.29.1-2.1.rhaos4.13.el9, 1.31.3-1.el9
buildah - update to 1.31.3-1
buildah-tests - update to 1.31.3-1
containers-common (Red Hat package) - update to 1-35.rhaos4.13.el9
python-memcached (Red Hat package) - update to 1.58-12.el9
containers-common - update to 1-71.0.1
python-oslo-upgradecheck (Red Hat package) - update to 2.0.0-0.20221128142932.b3a2b19.el9
python-markupsafe (Red Hat package) - update to 2.0.0-2.el9
python-waitress (Red Hat package) - update to 2.0.0-2.el9
watsonx.data - update to 2.0.1
python-testresources (Red Hat package) - update to 2.0.1-2.el9
python-itsdangerous (Red Hat package) - update to 2.0.1-2.el9
python-paste-deploy (Red Hat package) - addressed in versions 2.0.1-4.el8ost, 2.0.1-5.el9
python-webtest (Red Hat package) - update to 2.0.33-5.el9
python-os-client-config (Red Hat package) - update to 2.1.0-0.20210722194729.bc96c23.el9
python-uhashring (Red Hat package) - update to 2.1-2.el9
conmon (Red Hat package) - addressed in versions 2.1.7-1.rhaos4.13.el8, 2.1.7-1.rhaos4.13.el9, 2.1.7-2.rhaos4.13.el8, 2.1.7-2.1.rhaos4.13.el9
conmon - update to 2.1.8-1
python-pytest-xdist (Red Hat package) - update to 2.2.1-1.el9
nmstate (Red Hat package) - update to 2.2.9-6.rhaos4.13.el8
haproxy (Red Hat package) - update to 2.2.24-3.rhaos4.13.el8
Cryostat - update to 2.3.0
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 7
python-oslo-reports (Red Hat package) - update to 2.3.0-0.20211012151507.f2799dc.el9
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el9
python-munch (Red Hat package) - update to 2.3.2-7.el9
IBM Cloud Pak System - addressed in versions 2.3.3.6 iFix 1, 2.3.3.7
container-suseconnect - update to 2.4.0-150000.4.24.1
python-futurist (Red Hat package) - update to 2.4.1-0.20221128140910.159d752.el9
skupper-router (Red Hat package) - addressed in versions 2.4.1-2.el8, 2.4.1-2.el9
python-routes (Red Hat package) - update to 2.4.1-12.el9
python-debtcollector (Red Hat package) - update to 2.5.0-0.20221128140303.a6b46c5.el9
python-stestr (Red Hat package) - update to 2.6.0-8.el9
python-osc-lib (Red Hat package) - update to 2.6.2-0.20221128150506.d438afa.el9
python-kazoo (Red Hat package) - update to 2.7.0-2.el9
python-os-traits (Red Hat package) - update to 2.9.0-0.20221128153153.fc91a78.el9
python-typeguard (Red Hat package) - update to 2.9.1-1.el9
python-construct (Red Hat package) - addressed in versions 2.10.56-1.el8ost, 2.10.56-2.el9
python-proliantutils (Red Hat package) - update to 2.14.0-0.20221128154535.de9759c.el9
container-selinux (Red Hat package) - addressed in versions 2.208.0-2.rhaos4.13.el8, 2.208.0-2.rhaos4.13.el9
container-selinux - update to 2.221.0-1
python-oslo-service (Red Hat package) - update to 3.0.0-0.20221128144658.a27acfe.el9
openvswitch3.0 (Red Hat package) - update to 3.0.0-28.el9fdp
python-automaton (Red Hat package) - update to 3.0.1-0.20221128143847.0ea747e.el9
python-oslo-versionedobjects (Red Hat package) - update to 3.0.1-0.20221128145846.2b12029.el9
kata-containers (Red Hat package) - update to 3.0.2-5.el9
python-oslo-cache (Red Hat package) - update to 3.1.0-0.20221129203427.7fb06bc.el9
python-cachetools (Red Hat package) - update to 3.1.0-4.el9
openvswitch3.1 (Red Hat package) - update to 3.1.0-10.el9fdp
python-pycadf (Red Hat package) - update to 3.1.1-0.20221128135153.4179996.el9
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20221128155706.eb27243.el9
python-bcrypt (Red Hat package) - update to 3.1.6-3.el9
DB2 Data Management Console - update to 3.1.13
python-tooz (Red Hat package) - update to 3.2.0-0.20221128162335.1a76dd6.el9
python-jsonschema (Red Hat package) - update to 3.2.0-5.el8ost
python-statsd (Red Hat package) - update to 3.2.1-20.el9
python-paste (Red Hat package) - update to 3.2.4-1.el8ost
python-oslo-context (Red Hat package) - addressed in versions 3.3.1-0.20211012152439.641a1e0.el8, 5.0.0-0.20221128142633.f388eb9.el9
python-redis (Red Hat package) - update to 3.3.8-2.el9
etcd (Red Hat package) - update to 3.3.23-14.el8ost
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el9
python-osprofiler (Red Hat package) - update to 3.4.3-0.20221128140710.3286301.el9
python-pymemcache (Red Hat package) - update to 3.5.0-1.el9
python-oslo-policy (Red Hat package) - addressed in versions 3.8.2-0.20211012161944.c7fd9f4.el8, 4.0.0-0.20221128143837.5bd767b.el9
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el9
crit - update to 3.18-5
criu-libs - update to 3.18-5
criu-devel - update to 3.18-5
criu - update to 3.18-5
python3-criu - update to 3.18-5
python-cliff (Red Hat package) - update to 4.0.0-0.20221128185800.58c853d.el9
python-swiftclient (Red Hat package) - update to 4.1.0-0.20221128153149.662e530.el9
python-glanceclient (Red Hat package) - update to 4.1.0-0.20221128153803.f2999ce.el9
python-stevedore (Red Hat package) - update to 4.1.0-0.20221128161654.9eb8094.el9
IBM Cloud Pak for Watson AIOps - update to 4.1.2
IBM Watson Machine Learning Accelerator - addressed in versions 4.2.0, 4.8.0
python-oslo-serialization (Red Hat package) - addressed in versions 4.2.0-0.20211012151454.2b94a4f.el8, 5.0.0-0.20221128142424.dd2a819.el9
libwebsockets (Red Hat package) - addressed in versions 4.3.1-1.el8ai, 4.3.1-1.el9ai
libslirp-devel - update to 4.4.0-1
libslirp - update to 4.4.0-1
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-pyfakefs (Red Hat package) - update to 4.4.0-4.el9
python-decorator (Red Hat package) - update to 4.4.0-6.el9
python-oslotest (Red Hat package) - update to 4.4.1-0.20210812115053.aaf3a72.el9
podman (Red Hat package) - addressed in versions 4.4.1-3.rhaos4.13.el8, 4.4.1-3.rhaos4.13.el9, 4.4.1-4.rhaos4.13.el8, 4.4.1-5.1.rhaos4.13.el9, 4.6.1-5.el9
python-sushy (Red Hat package) - update to 4.4.3-0.20230425095526.9f708cf.el9
pysnmp (Red Hat package) - update to 4.4.12-6.el9
python-oslo-log (Red Hat package) - addressed in versions 4.6.0-0.20211012154701.41c8807.el8, 5.0.0-0.20221128143137.6401da7.el9
python3-podman - update to 4.6.0-1
podman-plugins - update to 4.6.1-8.0.1
podman-tests - update to 4.6.1-8.0.1
podman-remote - update to 4.6.1-8.0.1
podman-gvproxy - update to 4.6.1-8.0.1
podman-catatonit - update to 4.6.1-8.0.1
podman - update to 4.6.1-8.0.1
podman-docker - update to 4.6.1-8.0.1
python-pexpect (Red Hat package) - addressed in versions 4.6-2.el8ar, 4.6-3.el9
Watson CP4D Data Stores - update to 4.7.0
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.7.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.7.1
Data Replication on Cloud Pak for Data - update to 4.7.1
python-rsa (Red Hat package) - update to 4.7-1.el8
IBM Decision Optimization for Cloud Pak for Data - update to 4.8
IBM Cloud Pak for Data Scheduling - update to 4.8.0
Cloud Pak for Data - update to 4.8.5
python-ironicclient (Red Hat package) - update to 4.9.0-0.20211209154934.6f1be06.el9
openshift-clients (Red Hat package) - addressed in versions 4.12.0-202307200611.p0.g49844f7.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
atomic-openshift-service-idler (Red Hat package) - update to 4.13.0-202303172327.p0.ga0f9090.assembly.stream.el8
openshift4-aws-iso (Red Hat package) - update to 4.13.0-202304052215.p0.gd2acdd5.assembly.stream.el8
openshift-ansible (Red Hat package) - addressed in versions 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9
openshift-kuryr (Red Hat package) - update to 4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
openshift (Red Hat package) - addressed in versions 4.13.0-202304211155.p0.gb404935.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el9, 4.13.0-202306072143.p0.g7d22122.assembly.stream.el8, 4.13.0-202306072143.p0.g7d22122.assembly.stream.el9
OpenShift Virtualization - update to 4.14.0
kubevirt (Red Hat package) - update to 4.14.1-2150.el8
python-oslo-middleware (Red Hat package) - update to 5.0.0-0.20221128142027.51e1882.el9
python-keystoneauth1 (Red Hat package) - update to 5.0.0-0.20221128144522.2445a5d.el9
python-sushy-oem-idrac (Red Hat package) - update to 5.0.0-0.20221128204359.da9a0e4.el9
python-vine (Red Hat package) - update to 5.0.0-3.el9
python-keystoneclient (Red Hat package) - update to 5.0.1-0.20221128145838.bc8e9e7.el9
python-oslo-concurrency (Red Hat package) - update to 5.0.1-0.20221129205158.01cf2ff.el9
App Connect Enterprise Certified Container - addressed in versions 5.0.6, 8.1.0
python-amqp (Red Hat package) - update to 5.0.6-1.el9
python-oslo-i18n (Red Hat package) - addressed in versions 5.1.0-0.20211012165753.b031d17.el8, 5.1.0-0.20221128135758.b031d17.el9
python-ironic-lib (Red Hat package) - update to 5.3.0-0.20221128152640.340a4b2.el9
python-zope-interface (Red Hat package) - update to 5.4.0-1.el9
python-coverage (Red Hat package) - update to 5.6-0.1b1.el9
kernel (Red Hat package) - addressed in versions 5.14.0-284.13.1.el9_2, 5.14.0-284.18.1.el9_2
kernel-rt (Red Hat package) - addressed in versions 5.14.0-284.13.1.rt14.298.el9_2, 5.14.0-284.18.1.rt14.303.el9_2
python-oslo-utils (Red Hat package) - update to 6.0.1-0.20221128145135.760deb9.el9
Red Hat Migration Toolkit for Applications - update to 6.2.0
python-tenacity (Red Hat package) - addressed in versions 6.2.0-1.el8ost, 6.2.0-2.el9
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20221128140202.1b1b960.el9
python-more-itertools (Red Hat package) - update to 7.2.0-3.el9
python-neutronclient (Red Hat package) - update to 7.6.0-0.20211012175718.983f0ab.el9
AMQ Broker - update to 7.12.0
python-dracclient (Red Hat package) - update to 8.0.0-0.20221128135758.9c7499c.el9
IBM Spectrum Protect Storage Agent - update to 8.1.19
python-oslo-config (Red Hat package) - addressed in versions 8.7.1-0.20211012155707.1a7bd66.el8, 9.0.0-0.20221128141318.9eaae04.el9
python-oslo-db (Red Hat package) - addressed in versions 9.1.0-0.20211020204148.be2cc6a.el8, 12.2.0-0.20221128163146.a191d2e.el9
python-cinderclient (Red Hat package) - update to 9.1.0-0.20221128151726.730a8c7.el9
openstack-ironic-python-agent (Red Hat package) - update to 9.2.0-0.20221128164006.a167075.el9
IBM Sterling Order Management - update to 10.0.2403.1
python-keystonemiddleware (Red Hat package) - update to 10.1.0-0.20221128152538.f7ac6a1.el9
IBM Spectrum Protect Plus Container Backup and Restore for OpenShift - update to 10.1.12.4
IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes - update to 10.1.12.4
IBM Spectrum Protect Plus - update to 10.1.15
openstack-ironic-inspector (Red Hat package) - update to 11.2.0-0.20221128164644.d83454c.el9
python-oslo-messaging (Red Hat package) - addressed in versions 12.9.1-0.20211020204149.f9de265.el8, 14.0.0-0.20221128151928.e44f286.el9
python-service-identity (Red Hat package) - update to 18.1.0-9.1.el9
Dell PowerProtect Cyber Recovery - update to 19.14.0.2
python-gunicorn (Red Hat package) - update to 20.0.4-2.el9
python-packaging (Red Hat package) - update to 20.4-1.el8ost
python-virtualenv (Red Hat package) - update to 20.4.4-1.el9
python-keyring (Red Hat package) - update to 21.0.0-2.el9
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.6, 23.0.6
python-gevent (Red Hat package) - update to 21.1.2-1.el9
openstack-ironic (Red Hat package) - update to 21.2.0-0.20221209211422.b70b418.el9
ovn22.12 (Red Hat package) - update to 22.12.0-25.el9fdp
ovn23.03 (Red Hat package) - update to 23.03.0-7.el9fdp
python-kubernetes (Red Hat package) - update to 25.3.0-1.el8
cockpit-podman - update to 75-1
IBM Observability with Instana - update to 281
openstack-macros (Red Hat package) - update to 2020.1.2-1.el9
Automation Assets in IBM Cloud Pak for Integration (CP4I) - update to 2022.2.1-7
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2022.2.1-8, 2022.4.1-3

• https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E
• https://pkg.go.dev/vuln/GO-2023-1570
• https://go.dev/cl/468125
• https://go.dev/issue/58001

• Multiple vulnerabilities in Go programming language
• Consul update for Go programming language
• Resource management error in DataPower Operator
• HashiCorp Consul update for Go
• SUSE update for go1.20
• SUSE update for go1.19
• SUSE update for go1.18
• SUSE update for container-suseconnect
• Multiple vulnerabilities in Operations Dashboard
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Network Observability for OpenShift
• Amazon Linux AMI update for golang
• IBM App Connect Enterprise Certified Container update for go
• Multiple vulnerabilities in IBM Db2 REST
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• OpenShift Container Platform release 4.13 update for golang
• Multiple vulnerabilities in Red Hat build of Cryostat on RHEL 8
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift
• Multiple vulnerabilities in IBM Event Streams
• SUSE update for go1.18-openssl
• OpenShift Container Platform 4.13 update for golang
• Multiple vulnerabilities in OpenShift Serverless Client
• Red Hat OpenStack Platform 16 update for etcd
• Multiple vulnerabilities in OpenShift Serverless
• Ubuntu update for golang-1.19
• OpenShift Container Platform 4.13 update for golang
• Multiple vulnerabilities in HashiCorp consul
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in IBM Storage Protect Server
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• Multiple vulnerabilities in Oracle Solaris third-party software
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in OpenShift Container Platform 4.12
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Platform Navigator and Automation Assets in IBM Cloud Pak for Integration
• Multiple vulnerabilities in Dell Streaming Data Platform
• Resource management error in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Resource management error in IBM Watson CP4D Data Stores
• Red Hat Ansible Automation Platform 2.3 update for golang
• Multiple vulnerabilities in cert-manager Operator for Red Hat OpenShift
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Multiple vulnerabilities in Red Hat Application Interconnect
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications
• Fedora EPEL 7 update for golang
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.13
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Multiple vulnerabilities in IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Red Hat Enterprise Linux 9 update for golang
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 9 update for buildah
• Red Hat Enterprise Linux 9 update for containernetworking-plugins
• Red Hat Enterprise Linux 9 update for runc
• Red Hat Enterprise Linux 9 update for skopeo
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Red Hat Enterprise Linux 8 update for the container-tools:4.0 module
• Multiple vulnerabilities in OpenShift Virtualization
• Gentoo update for Go
• Multiple vulnerabilities in OpenShift Virtualization 4.14.1 RPMs
• Multiple vulnerabilities in IBM Netcool Operations Insight
• Resource management error in IBM Cloud Pak System.
• Multiple vulnerabilities in IBM Decision Optimization for Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in IBM QRadar Suite Software
• Multiple vulnerabilities in IBM Cloud Pak for Data Scheduling
• openEuler update for golang
• Multiple vulnerabilities in IBM Sterling Order Management
• Multiple vulnerabilities in AMQ Broker 7.12
• Resource management error in Data Replication on Cloud Pak for Data
• Amazon Linux AMI update for golang
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM watsonx.data
• Multiple vulnerabilities in IBM Observability with Instana
• Ubuntu update for golang-1.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Ubuntu update for golang-1.18
• Anolis OS update for container-tools:an8 module
• Multiple vulnerabilities in IBM DB2 Data Management Console