Improper Certificate Validation in Go programming language - CVE-2023-29409

Vulnerability identifier: #VU78913

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-29409

CWE-ID: CWE-295

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to verifying certificate chains containing large RSA keys is slow. A remote attacker can cause a client/server to expend significant CPU time verifying signatures.

Go programming language
Amazon Linux AMI
Gentoo Linux
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE CaaS Platform
SUSE Manager Proxy Module
SUSE Manager Server Module
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro
Fedora
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise High Performance Computing
Development Tools Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
AdGuard Home
IBM Qradar SIEM
Event Streams
Red Hat OpenShift Serverless
OpenShift Data Foundation (formerly OpenShift Container Storage)
Run Once Duration Override Operator for Red Hat OpenShift
Service Telemetry Framework
cert-manager Operator for Red Hat OpenShift
Consul Enterprise
Cryostat
IBM Spectrum Copy Data Management
Migration Toolkit for Virtualization
Red Hat OpenShift distributed tracing (RHOSDT)
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
OpenShift Logging
Red Hat OpenStack
Operations Dashboard
Automation Assets in IBM Cloud Pak for Integration (CP4I)
DataPower Operator
IBM MQ Operator
IBM Cloud Pak for Data Scheduling
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
IBM Observability with Instana
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Migration Toolkit for Containers
OpenShift Serverless Client
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
Juniper Secure Analytics (JSA)
Splunk Enterprise
IBM Business Automation Manager Open Editions
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
ObjectScale
Cloud Pak for Network Automation
IBM Cloud Pak for Watson AIOps
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
Storage Protect Server
IBM Sterling Order Management
Storage Protect Plus Container Agent
Storage Protect Plus Server
Robotic Process Automation for Cloud Pak
toolbox-tests
toolbox
scap-security-guide-redhat
firewalld-prometheus-config
saltboot-formula
image-sync-formula
udica
inter-server-sync
inter-server-sync-debuginfo
billing-data-service
golang-github-QubitProducts-exporter_exporter-debugsource
golang-github-QubitProducts-exporter_exporter-debuginfo
golang-github-QubitProducts-exporter_exporter
amazon-ecr-credential-helper
hub-xmlrpc-api
grafana-formula
prometheus-postgres_exporter
golang-github-prometheus-alertmanager
prometheus-blackbox_exporter
prometheus-blackbox_exporter-debuginfo
golang-github-lusitaniae-apache_exporter
golang-github-lusitaniae-apache_exporter-debugsource
golang-github-lusitaniae-apache_exporter-debuginfo
collectd-libpod-stats (Red Hat package)
nerdctl
runc (Red Hat package)
runc
cni-plugins
slirp4netns
oci-seccomp-bpf-hook
prometheus-exporters-formula
containernetworking-plugins
python-octavia-tests-tempest (Red Hat package)
receptor (Red Hat package)
containerd
golang-github-prometheus-node_exporter-debugsource
golang-github-prometheus-node_exporter-debuginfo
golang-github-prometheus-node_exporter
openshift-serverless-clients (Red Hat package)
aardvark-dns
netavark
fuse-overlayfs
skopeo (Red Hat package)
crun
skopeo
skopeo-tests
golang-devel
golang-help
golang
go1.19
go1.19-race
go1.19-doc
golang (Red Hat package)
go-toolset (Red Hat package)
go1.19-openssl
go1.19-openssl-race
go1.19-openssl-doc
go1.20
go1.20-debuginfo
go1.20-race
go1.20-doc
go1.20-openssl
go1.20-openssl-debuginfo
go1.20-openssl-doc
go1.20-openssl-race
golang-shared
golang-docs
golang-bin
golang-misc
golang-src
golang-tests
dev-lang/go
cri-o (Red Hat package)
buildah (Red Hat package)
buildah-tests
buildah
containers-common
amazon-cloudwatch-agent
conmon
golang-github-prometheus-prometheus
container-selinux (Red Hat package)
container-selinux
amazon-ssm-agent
cobbler
etcd (Red Hat package)
criu-devel
criu-libs
python3-criu
crit
criu
spacewalk-reports
spacewalk-setup
spacewalk-utils
spacewalk-utils-extras
spacecmd
susemanager-schema
spacewalk-backend-applet
spacewalk-backend-sql
spacewalk-backend-tools
spacewalk-backend-xmlrpc
spacewalk-backend-config-files
spacewalk-backend-server
spacewalk-backend-config-files-tool
spacewalk-backend-sql-postgresql
spacewalk-backend-app
spacewalk-backend
spacewalk-backend-xml-export-libs
spacewalk-backend-package-push-server
spacewalk-backend-iss-export
spacewalk-backend-iss
spacewalk-backend-config-files-common
susemanager-sls
uyuni-config-modules
spacewalk-base
spacewalk-html
spacewalk-base-minimal-config
spacewalk-base-minimal
susemanager
susemanager-tools
spacewalk-java-postgresql
spacewalk-java-lib
spacewalk-java
spacewalk-java-config
spacewalk-taskomatic
susemanager-docs_en-pdf
susemanager-docs_en
susemanager-doc-indexes
supportutils-plugin-susemanager-client
supportutils-plugin-susemanager-proxy
release-notes-susemanager-proxy
release-notes-susemanager
python2-uyuni-common-libs
python3-uyuni-common-libs
supportutils-plugin-susemanager
spacewalk-config
spacewalk-admin
spacewalk-certs-tools
python3-spacewalk-certs-tools
susemanager-schema-utility
libslirp-devel
libslirp
podman (Red Hat package)
python3-podman
podman-tests
podman-remote
podman-plugins
podman-gvproxy
podman-docker
podman-catatonit
podman
openshift-clients (Red Hat package)
openshift (Red Hat package)
microshift (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python3-pyvmomi
grafana
grafana-debuginfo
ovn23.09 (Red Hat package)
docker
cockpit-podman
IBM Cloud Pak System
IBM Security Verify Access

Install updates from vendor's website.

Go programming language - addressed in versions 1.19.12, 1.20.7, 1.21 rc4
AdGuard Home - addressed in versions 0.107.36, 0.108.0-b.43
Red Hat OpenShift Serverless - update to 1.30.2
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.0.1
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.1.3
Service Telemetry Framework - update to 1.5.2
Migration Toolkit for Containers - addressed in versions 1.7.14, 1.8.2
cert-manager Operator for Red Hat OpenShift - update to 1.11.5
Consul Enterprise - addressed in versions 1.14.9, 1.15.5, 1.16.1
OpenShift Serverless Client - update to 1.30.2
IBM Spectrum Copy Data Management - update to 2.2.21.0
IBM Cloud Pak for Multicloud Management - update to 2.3.8
Migration Toolkit for Virtualization - update to 2.4.3
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.0
Red Hat OpenShift Container Platform - addressed in versions 4.12.45, 4.13.22, 4.13.24, 4.14.2, 4.14.4
OpenShift Logging - addressed in versions 5.6.12, 5.7.7
IBM Qradar SIEM - update to 7.5.0 Update Pack 9 IF01
Juniper Secure Analytics (JSA) - update to 7.5.0 UP9 IF02
IBM Business Automation Manager Open Editions - update to 9.0.1
Splunk Enterprise - addressed in versions 9.0.8, 9.1.3
Red Hat OpenStack - addressed in versions 16.2.5, 17.1.1
Operations Dashboard - update to 2022.2.1-15-lts
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2022.2.1-13, 2023.2.1-2
Automation Assets in IBM Cloud Pak for Integration (CP4I) - update to 2022.2.1-12
toolbox-tests - update to 0.0.99.5-2.0.1
toolbox - update to 0.0.99.5-2.0.1
scap-security-guide-redhat - update to 0.1.69-1.12.2
firewalld-prometheus-config - update to 0.1-150000.3.50.3
saltboot-formula - update to 0.1.1692188980.9aa0455-150400.3.12.13
image-sync-formula - update to 0.1.1692188980.9aa0455-150400.3.15.13
udica - update to 0.2.6-21
inter-server-sync - addressed in versions 0.3.0-150300.8.36.1, 0.3.0-150400.3.21.15
inter-server-sync-debuginfo - addressed in versions 0.3.0-150300.8.36.1, 0.3.0-150400.3.21.15
billing-data-service - update to 0.3-150400.10.6.13
golang-github-QubitProducts-exporter_exporter-debugsource - update to 0.4.0-1.6.1
golang-github-QubitProducts-exporter_exporter-debuginfo - update to 0.4.0-1.6.1
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-1.6.1, 0.4.0-1.12.2, 0.4.0-150000.1.18.3
amazon-ecr-credential-helper - update to 0.7.1-2
hub-xmlrpc-api - addressed in versions 0.7-150300.3.14.2, 0.7-150400.5.9.15
grafana-formula - update to 0.9.0-150400.3.12.1
prometheus-postgres_exporter - addressed in versions 0.10.1-1.9.2, 0.10.1-1.14.3, 0.10.1-150000.1.14.3, 0.10.1-150400.3.6.17
golang-github-prometheus-alertmanager - addressed in versions 0.23.0-1.21.2, 0.23.0-150100.4.16.2
prometheus-blackbox_exporter - addressed in versions 0.24.0-1.23.2, 0.24.0-150000.1.23.3
prometheus-blackbox_exporter-debuginfo - update to 0.24.0-1.23.2
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.0-1.8.1, 1.0.0-1.18.2, 1.0.0-150000.1.17.2
golang-github-lusitaniae-apache_exporter-debugsource - update to 1.0.0-1.8.1
golang-github-lusitaniae-apache_exporter-debuginfo - update to 1.0.0-150000.1.17.2
collectd-libpod-stats (Red Hat package) - addressed in versions 1.0.4-5.el8ost, 1.0.5-6.el9ost
nerdctl - update to 1.1.0-1
runc (Red Hat package) - update to 1.1.9-2.el9_3
runc - update to 1.1.12-1.0.1
cni-plugins - update to 1.2.0-1
slirp4netns - update to 1.2.3-1
oci-seccomp-bpf-hook - update to 1.2.10-1
prometheus-exporters-formula - update to 1.3.0-150400.3.3.13
ObjectScale - update to 1.4.0
containernetworking-plugins - update to 1.4.0-2.0.1
python-octavia-tests-tempest (Red Hat package) - addressed in versions 1.4.1-2.20230111145026.f7718ef.el8ost, 1.9.0-1.20230509101018.el9ost
receptor (Red Hat package) - addressed in versions 1.4.2-1.el8ap, 1.4.2-1.el9ap
containerd - addressed in versions 1.4.13-5, 1.7.2-1
golang-github-prometheus-node_exporter-debugsource - update to 1.5.0-1.9.2
golang-github-prometheus-node_exporter-debuginfo - update to 1.5.0-1.9.2
golang-github-prometheus-node_exporter - addressed in versions 1.5.0-1.9.2, 1.5.0-1.27.2, 1.5.0-150100.3.26.2
DataPower Operator - addressed in versions 1.6.9, 1.8.0
openshift-serverless-clients (Red Hat package) - update to 1.9.2-4.el8
aardvark-dns - update to 1.10.0-2.0.1
netavark - update to 1.10.3-1.0.1
fuse-overlayfs - update to 1.13-1.0.1
skopeo (Red Hat package) - update to 1.13.3-3.el9_3
crun - update to 1.14.3-2
skopeo - update to 1.14.3-2.0.1
skopeo-tests - update to 1.14.3-2.0.1
golang-devel - addressed in versions 1.15.7-32, 1.17.3-21, 1.17.3-22
golang-help - addressed in versions 1.15.7-32, 1.17.3-21, 1.17.3-22
golang - addressed in versions 1.15.7-32, 1.17.3-21, 1.17.3-22
go1.19 - update to 1.19.12-150000.1.40.1
go1.19-race - update to 1.19.12-150000.1.40.1
go1.19-doc - update to 1.19.12-150000.1.40.1
golang - update to 1.19.13-1.el7
golang (Red Hat package) - update to 1.19.13-1.el9_2
go-toolset (Red Hat package) - update to 1.19.13-1.el9_2
go1.19-openssl - update to 1.19.13.1-150000.1.8.1
go1.19-openssl-race - update to 1.19.13.1-150000.1.8.1
go1.19-openssl-doc - update to 1.19.13.1-150000.1.8.1
golang - addressed in versions 1.20.7-1, 1.20.8-1.47
go1.20 - update to 1.20.7-150000.1.20.1
go1.20-debuginfo - update to 1.20.7-150000.1.20.1
go1.20-race - update to 1.20.7-150000.1.20.1
go1.20-doc - update to 1.20.7-150000.1.20.1
go1.20-openssl - update to 1.20.8.1-150000.1.11.1
go1.20-openssl-debuginfo - update to 1.20.8.1-150000.1.11.1
go1.20-openssl-doc - update to 1.20.8.1-150000.1.11.1
go1.20-openssl-race - update to 1.20.8.1-150000.1.11.1
golang-shared - update to 1.20.9-1
golang-docs - update to 1.20.9-1
golang-bin - update to 1.20.9-1
golang - update to 1.20.9-1
golang-misc - update to 1.20.9-1
golang-src - update to 1.20.9-1
golang-tests - update to 1.20.9-1
dev-lang/go - update to 1.20.10
cri-o (Red Hat package) - addressed in versions 1.27.1-13.1.rhaos4.14.git956c5f7.el8, 1.27.1-13.1.rhaos4.14.git956c5f7.el9, 1.27.3-2.rhaos4.14.git03502b6.el8, 1.27.3-2.rhaos4.14.git03502b6.el9
buildah (Red Hat package) - update to 1.31.3-2.el9_3
buildah-tests - update to 1.33.7-1
buildah - update to 1.33.7-1
containers-common - update to 1-81.0.1
amazon-cloudwatch-agent - update to 1.300026.2-1
IBM MQ Operator - addressed in versions 2.0.17, 3.0.0
conmon - update to 2.1.10-1
IBM Cloud Pak System - update to 2.3.3.7 iFix 01
Cloud Pak for Network Automation - update to 2.7
golang-github-prometheus-prometheus - addressed in versions 2.45.0-1.47.3, 2.45.0-150000.3.50.3
container-selinux (Red Hat package) - addressed in versions 2.223.0-1.rhaos4.14.el8, 2.223.0-2.rhaos4.14.el9
container-selinux - update to 2.229.0-2
amazon-ssm-agent - update to 3.2.1630.0-1
cobbler - update to 3.3.3-150400.5.33.13
etcd (Red Hat package) - addressed in versions 3.3.23-15.el8ost, 3.4.26-3.el9ost
criu-devel - update to 3.18-5.0.1
criu-libs - update to 3.18-5.0.1
python3-criu - update to 3.18-5.0.1
crit - update to 3.18-5.0.1
criu - update to 3.18-5.0.1
spacewalk-reports - update to 4.2.8-150300.3.12.3
spacewalk-setup - addressed in versions 4.2.13-150300.3.21.3, 4.3.18-150400.3.27.13
spacewalk-utils - update to 4.2.20-150300.3.27.3
spacewalk-utils-extras - update to 4.2.20-150300.3.27.3
spacecmd - addressed in versions 4.2.24-150300.4.42.3, 4.3.23-1.18.2, 4.3.23-38.127.3, 4.3.23-150000.3.104.2, 4.3.23-150400.3.24.13
susemanager-schema - addressed in versions 4.2.29-150300.3.41.5, 4.3.20-150400.3.24.17
spacewalk-backend-applet - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-sql - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-tools - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-xmlrpc - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-config-files - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-server - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-config-files-tool - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-sql-postgresql - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-app - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-xml-export-libs - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-package-push-server - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-iss-export - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-iss - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
spacewalk-backend-config-files-common - addressed in versions 4.2.29-150300.4.44.5, 4.3.23-150400.3.27.19
susemanager-sls - addressed in versions 4.2.35-150300.3.54.3, 4.3.35-150400.3.31.12
uyuni-config-modules - addressed in versions 4.2.35-150300.3.54.3, 4.3.35-150400.3.31.12
spacewalk-base - addressed in versions 4.2.36-150300.3.47.5, 4.3.33-150400.3.27.16
spacewalk-html - addressed in versions 4.2.36-150300.3.47.5, 4.3.33-150400.3.27.16
spacewalk-base-minimal-config - addressed in versions 4.2.36-150300.3.47.5, 4.3.33-150400.3.27.16
spacewalk-base-minimal - addressed in versions 4.2.36-150300.3.47.5, 4.3.33-150400.3.27.16
susemanager - addressed in versions 4.2.44-150300.3.59.1, 4.3.31-150400.3.36.12
susemanager-tools - addressed in versions 4.2.44-150300.3.59.1, 4.3.31-150400.3.36.12
spacewalk-java-postgresql - addressed in versions 4.2.55-150300.3.73.2, 4.3.66-150400.3.60.1
spacewalk-java-lib - addressed in versions 4.2.55-150300.3.73.2, 4.3.66-150400.3.60.1
spacewalk-java - addressed in versions 4.2.55-150300.3.73.2, 4.3.66-150400.3.60.1
spacewalk-java-config - addressed in versions 4.2.55-150300.3.73.2, 4.3.66-150400.3.60.1
spacewalk-taskomatic - addressed in versions 4.2.55-150300.3.73.2, 4.3.66-150400.3.60.1
susemanager-docs_en-pdf - addressed in versions 4.2-150300.12.48.3, 4.3-150400.9.38.2
susemanager-docs_en - addressed in versions 4.2-150300.12.48.3, 4.3-150400.9.38.2
susemanager-doc-indexes - update to 4.2-150300.12.48.5
supportutils-plugin-susemanager-client - addressed in versions 4.3.3-6.27.2, 4.3.3-150000.3.21.2, 4.3.3-150400.3.3.13
supportutils-plugin-susemanager-proxy - update to 4.3.3-150400.3.3.13
release-notes-susemanager-proxy - update to 4.3.8-150400.3.61.2
release-notes-susemanager - update to 4.3.8-150400.3.77.1
python2-uyuni-common-libs - update to 4.3.9-1.36.3
python3-uyuni-common-libs - addressed in versions 4.3.9-150000.1.36.2, 4.3.9-150400.3.15.13
supportutils-plugin-susemanager - update to 4.3.9-150400.3.15.13
spacewalk-config - update to 4.3.11-150400.3.9.13
spacewalk-admin - update to 4.3.13-150400.3.12.13
spacewalk-certs-tools - update to 4.3.19-150400.3.18.13
python3-spacewalk-certs-tools - update to 4.3.19-150400.3.18.13
susemanager-schema-utility - update to 4.3.20-150400.3.24.17
IBM Cloud Pak for Watson AIOps - update to 4.4.0
libslirp-devel - update to 4.4.0-2
libslirp - update to 4.4.0-2
podman (Red Hat package) - update to 4.6.1-7.el9_3
IBM Cloud Pak for Data Scheduling - update to 4.8.0
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.8.2
DB2 on Cloud Pak for Data - update to 4.8.2
python3-podman - update to 4.9.0-1
podman-tests - update to 4.9.4-1.0.1
podman-remote - update to 4.9.4-1.0.1
podman-plugins - update to 4.9.4-1.0.1
podman-gvproxy - update to 4.9.4-1.0.1
podman-docker - update to 4.9.4-1.0.1
podman-catatonit - update to 4.9.4-1.0.1
podman - update to 4.9.4-1.0.1
openshift-clients (Red Hat package) - addressed in versions 4.14.0-202311031050.p0.g9b1e0d2.assembly.stream.el8, 4.14.0-202311031050.p0.g9b1e0d2.assembly.stream.el9, 4.14.0-202401111553.p0.g286cfa5.assembly.stream.el8, 4.14.0-202401111553.p0.g286cfa5.assembly.stream.el9
openshift (Red Hat package) - addressed in versions 4.14.0-202401121302.p0.ge36e183.assembly.stream.el8, 4.14.0-202401121302.p0.ge36e183.assembly.stream.el9
microshift (Red Hat package) - update to 4.14.10-202401181720.p0.gd25a4c5.assembly.4.14.10.el9
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.15.0
App Connect Enterprise Certified Container - addressed in versions 5.0.13, 10.1.1
kernel (Red Hat package) - update to 5.14.0-284.40.1.el9_2
kernel-rt (Red Hat package) - update to 5.14.0-284.40.1.rt14.325.el9_2
Red Hat Migration Toolkit for Applications - update to 6.2
python3-pyvmomi - update to 6.7.3-150000.1.6.2
Storage Protect Server - update to 8.1.21
grafana - addressed in versions 9.5.5-1.54.3, 9.5.5-150000.1.54.3, 9.5.5-150200.3.47.1
grafana-debuginfo - addressed in versions 9.5.5-150000.1.54.3, 9.5.5-150200.3.47.1
IBM Security Verify Access - update to 10.0.9
IBM Sterling Order Management - update to 10.0.2403.1
Storage Protect Plus Container Agent - update to 10.1.12.7
Storage Protect Plus Server - update to 10.1.16.2
Event Streams - update to 11.2.3
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.11, 23.0.10
ovn23.09 (Red Hat package) - update to 23.09.0-100.el9fdp
docker - update to 24.0.5-1
cockpit-podman - update to 84.1-1
IBM Observability with Instana - update to 266

• https://go.dev/cl/515257
• https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ
• https://pkg.go.dev/vuln/GO-2023-1987
• https://go.dev/issue/61460

• Improper Certificate Validation in Go Programming Language
• Improper Certificate Validation in AdGuardHome
• SUSE update for go1.20
• Multiple vulnerabilities in Consul Enterprise
• SUSE update for go1.19
• Improper certificate validation in IBM Event Streams
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• SUSE update for go1.19-openssl
• SUSE update for go1.20-openssl
• SUSE update for grafana
• SUSE update for Maintenance update for SUSE Manager 4.3.8 Release Notes
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• SUSE update for SUSE Manager Client Tools
• SUSE update for Maintenance update for SUSE Manager 4.3: Server, Proxy and Retail Branch Server
• SUSE update for Golang Prometheus
• Amazon Linux AMI update for golang
• Amazon Linux AMI update for containerd
• Improper certificate validation in DataPower Operator
• Red Hat Enterprise Linux 9 update for go-toolset and golang
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Multiple vulnerabilities in Logging Subsystem 5.6 for Red Hat OpenShift
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console
• Multiple vulnerabilities in Red Hat OpenStack Platform 17
• Multiple vulnerabilities in Red Hat OpenStack Platform 17
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Fedora EPEL 7 update for golang
• Multiple vulnerabilities in Cryostat 2 on RHEL 8
• Multiple vulnerabilities in Red Hat Openshift distributed tracing
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Improper certificate validation in IBM Platform Navigator and Automation Assets in IBM Cloud Pak for Integration
• Improper certificate validation in Operations Dashboard
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Red Hat OpenShift Serverless Client
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in cert-manager Operator for Red Hat OpenShift 1.11
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Gentoo update for Go
• IBM App Connect Enterprise Certified Container update for Go
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• IBM Cloud Pak for Data Scheduling update for Go
• Red Hat Enterprise Linux 9 update for runc
• Red Hat Enterprise Linux 9 update for buildah
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 9 update for skopeo
• Red Hat Enterprise Linux 9 update for containernetworking-plugins
• Multiple vulnerabilities in IBM MQ Operator
• IBM Storage Protect Server update for Go
• IBM Cloud Pak System update for Go
• Splunk Enterprise update for third-party components
• OpenShift Container Platform 4.14 update for golang
• OpenShift Container Platform 4.14 update for golang
• Multiple vulnerabilities in IBM Watson Discovery
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• SUSE update for Maintenance update for SUSE Manager 4.2: Server, Proxy and Retail Branch Server
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• openEuler 22.03 LTS update for golang
• openEuler 22.03 LTS SP2 update for golang
• openEuler 20.03 LTS SP1 update for golang
• openEuler 20.03 LTS SP3 update for golang
• openEuler 22.03 LTS SP1 update for golang
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.15
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in IBM Sterling Order Management
• Multiple vulnerabilities in IBM Storage Protect Plus Container Agent
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Storage Protect Plus Server
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM Security Verify Access
• Amazon Linux AMI update for golang
• Amazon Linux AMI update for nerdctl
• Amazon Linux AMI update for containerd
• Amazon Linux AMI update for amazon-cloudwatch-agent
• Amazon Linux AMI update for cni-plugins
• Amazon Linux AMI update for docker
• Amazon Linux AMI update for amazon-ecr-credential-helper
• Amazon Linux AMI update for amazon-ssm-agent
• Anolis OS update for golang
• Anolis OS update for container-tools:an8 module