Resource exhaustion in Go programming language - CVE-2023-45288

Vulnerability identifier: #VU88184

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-45288

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient limitations placed on the amount of CONTINUATION frames that can be sent within a single HTTP/2 stream. A remote attacker can send specially crafted HTTP/2 requests to the server and perform a denial of service (DoS) attack.

Go programming language
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
Amazon Linux AMI
SUSE Manager Proxy 4.3
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and
Gentoo Linux
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Liberty LTSS 7 for Oracle
SUSE Liberty Linux 7
SUSE Liberty Linux 9.6
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Desktop
SUSE Liberty Linux
Red Hat Enterprise Linux Workstation
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Manager Client Tools for RHEL, Liberty and Clones
Containers Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Manager Client Tools for SLE
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Development Tools Module
HPC Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
Fedora
PowerStore 9000X
PowerStore 7000X
PowerStore 5000X
PowerStore 3000X
PowerStore 1000X
PowerStoreX OS
Service Telemetry Framework
Consul
Cryostat
Traefik
IBM Cloud Transformation Advisor
Oracle Blockchain Platform
IBM Concert Software
Red Hat OpenShift Builds
Run Once Duration Override Operator for Red Hat OpenShift
Service Interconnect
iDRAC10
IBM MQ Operator
Ansible Automation Platform
IBM Fusion HCI
Red Hat Advanced Cluster Management for Kubernetes
Custom Metrics Autoscaler Operator for Red Hat OpenShift
Red Hat OpenShift distributed tracing (RHOSDT)
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Dev Spaces
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
Red Hat OpenStack
IBM Cloud Pak for Business Automation
IBM Automation Decision Services
IBM Observability with Instana
go
Storage Defender - Resiliency Service
Guardium Data Security Center (GDSC)
Planning Analytics Cartridge for Cloud Pak for Data
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Storage Fusion Data Foundation
Storage Ceph
Maximo Application Suite - Visual Inspection Component
APEX Cloud Platform for Microsoft Azure
Storage Copy Data Management
Dell EMC OpenManage Enterprise Modular
PowerStore T
Watson CP4D Data Stores
Storage Protect Server
Maximo Application Suite - IoT Component
IBM supplied MQ Advanced container images
Storage Protect Plus Server
Robotic Process Automation for Cloud Pak
WAL-G
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
FortiSandbox
Red Hat OpenShift Container Platform
IBM Edge Application Manager
Migration Toolkit for Containers
OpenShift Serverless Client
OpenShift Virtualization
OpenShift Service Mesh
APM Server
RSA Authentication Manager
FortiSwitch
Dell EMC VxRail Appliance
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
golang-1.18 (Ubuntu package)
golang-1.18-go (Ubuntu package)
golang-1.18-src (Ubuntu package)
mgrctl
mgrctl-debuginfo
mgrctl-zsh-completion
mgrctl-bash-completion
scap-security-guide-redhat
firewalld-prometheus-config
golang-github-QubitProducts-exporter_exporter-debugsource
golang-github-QubitProducts-exporter_exporter
golang-github-QubitProducts-exporter_exporter-debuginfo
python3x-sqlparse (Red Hat package)
python-sqlparse (Red Hat package)
amazon-ecr-credential-helper
rhc-worker-script (Red Hat package)
python-netaddr (Red Hat package)
prometheus-postgres_exporter
golang-github-prometheus-promu (Red Hat package)
butane (Red Hat package)
python3x-pulp-ansible (Red Hat package)
python-pulp-ansible (Red Hat package)
golang-github-prometheus-alertmanager-debuginfo
golang-github-prometheus-alertmanager
ansible-rulebook (Red Hat package)
automation-eda-controller (Red Hat package)
golang-github-lusitaniae-apache_exporter
runc (Red Hat package)
cni-plugins
apptainer-sle15_7
apptainer-sle15_5
apptainer-leap
apptainer-sle15_6
apptainer
apptainer-debuginfo
rekor-debuginfo
rekor
containernetworking-plugins (Red Hat package)
skupper-cli (Red Hat package)
receptor (Red Hat package)
containerd-devel
containerd-ctr
containerd
golang-github-prometheus-node_exporter-debuginfo
golang-github-prometheus-node_exporter
skopeo (Red Hat package)
python3x-pydantic (Red Hat package)
python-pydantic (Red Hat package)
openshift-serverless-clients (Red Hat package)
skopeo-debuginfo
skopeo
skopeo-zsh-completion
skopeo-fish-completion
skopeo-bash-completion
golang-devel
golang
golang-help
golang-1.17 (Ubuntu package)
golang-1.17-go (Ubuntu package)
golang-1.17-src (Ubuntu package)
go-toolset-1.19-golang (Red Hat package)
golang (Red Hat package)
delve
go-toolset
golang-bin
golang-docs
golang-misc
golang-src
golang-tests
golang-1.21-go (Ubuntu package)
golang-1.21-src (Ubuntu package)
golang-1.21 (Ubuntu package)
go1.21
go1.21-doc
go1.21-race
golang-shared
go1.21-openssl
go1.21-openssl-doc
go1.21-openssl-race
go1.22-doc
go1.22
golang-1.22 (Ubuntu package)
golang-1.22-src (Ubuntu package)
golang-1.22-go (Ubuntu package)
go1.22-race
dev-lang/go
go1.22-openssl-doc
go1.22-openssl-race
go1.22-openssl-debuginfo
go1.22-openssl
buildah (Red Hat package)
kubernetes1.24-client
kubernetes1.24-client-bash-completion
kubernetes1.24-client-fish-completion
kubernetes1.24-apiserver
kubernetes1.24-controller-manager
kubernetes1.24-kubelet
kubernetes1.24-proxy
kubernetes1.24-kubeadm
kubernetes1.24-client-common
kubernetes1.24-kubelet-common
kubernetes1.24-scheduler
cri-tools (Red Hat package)
cri-o (Red Hat package)
kubernetes1.25-client-bash-completion
kubernetes1.25-client-common
kubernetes1.25-client
kubernetes1.25-client-fish-completion
kubernetes1.25-kubelet
kubernetes1.25-controller-manager
kubernetes1.25-apiserver
kubernetes1.25-scheduler
kubernetes1.25-kubeadm
kubernetes1.25-kubelet-common
kubernetes1.25-proxy
kubernetes1.26-kubelet-common
kubernetes1.26-scheduler
kubernetes1.26-apiserver
kubernetes1.26-kubelet
kubernetes1.26-kubeadm
kubernetes1.26-controller-manager
kubernetes1.26-client-common
kubernetes1.26-client
kubernetes1.26-proxy
kubernetes1.26-client-bash-completion
kubernetes1.26-client-fish-completion
kubernetes
buildah
amazon-cloudwatch-agent
conmon (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
git-lfs (Red Hat package)
ignition (Red Hat package)
ignition-dracut-grub2
ignition
ignition-debuginfo
ansible-core (Red Hat package)
python3x-requests (Red Hat package)
python-requests (Red Hat package)
golang-github-prometheus-prometheus
golang-github-prometheus-prometheus-debuginfo
python3x-jinja2 (Red Hat package)
python-jinja2 (Red Hat package)
python-simplejson
amazon-ssm-agent
git-lfs-doc
git-lfs
etcd
etcd (Red Hat package)
python3x-idna (Red Hat package)
python-idna (Red Hat package)
python3x-aiohttp (Red Hat package)
python-aiohttp (Red Hat package)
python3x-pulpcore (Red Hat package)
python-pulpcore (Red Hat package)
podman (Red Hat package)
automation-controller (Red Hat package)
python-sushy (Red Hat package)
python3x-galaxy-ng (Red Hat package)
automation-hub (Red Hat package)
python-galaxy-ng (Red Hat package)
podman-docker
podman-remote-debuginfo
podmansh
podman-remote
podman
podman-debuginfo
openshift-ansible (Red Hat package)
openshift-kuryr (Red Hat package)
openshift (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-clients (Red Hat package)
microshift (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
kernel-rt (Red Hat package)
spacecmd
mgr-push
python2-mgr-push
python2-uyuni-common-libs
python2-rhnlib
python2-spacewalk-client-tools
spacewalk-client-tools
python3x-social-auth-app-django (Red Hat package)
python-social-auth-app-django (Red Hat package)
kernel (Red Hat package)
python3x-pillow (Red Hat package)
python-pillow (Red Hat package)
python3x-gunicorn (Red Hat package)
python-gunicorn (Red Hat package)
python3x-black (Red Hat package)
python-black (Red Hat package)
openstack-ironic (Red Hat package)
ovn23.06 (Red Hat package)
ovn23.09 (Red Hat package)
python3x-pyOpenSSL (Red Hat package)
python-pyOpenSSL (Red Hat package)
python3x-cryptography (Red Hat package)
python-cryptography (Red Hat package)
venv-salt-minion
Splunk Enterprise
QRadar Suite
Red Hat OpenShift GitOps
IBM Cloud Pak System
Cloud Pak for Data
Red Hat Ceph Storage
IBM CICS TX Advanced
IBM CICS TX Standard

Install updates from vendor's website.

Go programming language - addressed in versions 1.21.9, 1.22.2
Service Telemetry Framework - update to 1.5.4
Consul - update to 1.18.2
go - update to 1.19.13-6
Traefik - update to 2.11.2
Storage Defender - Resiliency Service - update to 2.0.5
IBM Cloud Transformation Advisor - update to 3.10.2
WAL-G - update to 3.0.3
Guardium Data Security Center (GDSC) - update to 3.7.2
FortiSandbox - update to 4.4.6
Planning Analytics Cartridge for Cloud Pak for Data - update to 5.0.1
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.3
Red Hat OpenShift Container Platform - addressed in versions 4.12.55, 4.12.56, 4.12.60, 4.12.61, 4.12.65, 4.12.68, 4.12.72, 4.13.39, 4.13.44, 4.13.45, 4.13.51, 4.13.53, 4.14.20, 4.14.22, 4.14.27, 4.14.28, 4.14.31, 4.14.32, 4.14.33, 4.14.34, 4.14.36, 4.14.39, 4.15.8, 4.15.10, 4.15.12, 4.15.13, 4.15.14, 4.15.15, 4.15.18, 4.15.19, 4.15.31, 4.15.37, 4.16.10, 4.17.0
OpenShift Virtualization - addressed in versions 4.13.9, 4.14.5
Storage Fusion Data Foundation - update to 4.18.2
Storage Ceph - update to 7.0z2
APM Server - addressed in versions 7.17.21, 8.14.0
FortiSwitch - update to 7.4.4
RSA Authentication Manager - update to 8.7 SP2 Patch 4
Splunk Enterprise - addressed in versions 9.1.6, 9.2.3, 9.3.1
Maximo Application Suite - Visual Inspection Component - update to 9.1.1
golang-1.18 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
mgrctl - addressed in versions 0.1.39-1.32.1, 5.2.12-80002.3.12.4, 5.2.12-90002.3.12.1
mgrctl-debuginfo - update to 0.1.39-1.32.1
mgrctl-zsh-completion - addressed in versions 0.1.39-1.32.1, 5.2.12-80002.3.12.4, 5.2.12-90002.3.12.1
mgrctl-bash-completion - addressed in versions 0.1.39-1.32.1, 5.2.12-80002.3.12.4, 5.2.12-90002.3.12.1
scap-security-guide-redhat - addressed in versions 0.1.79-80002.3.9.6, 0.1.79-90002.3.9.1, 0.1.80-1.44.1
firewalld-prometheus-config - update to 0.1-150100.4.26.2
golang-github-QubitProducts-exporter_exporter-debugsource - addressed in versions 0.4.0-1.9.1, 0.4.0-80002.3.6.6, 0.4.0-90002.3.6.4
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-1.9.1, 0.4.0-70002.3.6.2, 0.4.0-80002.3.6.6, 0.4.0-90002.3.6.4
golang-github-QubitProducts-exporter_exporter-debuginfo - addressed in versions 0.4.0-1.9.1, 0.4.0-80002.3.6.6, 0.4.0-90002.3.6.4
python3x-sqlparse (Red Hat package) - update to 0.5.0-1.el8ap
python-sqlparse (Red Hat package) - update to 0.5.0-1.el9ap
amazon-ecr-credential-helper - update to 0.7.1-4
rhc-worker-script (Red Hat package) - update to 0.8-1.el7_9
python-netaddr (Red Hat package) - update to 0.9.0-2.el9
prometheus-postgres_exporter - addressed in versions 0.10.1-1.15.1, 0.10.1-70002.3.3.3, 0.10.1-80002.3.3.6, 0.10.1-90002.3.3.4
golang-github-prometheus-promu (Red Hat package) - update to 0.15.0-15.4.gitd5383c5.el8
butane (Red Hat package) - addressed in versions 0.16.0-2.3.rhaos4.12.el8, 0.20.0-1.2.rhaos4.15.el8
python3x-pulp-ansible (Red Hat package) - update to 0.20.7-1.el8ap
python-pulp-ansible (Red Hat package) - update to 0.20.7-1.el9ap
golang-github-prometheus-alertmanager-debuginfo - update to 0.26.0-150100.4.25.2
golang-github-prometheus-alertmanager - update to 0.26.0-150100.4.25.2
IBM Concert Software - update to 1.0.1
ansible-rulebook (Red Hat package) - addressed in versions 1.0.7-1.el8ap, 1.0.7-1.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.0.7-1.el8ap, 1.0.7-1.el9ap
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.10-70002.3.9.3, 1.0.10-80002.3.9.6, 1.0.10-90002.3.9.4
Red Hat OpenShift Builds - update to 1.1.0
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.1.1
runc (Red Hat package) - addressed in versions 1.1.6-5.3.rhaos4.12.el8, 1.1.12-1.2.rhaos4.13.el8, 1.1.12-1.2.rhaos4.14.el8, 1.1.12-1.2.rhaos4.15.el8, 1.1.12-1.2.rhaos4.15.el9
cni-plugins - update to 1.2.0-1
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.3.0
OpenShift API for Data Protection (OADP) - update to 1.3.3
apptainer-sle15_7 - update to 1.3.6-150600.4.6.1
apptainer-sle15_5 - update to 1.3.6-150600.4.6.1
apptainer-leap - update to 1.3.6-150600.4.6.1
apptainer-sle15_6 - update to 1.3.6-150600.4.6.1
apptainer - update to 1.3.6-150600.4.6.1
apptainer-debuginfo - update to 1.3.6-150600.4.6.1
rekor-debuginfo - update to 1.3.10-150400.4.25.1
rekor - update to 1.3.10-150400.4.25.1
containernetworking-plugins (Red Hat package) - addressed in versions 1.4.0-1.2.rhaos4.12.el8, 1.4.0-1.2.rhaos4.13.el8, 1.4.0-1.3.rhaos4.15.el8
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
Service Interconnect - addressed in versions 1.4.5, 1.5.4
skupper-cli (Red Hat package) - addressed in versions 1.4.5-1.el8, 1.4.5-1.el9
receptor (Red Hat package) - addressed in versions 1.4.8-1.el8ap, 1.4.8-1.el9ap
containerd-devel - update to 1.7.17-150000.111.3
containerd-ctr - update to 1.7.17-150000.111.3
containerd - addressed in versions 1.7.17-150000.111.3, 1.7.21-16.94.1
Migration Toolkit for Containers - update to 1.8.4
golang-github-prometheus-node_exporter-debuginfo - update to 1.9.1-150100.3.35.2
golang-github-prometheus-node_exporter - addressed in versions 1.9.1-150100.3.35.2, 1.10.2-1.12.1, 1.10.2-70002.3.3.3, 1.10.2-80002.3.3.6, 1.10.2-90002.3.3.4
skopeo (Red Hat package) - addressed in versions 1.9.4-3.3.rhaos4.12.el8, 1.9.4-3.3.rhaos4.12.el9, 1.11.2-10.4.rhaos4.14.el8, 1.11.2-21.3.rhaos4.15.el8, 1.11.2-21.3.rhaos4.15.el9, 1.11.3-0.2.rhaos4.13.el8, 1.11.3-0.2.rhaos4.13.el9
Red Hat OpenShift GitOps - addressed in versions 1.10.5, 1.11.4, 1.11.6, 1.12.4
python3x-pydantic (Red Hat package) - update to 1.10.15-1.el8ap
python-pydantic (Red Hat package) - update to 1.10.15-1.el9ap
QRadar Suite - update to 1.10.22.0
openshift-serverless-clients (Red Hat package) - update to 1.12.0-7.el8
skopeo-debuginfo - update to 1.14.4-150300.11.16.1
skopeo - update to 1.14.4-150300.11.16.1
skopeo-zsh-completion - update to 1.14.4-150300.11.16.1
skopeo-fish-completion - update to 1.14.4-150300.11.16.1
skopeo-bash-completion - update to 1.14.4-150300.11.16.1
golang-devel - update to 1.15.7-43
golang - update to 1.15.7-43
golang-help - update to 1.15.7-43
golang-1.17 (Ubuntu package) - update to 1.17.13-3ubuntu1.3
golang-1.17-go (Ubuntu package) - update to 1.17.13-3ubuntu1.3
golang-1.17-src (Ubuntu package) - update to 1.17.13-3ubuntu1.3
go-toolset-1.19-golang (Red Hat package) - update to 1.19.13-7.el7_9
golang (Red Hat package) - addressed in versions 1.19.13-7.el9_2, 1.20.12-4.el9_3, 1.21.9-2.el9_4
delve - addressed in versions 1.20.2-1.0.1, 1.21.2-3
go-toolset - addressed in versions 1.20.12-1, 1.21.9-1
golang-bin - addressed in versions 1.20.12-8.0.1, 1.21.9-1.0.1, 1.21.10-2
golang - addressed in versions 1.20.12-8.0.1, 1.21.9-1.0.1, 1.21.10-2
golang-docs - addressed in versions 1.20.12-8.0.1, 1.21.9-1.0.1, 1.21.10-2
golang-misc - addressed in versions 1.20.12-8.0.1, 1.21.9-1.0.1, 1.21.10-2
golang-src - addressed in versions 1.20.12-8.0.1, 1.21.9-1.0.1, 1.21.10-2
golang-tests - addressed in versions 1.20.12-8.0.1, 1.21.9-1.0.1, 1.21.10-2
golang-1.21-go (Ubuntu package) - addressed in versions 1.21.1-1~ubuntu20.04.3, 1.21.1-1~ubuntu22.04.3, 1.21.9-1ubuntu0.1
golang-1.21-src (Ubuntu package) - addressed in versions 1.21.1-1~ubuntu20.04.3, 1.21.1-1~ubuntu22.04.3, 1.21.9-1ubuntu0.1
golang-1.21 (Ubuntu package) - addressed in versions 1.21.1-1~ubuntu20.04.3, 1.21.1-1~ubuntu22.04.3, 1.21.9-1ubuntu0.1
go1.21 - addressed in versions 1.21.9-1.30.1, 1.21.9-150000.1.30.1
go1.21-doc - addressed in versions 1.21.9-1.30.1, 1.21.9-150000.1.30.1
go1.21-race - update to 1.21.9-150000.1.30.1
golang-shared - update to 1.21.10-2
go1.21-openssl - update to 1.21.13.1-150600.16.3.1
go1.21-openssl-doc - update to 1.21.13.1-150600.16.3.1
go1.21-openssl-race - update to 1.21.13.1-150600.16.3.1
go1.22-doc - addressed in versions 1.22.2-1.6.1, 1.22.2-150000.1.12.1
go1.22 - addressed in versions 1.22.2-1.6.1, 1.22.2-150000.1.12.1
golang-1.22 (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.1, 1.22.2-2~22.04.1
golang-1.22-src (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.1, 1.22.2-2~22.04.1
golang-1.22-go (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.1, 1.22.2-2~22.04.1
go1.22-race - update to 1.22.2-150000.1.12.1
dev-lang/go - update to 1.22.3
golang - update to 1.22.3-1
go1.22-openssl-doc - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl-race - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl-debuginfo - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
buildah (Red Hat package) - addressed in versions 1.23.4-5.3.rhaos4.12.el8, 1.23.4-5.3.rhaos4.12.el9, 1.29.1-2.3.rhaos4.13.el8, 1.29.1-20.4.rhaos4.15.el8, 1.29.1-20.4.rhaos4.15.el9
kubernetes1.24-client - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-client-bash-completion - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-client-fish-completion - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-apiserver - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-controller-manager - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-kubelet - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-proxy - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-kubeadm - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-client-common - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-kubelet-common - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
kubernetes1.24-scheduler - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.22.1
cri-tools (Red Hat package) - addressed in versions 1.25.0-2.3.el8, 1.25.0-2.3.el9, 1.26.0-4.2.el8, 1.26.0-4.3.el9, 1.27.0-3.2.el8, 1.28.0-3.2.el8, 1.28.0-3.2.el9
cri-o (Red Hat package) - addressed in versions 1.25.3-5.3.rhaos4.12.git44a2cb2.el9, 1.25.5-14.2.rhaos4.12.git4956519.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el8, 1.26.5-11.2.rhaos4.13.git919cc6e.el9, 1.27.4-7.2.rhaos4.14.git082c52f.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, 1.27.6-2.rhaos4.14.gitb3bd0bf.el9, 1.28.4-9.1.rhaos4.15.git74214e5.el8, 1.28.4-9.1.rhaos4.15.git74214e5.el9
kubernetes1.25-client-bash-completion - update to 1.25.16-150400.9.16.1
kubernetes1.25-client-common - update to 1.25.16-150400.9.16.1
kubernetes1.25-client - update to 1.25.16-150400.9.16.1
kubernetes1.25-client-fish-completion - update to 1.25.16-150400.9.16.1
kubernetes1.25-kubelet - update to 1.25.16-150400.9.16.1
kubernetes1.25-controller-manager - update to 1.25.16-150400.9.16.1
kubernetes1.25-apiserver - update to 1.25.16-150400.9.16.1
kubernetes1.25-scheduler - update to 1.25.16-150400.9.16.1
kubernetes1.25-kubeadm - update to 1.25.16-150400.9.16.1
kubernetes1.25-kubelet-common - update to 1.25.16-150400.9.16.1
kubernetes1.25-proxy - update to 1.25.16-150400.9.16.1
kubernetes1.26-kubelet-common - update to 1.26.15-150400.9.14.1
kubernetes1.26-scheduler - update to 1.26.15-150400.9.14.1
kubernetes1.26-apiserver - update to 1.26.15-150400.9.14.1
kubernetes1.26-kubelet - update to 1.26.15-150400.9.14.1
kubernetes1.26-kubeadm - update to 1.26.15-150400.9.14.1
kubernetes1.26-controller-manager - update to 1.26.15-150400.9.14.1
kubernetes1.26-client-common - update to 1.26.15-150400.9.14.1
kubernetes1.26-client - update to 1.26.15-150400.9.14.1
kubernetes1.26-proxy - update to 1.26.15-150400.9.14.1
kubernetes1.26-client-bash-completion - update to 1.26.15-150400.9.14.1
kubernetes1.26-client-fish-completion - update to 1.26.15-150400.9.14.1
kubernetes - update to 1.29.4-1.fc40
iDRAC10 - addressed in versions 1.30.10.50, 1.30.10.51
OpenShift Serverless Client - update to 1.33.0
buildah - addressed in versions 1.35.5-150300.8.36.1, 1.35.5-150400.3.39.1, 1.35.5-150500.3.28.1
amazon-cloudwatch-agent - update to 1.300039.0-1
IBM MQ Operator - addressed in versions 2.0.22, 3.1.3
conmon (Red Hat package) - addressed in versions 2.1.2-5.3.rhaos4.12.el8, 2.1.2-6.3.rhaos4.12.el9, 2.1.7-2.3.rhaos4.13.el8, 2.1.7-2.3.rhaos4.13.el9, 2.1.7-10.2.rhaos4.15.el9
Storage Copy Data Management - update to 2.2.24.0
IBM Cloud Pak System - addressed in versions 2.3.4.1, 2.3.5.0
Ansible Automation Platform - update to 2.4
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.4-7.1.el8ap, 2.4-7.1.el9ap
OpenShift Service Mesh - update to 2.4.8
IBM Fusion HCI - update to 2.8.0
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.7, 2.10.4
git-lfs (Red Hat package) - addressed in versions 2.11.0-2.el8_4.2, 2.13.3-3.el8_6.1, 2.13.3-5.el9_0.1, 3.2.0-1.el9_2, 3.2.0-2.el8_8.1, 3.2.0-2.el9_3, 3.2.0-3.el8_9, 3.4.1-2.el8_10, 3.4.1-2.el9_4
Custom Metrics Autoscaler Operator for Red Hat OpenShift - update to 2.12.1-394
ignition (Red Hat package) - addressed in versions 2.14.0-5.3.rhaos4.12.el9, 2.14.0-7.2.rhaos4.12.el8, 2.15.0-7.2.rhaos4.13.el9, 2.16.2-2.2.rhaos4.15.el9
ignition-dracut-grub2 - addressed in versions 2.14.0-150300.4.10.1, 2.14.0-150300.6.10.1, 2.14.0-150400.4.3.1, 2.14.0-150400.9.6.1, 2.15.0-150400.4.5.1, 2.17.0-150500.3.6.1
ignition - addressed in versions 2.14.0-150300.4.10.1, 2.14.0-150300.6.10.1, 2.14.0-150400.4.3.1, 2.14.0-150400.9.6.1, 2.15.0-150400.4.5.1, 2.17.0-150500.3.6.1
ignition-debuginfo - addressed in versions 2.14.0-150300.4.10.1, 2.14.0-150300.6.10.1, 2.14.0-150400.4.3.1, 2.14.0-150400.9.6.1, 2.15.0-150400.4.5.1, 2.17.0-150500.3.6.1
ansible-core (Red Hat package) - addressed in versions 2.15.11-1.el8ap, 2.15.11-1.el9ap
Dell EMC OpenManage Enterprise Modular - update to 2.20.20
python3x-requests (Red Hat package) - update to 2.32.2-1.el8ap
python-requests (Red Hat package) - update to 2.32.2-1.el9ap
golang-github-prometheus-prometheus - update to 2.53.4-150100.4.26.2
golang-github-prometheus-prometheus-debuginfo - update to 2.53.4-150100.4.26.2
python3x-jinja2 (Red Hat package) - update to 3.1.4-1.el8ap
python-jinja2 (Red Hat package) - update to 3.1.4-1.el9ap
Red Hat OpenShift distributed tracing (RHOSDT) - update to 3.2.0
PowerStoreX OS - update to 3.2.1.5-2424458
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
python-simplejson - update to 3.3.1-70002.1.3.1
amazon-ssm-agent - update to 3.3.859.0-1
git-lfs-doc - addressed in versions 3.4.1-1.0.1, 3.4.1-2.0.1
git-lfs - addressed in versions 3.4.1-1.0.1, 3.4.1-2.0.1
etcd - addressed in versions 3.4.14-11, 3.4.14-16
etcd (Red Hat package) - update to 3.4.26-8.el9ost
PowerStore T - update to 3.6.1.4-2413340
python3x-idna (Red Hat package) - update to 3.7-1.el8ap
python-idna (Red Hat package) - update to 3.7-1.el9ap
python3x-aiohttp (Red Hat package) - update to 3.9.5-1.el8ap
python-aiohttp (Red Hat package) - update to 3.9.5-1.el9ap
Red Hat OpenShift Dev Spaces - update to 3.15.0
python3x-pulpcore (Red Hat package) - update to 3.28.27-1.el8ap
python-pulpcore (Red Hat package) - update to 3.28.27-1.el9ap
podman (Red Hat package) - addressed in versions 4.2.0-7.3.rhaos4.12.el9, 4.4.1-2.2.rhaos4.12.el8, 4.4.1-5.3.rhaos4.13.el8, 4.4.1-6.3.rhaos4.13.el9, 4.4.1-13.4.rhaos4.14.el8, 4.4.1-13.4.rhaos4.14.el9, 4.4.1-21.2.rhaos4.15.el8, 4.4.1-21.2.rhaos4.15.el9
Red Hat Advanced Cluster Security for Kubernetes - update to 4.4.2
automation-controller (Red Hat package) - addressed in versions 4.5.7-1.el8ap, 4.5.7-1.el9ap
python-sushy (Red Hat package) - update to 4.7.1-0.20240405121030.123a5a5.el9
Cloud Pak for Data - update to 4.8.5
python3x-galaxy-ng (Red Hat package) - update to 4.9.2-1.el8ap
automation-hub (Red Hat package) - addressed in versions 4.9.2-1.el8ap, 4.9.2-1.el9ap
python-galaxy-ng (Red Hat package) - update to 4.9.2-1.el9ap
podman-docker - addressed in versions 4.9.5-150300.9.43.1, 4.9.5-150400.4.38.1, 4.9.5-150500.3.34.2
podman-remote-debuginfo - addressed in versions 4.9.5-150300.9.43.1, 4.9.5-150400.4.38.1, 4.9.5-150500.3.34.2
podmansh - addressed in versions 4.9.5-150300.9.43.1, 4.9.5-150400.4.38.1, 4.9.5-150500.3.34.2
podman-remote - addressed in versions 4.9.5-150300.9.43.1, 4.9.5-150400.4.38.1, 4.9.5-150500.3.34.2
podman - addressed in versions 4.9.5-150300.9.43.1, 4.9.5-150400.4.38.1, 4.9.5-150500.3.34.2
podman-debuginfo - addressed in versions 4.9.5-150300.9.43.1, 4.9.5-150400.4.38.1, 4.9.5-150500.3.34.2
openshift-ansible (Red Hat package) - addressed in versions 4.12.0-202404161006.p0.gd97dd6f.assembly.stream.el8, 4.13.0-202404151710.p0.g2d540c5.assembly.stream.el8, 4.13.0-202404151710.p0.g2d540c5.assembly.stream.el9, 4.14.0-202404151639.p0.g81558cc.assembly.stream.el8, 4.15.0-202404151212.p0.g1c9b99e.assembly.stream.el8, 4.15.0-202404151212.p0.g1c9b99e.assembly.stream.el9
openshift-kuryr (Red Hat package) - addressed in versions 4.12.0-202404161006.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202404151710.p0.g36754b7.assembly.stream.el8, 4.14.0-202404151639.p0.g8926a29.assembly.stream.el8
openshift (Red Hat package) - addressed in versions 4.12.0-202404161006.p0.g054f0ba.assembly.stream.el8, 4.12.0-202404161006.p0.g054f0ba.assembly.stream.el9, 4.13.0-202404222036.p0.g4818370.assembly.stream.el8, 4.13.0-202404222036.p0.g4818370.assembly.stream.el9, 4.14.0-202404160939.p0.g7bee54d.assembly.stream.el8, 4.14.0-202404301807.p0.gfd36fb9.assembly.stream.el8, 4.14.0-202404301807.p0.gfd36fb9.assembly.stream.el9, 4.15.0-202404151212.p0.g8974577.assembly.stream.el8, 4.15.0-202404151212.p0.g8974577.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - addressed in versions 4.12.0-202404161006.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202404151710.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202404151639.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202404151212.p0.gd2acdd5.assembly.stream.el8
openshift-clients (Red Hat package) - addressed in versions 4.12.0-202404161006.p0.gd691257.assembly.stream.el8, 4.12.0-202404161006.p0.gd691257.assembly.stream.el9, 4.13.0-202404151710.p0.gd192e90.assembly.stream.el8, 4.13.0-202404151710.p0.gd192e90.assembly.stream.el9, 4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el8, 4.15.0-202404151212.p0.g62c4d45.assembly.stream.el8, 4.15.0-202404151212.p0.g62c4d45.assembly.stream.el9
microshift (Red Hat package) - addressed in versions 4.14.24-202405021453.p0.g6e3abf7.assembly.4.14.24.el9, 4.15.12-202405021504.p0.ge0938ef.assembly.4.15.12.el9
ose-aws-ecr-image-credential-provider (Red Hat package) - addressed in versions 4.15.0-202404151212.p0.g2e3cca1.assembly.stream.el8, 4.15.0-202404151212.p0.g2e3cca1.assembly.stream.el9
kernel-rt (Red Hat package) - addressed in versions 4.18.0-372.100.1.rt7.260.el8_6, 5.14.0-284.64.1.rt14.349.el9_2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.0.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
spacecmd - addressed in versions 5.0.16-1.61.1, 5.2.8-70002.3.12.1, 5.2.8-80002.3.12.4, 5.2.8-90002.3.12.1
App Connect Enterprise Certified Container - addressed in versions 5.0.19, 12.0.12-r2, 12.2.0
Watson CP4D Data Stores - update to 5.1
mgr-push - update to 5.2.4-70002.3.9.2
python2-mgr-push - update to 5.2.4-70002.3.9.2
python2-uyuni-common-libs - update to 5.2.5-70002.3.6.1
python2-rhnlib - update to 5.2.5-70002.3.9.1
python2-spacewalk-client-tools - update to 5.2.6-70002.3.9.1
spacewalk-client-tools - update to 5.2.6-70002.3.9.1
python3x-social-auth-app-django (Red Hat package) - update to 5.4.1-1.el8ap
python-social-auth-app-django (Red Hat package) - update to 5.4.1-1.el9ap
kernel (Red Hat package) - update to 5.14.0-284.64.1.el9_2
Red Hat Ceph Storage - update to 6.1
Red Hat Migration Toolkit for Applications - update to 7.0.3
Dell EMC VxRail Appliance - update to 8.0.213
Storage Protect Server - update to 8.1.24
Maximo Application Suite - IoT Component - addressed in versions 8.7.15, 8.8.11, 9.0.1
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.17-r2, 9.3.5.1-r2
Storage Protect Plus Server - update to 10.1.16.2
python3x-pillow (Red Hat package) - update to 10.3.0-1.el8ap
python-pillow (Red Hat package) - update to 10.3.0-1.el9ap
IBM CICS TX Advanced - update to 11.1.0.0 ifix21
IBM CICS TX Standard - update to 11.1.0.0 ifix22
Red Hat OpenStack - addressed in versions 16.2, 17.1
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.18, 23.0.19
python3x-gunicorn (Red Hat package) - update to 22.0.0-1.el8ap
python-gunicorn (Red Hat package) - update to 22.0.0-1.el9ap
python3x-black (Red Hat package) - update to 22.8.0-2.el8ap
python-black (Red Hat package) - update to 22.8.0-2.el9ap
IBM Automation Decision Services - update to 23.0.2.0.5
openstack-ironic (Red Hat package) - update to 23.1.1-0.20240405121030.2c16b52.el9
ovn23.06 (Red Hat package) - addressed in versions 23.06.3-29.el8fdp, 23.06.3-29.el9fdp
ovn23.09 (Red Hat package) - update to 23.09.0-139.el9fdp
python3x-pyOpenSSL (Red Hat package) - update to 24.1.0-1.el8ap
python-pyOpenSSL (Red Hat package) - update to 24.1.0-1.el9ap
python3x-cryptography (Red Hat package) - update to 42.0.5-1.el8ap
python-cryptography (Red Hat package) - update to 42.0.5-1.el9ap
IBM Observability with Instana - update to 279
venv-salt-minion - addressed in versions 3006.0-70002.5.19.1, 3006.0-80002.5.19.1, 3006.0-90002.5.19.1

• Exploit #9844 - cont-flood-poc (PoC for CVE-2023-45288, continuation flood vulnerability) (May 23, 2024)

• https://go.dev/issue/65051
• https://go.dev/cl/576155
• https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M
• https://pkg.go.dev/vuln/GO-2024-2687

• Denial of service in Go programming language HTTP/2 implementation
• SUSE update for go1.22
• SUSE update for go1.21
• SUSE update for go1.22
• SUSE update for go1.21
• Traefik update for Go
• Red Hat Enterprise Linux 9 update for golang
• Fedora 40 update for kubernetes
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• openEuler update for golang
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in OpenShift Virtualization 4.14
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Red Hat OpenShift Container Platform 4.12 update for golang
• OpenShift Container Platform 4.15 update for golang
• OpenShift Container Platform 4.12 update for golang
• OpenShift Container Platform 4.14 update for golang
• OpenShift Container Platform 4.13 update for golang
• Red Hat Enterprise Linux 9 update for git-lfs
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.14
• Multiple vulnerabilities in Red Hat build of Cryostat 2 on RHEL 8
• Red Hat Enterprise Linux 7 update for rhc-worker-script
• Red Hat Enterprise Linux 9 update for golang
• Resource exhaustion in IBM Storage Fusion
• Multiple vulnerabilities in HashiCorp Consul
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Red Hat Enterprise Linux 8 update for git-lfs
• Red Hat Enterprise Linux 9 update for git-lfs
• Red Hat Developer Tools update for go-toolset-1.19-golang
• Red Hat Enterprise Linux 8 update for git-lfs
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the go-toolset:rhel8 module
• Red Hat Enterprise Linux 8.8 Extended Update Support update for the go-toolset:rhel8 module
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13 packages
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.11
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.10
• Resource exhaustion in Red Hat build of MicroShift 4.14 packages
• Resource exhaustion in Red Hat build of MicroShift 4.15 packages
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.4
• Multiple vulnerabilities in Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12
• Resource exhaustion in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• SUSE update for containerd
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages
• Multiple vulnerabilities in OpenShift Serverless Client 1.33
• Multiple vulnerabilities in Service Interconnect 1.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Service Interconnect 1.4
• Multiple vulnerabilities in Service Interconnect 1.4
• Red Hat Enterprise Linux 9 update for golang
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift (OSSO) 1.3
• Multiple vulnerabilities in IBM Automation Decision Services
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages
• Ubuntu update for golang-1.21
• Multiple vulnerabilities in IBM Storage Copy Data Management
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Red Hat Enterprise Linux 9 update for git-lfs
• Red Hat Enterprise Linux 8 update for git-lfs
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.11
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in IBM Storage Defender - Resiliency Service
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in IBM QRadar Suite Software
• Red Hat Enterprise Linux 8 update for git-lfs
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Red Hat Enterprise Linux 8 update for git-lfs
• Red Hat Enterprise Linux 9 update for git-lfs
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in golang-fips/go
• Amazon Linux AMI update for oci-add-hooks
• Amazon Linux AMI update for amazon-ecr-credential-helper
• Amazon Linux AMI update for cni-plugins
• Amazon Linux AMI update for golang
• Amazon Linux AMI update for amazon-cloudwatch-agent
• Gentoo update for Go
• IBM Planning Analytics Cartridge for IBM Cloud Pak for Data update for Go
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.8
• Elastic APM Server update for Go
• Resource exhaustion in App Connect Enterprise Certified Container
• Multiple vulnerabilities in Storage Protect Plus Server
• Multiple vulnerabilities in IBM Watson Discovery for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in IBM Concert Software
• Multiple vulnerabilities in IBM Concert
• SUSE update for kubernetes1.26
• SUSE update for containerd
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in IBM Observability with Instana
• SUSE update for kubernetes1.23
• SUSE update for kubernetes1.24
• SUSE update for kubernetes1.24
• SUSE update for kubernetes1.25
• Multiple vulnerabilities in Red Hat OpenShift Builds 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Amazon Linux AMI update for amazon-ssm-agent
• Multiple vulnerabilities in IBM Maximo Application Suite - IoT Component
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• wal-g update for Go
• Splunk Enterprise update for third-party components
• Multiple vulnerabilities in Oracle Blockchain Platform
• IBM Storage Protect Server update for Golang Go
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• SUSE update for go1.21-openssl
• Multiple vulnerabilities in IBM Cloud Pak System
• SUSE update for go1.22-openssl
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• SUSE update for go1.22-openssl
• Ubuntu update for golang-1.17
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple HTTP/2 CONTINUATION frames vulnerabilities in FortiSandbox
• Multiple HTTP/2 CONTINUATION frames vulnerabilities in FortiSwitch
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Dell PowerStore T
• Ubuntu update for golang-1.18
• Multiple vulnerabilities in IBM Watson CP4D Data Stores
• SUSE update for ignition
• SUSE update for ignition
• SUSE update for ignition
• SUSE update for apptainer
• SUSE update for ignition
• SUSE update for ignition
• SUSE update for ignition
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• SUSE update for skopeo
• SUSE update for podman
• SUSE update for buildah
• SUSE update for podman
• SUSE update for buildah
• openEuler 20.03 LTS SP4 update for etcd
• openEuler 24.03 LTS SP1 update for etcd
• SUSE update for podman
• SUSE update for buildah
• Anolis OS update for go-toolset:an8 module
• Anolis OS update for go-toolset:an8 module
• Anolis OS update for git-lfs
• Anolis OS update for golang
• Anolis OS update for git-lfs
• SUSE update for rekor
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• openEuler 24.03 LTS update for etcd
• Multiple vulnerabilities in Red Hat Ceph Storage 6
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• RSA Authentication Manager update for third-party components
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in IBM Guardium Data Security Center
• SUSE update for golang-github-prometheus-node_exporter
• SUSE update for golang-github-prometheus-prometheus
• SUSE update for golang-github-prometheus-alertmanager
• Multiple vulnerabilities in IBM Storage Fusion Data Foundation
• Multiple vulnerabilities in IBM Maximo Application Suite - Visual Inspection Component
• Multiple vulnerabilities in IBM Edge Application Manager
• Multiple vulnerabilities in IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
• IBM Storage Ceph update for Golang Go
• SUSE update for Security update 5.0.8 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.4 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.4 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.4 for Multi-Linux Manager Client Tools
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 7.0
• Multiple vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT) 3.2
• Multiple vulnerabilities in Dell iDRAC10
• Multiple vulnerabilities in Dell OpenManage Enterprise Modular