Input validation error in Go programming language - CVE-2024-24790

Vulnerability identifier: #VU91160

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-24790

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to modify application behavior.

The vulnerability exists due to improper handling of IPv4-mapped IPv6 addresses in net/netip within multiple methods, e.g. IsPrivate, IsLoopback. The affected methods return false for addresses which would return true in their traditional IPv4 forms, leading to potential bypass of implemented security features.

Go programming language
Oracle Solaris
Amazon Linux AMI
Oracle Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Real Time 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Public Cloud Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Development Tools Module
Containers Module
openSUSE Leap
Ubuntu
openEuler
Nomad
moby
Multicluster Engine for Kubernetes
OpenShift Data Foundation (formerly OpenShift Container Storage)
Rapid Infrastructure Automation
Cloud Pak for Network Automation
Guardium Data Security Center (GDSC)
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component
IBM Business Automation Manager Open Editions
Storage Copy Data Management
Dell EMC OpenManage Enterprise Modular
Dell EMC OpenManage Enterprise Services
Watson CP4D Data Stores
Storage Protect Server
go
Traefik
Cryostat
IBM Observability with Instana
Run Once Duration Override Operator for Red Hat OpenShift
Ansible Automation Platform
Red Hat Advanced Cluster Security for Kubernetes
App Connect Enterprise Certified Container
Kube Descheduler Operator for Red Hat OpenShift
OpenShift Logging
Red Hat Satellite
IBM Spectrum Protect Plus
Red Hat OpenShift Container Platform
Migration Toolkit for Containers
Splunk Enterprise
Splunk Universal Forwarder
Red Hat Ceph Storage
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
golang-1.18-src (Ubuntu package)
golang-1.18-go (Ubuntu package)
golang-1.18 (Ubuntu package)
yggdrasil-worker-forwarder (Red Hat package)
rubygem-hammer_cli_foreman_tasks (Red Hat package)
rhc-worker-script (Red Hat package)
golang-github-prometheus-promu (Red Hat package)
butane (Red Hat package)
runc (Red Hat package)
containernetworking-plugins (Red Hat package)
receptor (Red Hat package)
python-pulp-certguard (Red Hat package)
skopeo (Red Hat package)
golang
golang (Red Hat package)
golang-1.21 (Ubuntu package)
golang-1.21-go (Ubuntu package)
golang-1.21-src (Ubuntu package)
delve
golang-devel
golang-help
go-toolset
golang-misc
golang-tests
golang-bin
golang-docs
golang-src
go1.21-doc
go1.21
go1.21-race
go1.21-openssl-race
go1.21-openssl-doc
go1.21-openssl
golang-1.22-src (Ubuntu package)
golang-1.22-go (Ubuntu package)
golang-1.22 (Ubuntu package)
go1.22-doc
go1.22
go1.22-race
go1.22-openssl-debuginfo
go1.22-openssl-doc
go1.22-openssl
go1.22-openssl-race
buildah (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
python3x-urllib3 (Red Hat package)
python-urllib3 (Red Hat package)
NetworkManager (Red Hat package)
python-werkzeug (Red Hat package)
conmon (Red Hat package)
container-suseconnect
oath-toolkit (Red Hat package)
ignition (Red Hat package)
amazon-ssm-agent
foreman (Red Hat package)
foreman-installer (Red Hat package)
python3x-pulpcore (Red Hat package)
python-pulpcore (Red Hat package)
cephadm-ansible (Red Hat package)
podman (Red Hat package)
python-django (Red Hat package)
python3x-django (Red Hat package)
automation-controller (Red Hat package)
rubygem-katello (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
ose-azure-acr-image-credential-provider (Red Hat package)
ose-gcp-gcr-image-credential-provider (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
satellite (Red Hat package)
rubygem-foreman_rh_cloud (Red Hat package)
grafana
grafana (Red Hat package)
rubygem-foreman_theme_satellite (Red Hat package)
ceph (Red Hat package)
python-gunicorn (Red Hat package)
python-pyOpenSSL (Red Hat package)
python-cryptography (Red Hat package)
google-osconfig-agent
IBM CICS TX Standard
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Red Hat OpenShift GitOps
Cost Management
IBM Cloud Pak System
PowerPath Management Appliance

Install updates from vendor's website.

Go programming language - addressed in versions 1.21.11, 1.22.4
Oracle Solaris - update to 11.4 SRU 71
Nomad - update to 1.8.1
Rapid Infrastructure Automation - update to 1.1.5.3
go - addressed in versions 1.19.13-6, 1.20.12-4
Traefik - addressed in versions 2.11.4, 3.0.2
Cloud Pak for Network Automation - update to 2.7.8
Guardium Data Security Center (GDSC) - update to 3.7.2
Red Hat OpenShift Container Platform - addressed in versions 4.12.63, 4.12.64, 4.13.48, 4.13.49, 4.14.35, 4.15.28, 4.16.15, 4.16.19, 4.17.0, 4.17.4
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component - update to 5.1.3
IBM Business Automation Manager Open Editions - update to 8.0.8
Splunk Enterprise - addressed in versions 9.1.6, 9.1.9, 9.2.3, 9.2.6, 9.3.1, 9.3.4, 9.4.2
Splunk Universal Forwarder - addressed in versions 9.1.9, 9.2.6, 9.3.4, 9.4.2
moby - update to 26.1.4
IBM Observability with Instana - addressed in versions 279, 282
golang-1.18-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
yggdrasil-worker-forwarder (Red Hat package) - update to 0.0.3-2.el8sat
rubygem-hammer_cli_foreman_tasks (Red Hat package) - update to 0.0.21-1.el8sat
rhc-worker-script (Red Hat package) - update to 0.9-5.el7_9
golang-github-prometheus-promu (Red Hat package) - update to 0.15.0-17.gitd5383c5.el8
butane (Red Hat package) - addressed in versions 0.16.0-4.rhaos4.12.el8, 0.19.0-3.rhaos4.14.el8
runc (Red Hat package) - addressed in versions 1.1.6-8.rhaos4.12.el8, 1.1.13-3.rhaos4.13.el8, 1.1.13-3.rhaos4.13.el9, 1.1.13-3.rhaos4.14.el8, 1.1.13-3.rhaos4.14.el9, 1.1.13-4.rhaos4.15.el8, 1.1.13-4.rhaos4.15.el9
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.2.0
OpenShift API for Data Protection (OADP) - update to 1.3.3
containernetworking-plugins (Red Hat package) - addressed in versions 1.4.0-3.rhaos4.12.el8, 1.4.0-3.rhaos4.13.el8, 1.4.0-3.rhaos4.14.el8
receptor (Red Hat package) - addressed in versions 1.4.8-1.1.el8ap, 1.4.8-1.1.el9ap
Network Observability plugin for the Openshift Console - update to 1.6.1
python-pulp-certguard (Red Hat package) - update to 1.7.2-1.el8pc
Migration Toolkit for Containers - update to 1.8.5
skopeo (Red Hat package) - addressed in versions 1.9.4-6.rhaos4.12.el8, 1.9.4-6.rhaos4.12.el9, 1.11.3-2.rhaos4.13.el8, 1.11.3-2.rhaos4.13.el9, 1.11.3-2.rhaos4.14.el8, 1.11.3-2.rhaos4.14.el9, 1.11.3-3.rhaos4.15.el8, 1.11.3-3.rhaos4.15.el9
golang - update to 1.13.4-1.57
Red Hat OpenShift GitOps - update to 1.15.3
golang (Red Hat package) - addressed in versions 1.19.13-9.el9_2, 1.21.11-1.el9_4
golang-1.21 (Ubuntu package) - addressed in versions 1.21.1-1~ubuntu20.04.3, 1.21.1-1~ubuntu22.04.3, 1.21.9-1ubuntu0.1
golang-1.21-go (Ubuntu package) - addressed in versions 1.21.1-1~ubuntu20.04.3, 1.21.1-1~ubuntu22.04.3, 1.21.9-1ubuntu0.1
golang-1.21-src (Ubuntu package) - addressed in versions 1.21.1-1~ubuntu20.04.3, 1.21.1-1~ubuntu22.04.3, 1.21.9-1ubuntu0.1
delve - addressed in versions 1.21.2-3, 1.22.1-1.0.2
golang - update to 1.21.4-12
golang-devel - update to 1.21.4-12
golang-help - update to 1.21.4-12
go-toolset - addressed in versions 1.21.11-1, 1.22.7-1
golang-misc - addressed in versions 1.21.11-1.0.1, 1.22.7-1.0.2
golang-tests - addressed in versions 1.21.11-1.0.1, 1.22.7-1.0.2
golang-bin - addressed in versions 1.21.11-1.0.1, 1.22.7-1.0.2
golang-docs - addressed in versions 1.21.11-1.0.1, 1.22.7-1.0.2
golang - addressed in versions 1.21.11-1.0.1, 1.22.7-1.0.2
golang-src - addressed in versions 1.21.11-1.0.1, 1.22.7-1.0.2
go1.21-doc - addressed in versions 1.21.11-1.36.1, 1.21.11-150000.1.36.1
go1.21 - addressed in versions 1.21.11-1.36.1, 1.21.11-150000.1.36.1
go1.21-race - update to 1.21.11-150000.1.36.1
go1.21-openssl-race - update to 1.21.13.1-150600.16.3.1
go1.21-openssl-doc - update to 1.21.13.1-150600.16.3.1
go1.21-openssl - update to 1.21.13.1-150600.16.3.1
golang-1.22-src (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.1, 1.22.2-2~22.04.1
golang-1.22-go (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.1, 1.22.2-2~22.04.1
golang-1.22 (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.1, 1.22.2-2~22.04.1
go1.22-doc - addressed in versions 1.22.4-1.12.1, 1.22.4-150000.1.18.1
go1.22 - addressed in versions 1.22.4-1.12.1, 1.22.4-150000.1.18.1
go1.22-race - update to 1.22.4-150000.1.18.1
go1.22-openssl-debuginfo - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl-doc - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl-race - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
buildah (Red Hat package) - addressed in versions 1.23.4-7.rhaos4.12.el8, 1.23.4-7.rhaos4.12.el9, 1.29.1-4.rhaos4.13.el8, 1.29.1-4.rhaos4.13.el9, 1.29.1-12.rhaos4.14.el8, 1.29.1-12.rhaos4.14.el9, 1.29.1-23.rhaos4.15.el8, 1.29.1-23.rhaos4.15.el9
cri-tools (Red Hat package) - addressed in versions 1.25.0-4.el8, 1.25.0-4.el9, 1.26.0-6.el8, 1.26.0-6.el9, 1.27.0-5.el8, 1.27.0-5.el9, 1.28.0-6.el8, 1.28.0-6.el9
cri-o (Red Hat package) - addressed in versions 1.25.3-7.rhaos4.12.git44a2cb2.el9, 1.25.5-25.rhaos4.12.git6556f50.el8, 1.26.5-20.rhaos4.13.git2e90133.el8, 1.26.5-20.rhaos4.13.git2e90133.el9, 1.27.8-5.rhaos4.14.git107168f.el8, 1.27.8-5.rhaos4.14.git107168f.el9, 1.28.9-5.rhaos4.15.git674ed4c.el8, 1.28.9-5.rhaos4.15.git674ed4c.el9, 1.29.9-6.rhaos4.16.gite7bd45a.el8, 1.29.9-6.rhaos4.16.gite7bd45a.el9
python3x-urllib3 (Red Hat package) - update to 1.26.20-1.el8ap
python-urllib3 (Red Hat package) - update to 1.26.20-1.el9ap
NetworkManager (Red Hat package) - update to 1.42.2-24.el9_2
python-werkzeug (Red Hat package) - update to 2.0.3-6.el9
conmon (Red Hat package) - addressed in versions 2.1.2-7.rhaos4.12.el8, 2.1.2-8.rhaos4.12.el9, 2.1.7-4.rhaos4.13.el8, 2.1.7-4.rhaos4.13.el9, 2.1.7-5.rhaos4.14.el8, 2.1.7-5.rhaos4.14.el9, 2.1.7-9.rhaos4.15.el8, 2.1.7-14.rhaos4.15.el9
Storage Copy Data Management - update to 2.2.24.1
IBM Cloud Pak System - addressed in versions 2.3.4.1, 2.3.5.0
Ansible Automation Platform - update to 2.4
Multicluster Engine for Kubernetes - update to 2.4.6
container-suseconnect - update to 2.5.0-150000.4.55.1
oath-toolkit (Red Hat package) - addressed in versions 2.6.12-1.el8cp, 2.6.12-1.el9cp
ignition (Red Hat package) - addressed in versions 2.14.0-7.rhaos4.12.el9, 2.14.0-9.rhaos4.12.el8, 2.15.0-9.rhaos4.13.el9, 2.16.2-4.rhaos4.14.el9, 2.16.2-5.rhaos4.15.el9
Dell EMC OpenManage Enterprise Modular - update to 2.20.10
Cost Management - update to 3.3.1
amazon-ssm-agent - update to 3.3.859.0-1
foreman (Red Hat package) - update to 3.9.1.10-1.el8sat
foreman-installer (Red Hat package) - update to 3.9.3.5-1.el8sat
python3x-pulpcore (Red Hat package) - update to 3.28.32-1.el8ap
python-pulpcore (Red Hat package) - addressed in versions 3.28.32-1.el9ap, 3.39.21-1.el8pc
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4, 4.14.18, 4.15.14, 4.16.2
PowerPath Management Appliance - update to 4.0 P03
cephadm-ansible (Red Hat package) - update to 4.1.4-1.el9cp
podman (Red Hat package) - addressed in versions 4.2.0-11.rhaos4.12.el9, 4.4.1-7.rhaos4.12.el8, 4.4.1-12.rhaos4.13.el8, 4.4.1-13.rhaos4.13.el9, 4.4.1-18.rhaos4.14.el8, 4.4.1-18.rhaos4.14.el9, 4.4.1-29.rhaos4.15.el8, 4.4.1-29.rhaos4.15.el9
python-django (Red Hat package) - addressed in versions 4.2.15-1.el8pc, 4.2.16-1.el9ap
python3x-django (Red Hat package) - update to 4.2.16-1.el8ap
Dell EMC OpenManage Enterprise Services - update to 4.3.0
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 4.4.6, 4.5.5, 4.6.0
automation-controller (Red Hat package) - addressed in versions 4.5.11-1.el8ap, 4.5.11-1.el9ap
rubygem-katello (Red Hat package) - update to 4.11.0.17-1.el8sat
openshift (Red Hat package) - addressed in versions 4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8, 4.13.0-202408092110.p0.ge0953cc.assembly.stream.el9, 4.14.0-202408071611.p0.ge826056.assembly.stream.el8, 4.14.0-202408071611.p0.ge826056.assembly.stream.el9, 4.15.0-202408091502.p0.g396c881.assembly.stream.el8, 4.15.0-202408091502.p0.g396c881.assembly.stream.el9
openshift-clients (Red Hat package) - addressed in versions 4.14.0-202408072340.p0.g44b3ac2.assembly.stream.el8, 4.14.0-202408072340.p0.g44b3ac2.assembly.stream.el9, 4.15.0-202408091502.p0.g1e41aa3.assembly.stream.el8, 4.15.0-202408091502.p0.g1e41aa3.assembly.stream.el9
ose-aws-ecr-image-credential-provider (Red Hat package) - addressed in versions 4.14.0-202408072340.p0.g471f069.assembly.stream.el8, 4.14.0-202408072340.p0.g471f069.assembly.stream.el9, 4.15.0-202408091502.p0.g1e5e25d.assembly.stream.el8, 4.15.0-202408091502.p0.g1e5e25d.assembly.stream.el9
ose-azure-acr-image-credential-provider (Red Hat package) - addressed in versions 4.15.0-202408091502.p0.g0d799a2.assembly.stream.el8, 4.15.0-202408091502.p0.g0d799a2.assembly.stream.el9
ose-gcp-gcr-image-credential-provider (Red Hat package) - addressed in versions 4.15.0-202408091502.p0.gfc50272.assembly.stream.el8, 4.15.0-202408091502.p0.gfc50272.assembly.stream.el9
kernel (Red Hat package) - addressed in versions 4.18.0-372.118.1.el8_6, 5.14.0-284.80.1.el9_2, 5.14.0-427.42.1.el9_4
kernel-rt (Red Hat package) - addressed in versions 4.18.0-372.118.1.rt7.278.el8_6, 5.14.0-284.80.1.rt14.365.el9_2
App Connect Enterprise Certified Container - addressed in versions 5.0.19, 12.1.0
Watson CP4D Data Stores - update to 5.1
Kube Descheduler Operator for Red Hat OpenShift - update to 5.1.0
OpenShift Logging - addressed in versions 5.6.21, 5.8.9
Red Hat Ceph Storage - addressed in versions 6.1, 7.1, 8.1
Red Hat Satellite - update to 6.15.4
satellite (Red Hat package) - update to 6.15.4-2.el8sat
Storage Protect Server - update to 8.1.24
rubygem-foreman_rh_cloud (Red Hat package) - update to 9.0.58-1.el8sat
grafana - update to 9.2.10-17.0.1
IBM Spectrum Protect Plus - update to 10.1.6.4
grafana (Red Hat package) - update to 10.2.6-4.el9
rubygem-foreman_theme_satellite (Red Hat package) - update to 13.3.0-0.1.el8sat
ceph (Red Hat package) - addressed in versions 18.2.1-329.el8cp, 18.2.1-329.el9cp, 19.2.1-222.el9cp
python-gunicorn (Red Hat package) - update to 22.0.0-1.el8pc
python-pyOpenSSL (Red Hat package) - update to 24.1.0-1.el8pc
python-cryptography (Red Hat package) - update to 42.0.8-1.el8pc
google-osconfig-agent - addressed in versions 20250115.01-1.32.1, 20250115.01-150000.1.41.1

• https://groups.google.com/g/golang-announce/c/XbxouI9gY7k
• https://github.com/golang/go/issues/67680

• Multiple vulnerabilities in Go programming language
• Multiple vulnerabilities in Moby
• SUSE update for go1.22
• SUSE update for go1.21
• SUSE update for go1.21
• SUSE update for go1.22
• HashiCorp Nomad update for go
• openEuler 24.03 LTS update for golang
• Amazon Linux AMI update for golang
• Red Hat Enterprise Linux 9 update for golang
• Ubuntu update for golang-1.21
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in Red Hat build of Cryostat 3 on RHEL 8
• Red Hat Enterprise Linux 8 update for go-toolset module
• Multiple vulnerabilities in OpenShift Logging 5.8
• Red Hat Enterprise Linux 7 update for rhc-worker-script
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in golang-fips/go
• Improper input validation in golang-fips/go
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console 1.6
• Red Hat Enterprise Linux 9 update for golang
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Input validation error in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15 packages
• Multiple vulnerabilities in Red Hat build of Cryostat 3 on RHEL 8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Oracle Solaris update for thrid-party components
• Multiple vulnerabilities in Red Hat Cost Management
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in IBM Observability with Instana
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• SUSE update for container-suseconnect
• Multiple vulnerabilities in IBM Instana Observability
• Multiple vulnerabilities in IBM Storage Copy Data Management
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.16
• Amazon Linux AMI update for amazon-ssm-agent
• Multiple vulnerabilities in Red Hat Satellite 6.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Splunk Enterprise update for third-party components
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift 1.2
• IBM Storage Protect Server update for Golang Go
• Multiple vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift 5.1
• SUSE update for go1.21-openssl
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.4
• Multiple vulnerabilities in IBM Cloud Pak System
• SUSE update for go1.22-openssl
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• SUSE update for go1.22-openssl
• Red Hat Enterprise Linux 9 update for grafana
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.6
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Dell OpenManage Enterprise update for Go
• Multiple vulnerabilities in Dell OpenManage Enterprise Modular
• Ubuntu update for golang-1.18
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• IBM Watson CP4D Data Stores update for Golang Go net/netip package
• SUSE update for google-osconfig-agent
• SUSE update for google-osconfig-agent
• Anolis OS update for go-toolset:an8 module
• Anolis OS update for grafana
• Anolis OS update for go-toolset:an8 module
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in Red Hat Ceph Storage 6
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in Red Hat Ceph Storage 7
• Multiple vulnerabilities in Red Hat Ceph Storage 7
• Dell PowerPath Management Appliance update for Go
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.15
• Multiple vulnerabilities in IBM Rapid Infrastructure Automation
• Splunk Universal Forwarder update for third-party components
• Splunk Enterprise update for third-party components
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage)
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.15
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Multiple vulnerabilities in Red Hat Ceph Storage 8
• Multiple vulnerabilities in Red Hat Ceph Storage 8
• Input validation error in IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Traefik update for Go (CVE-2024-24790)