Resource exhaustion in Go programming language - CVE-2024-34158

Vulnerability identifier: #VU97217

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-34158

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to go/build/constraint does not properly control consumption of internal resources when calling Parse on a "// +build" build tag line with deeply nested expressions. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Go programming language
Oracle Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for ARM 64
Development Tools Module
openSUSE Leap
Ubuntu
openEuler
trivy
Guardium Data Security Center (GDSC)
IBM Business Automation Manager Open Editions
Business Automation Insights
Watson CP4D Data Stores
IBM Concert Software
IBM Cloud Pak for Security
IBM Process Mining
Cryostat
IBM Observability with Instana
Run Once Duration Override Operator for Red Hat OpenShift
Splunk Operator for Kubernetes Add-on
Red Hat OpenShift Dev Spaces
Kube Descheduler Operator for Red Hat OpenShift
OpenShift Logging
IBM Spectrum Protect Plus
IBM Cloud Pak for Business Automation
QRadar Suite
Splunk Enterprise
Red Hat OpenShift Container Platform
Migration Toolkit for Containers
golang-1.18 (Ubuntu package)
golang-1.18-src (Ubuntu package)
golang-1.18-go (Ubuntu package)
toolbox
toolbox-tests
udica
golang-github-prometheus-promu (Red Hat package)
butane (Red Hat package)
runc (Red Hat package)
runc
slirp4netns
oci-seccomp-bpf-hook
containernetworking-plugins (Red Hat package)
containernetworking-plugins
skopeo (Red Hat package)
aardvark-dns
netavark
fuse-overlayfs
crun
skopeo
skopeo-tests
golang-help
golang
golang-devel
golang-1.17-go (Ubuntu package)
golang-1.17 (Ubuntu package)
golang-1.17-src (Ubuntu package)
delve
go-toolset
golang-tests
golang-bin
golang-docs
golang-misc
golang-src
golang (Red Hat package)
go1.21-openssl-doc
go1.21-openssl
go1.21-openssl-race
golang-1.22-go (Ubuntu package)
golang-1.22 (Ubuntu package)
golang-1.22-src (Ubuntu package)
go1.22
go1.22-doc
go1.22-openssl
go1.22-openssl-doc
go1.22-openssl-race
go1.22-openssl-debuginfo
go1.22-race
go1.23
go1.23-doc
go1.23-race
go1.23-openssl-race
go1.23-openssl-doc
go1.23-openssl-debuginfo
go1.23-openssl
buildah (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
buildah-tests
buildah
containers-common
conmon (Red Hat package)
conmon
haproxy (Red Hat package)
ignition (Red Hat package)
container-selinux (Red Hat package)
container-selinux
crit
python3-criu
criu
criu-devel
criu-libs
podman (Red Hat package)
libslirp-devel
libslirp
libreswan (Red Hat package)
python3-podman
podman-remote
podman-docker
podman
podman-catatonit
podman-gvproxy
podman-plugins
podman-tests
openshift-ansible (Red Hat package)
openshift (Red Hat package)
openshift-kuryr (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-clients (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
ose-azure-acr-image-credential-provider (Red Hat package)
ose-gcp-gcr-image-credential-provider (Red Hat package)
kernel-rt (Red Hat package)
kernel (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
openstack-ironic (Red Hat package)
cockpit-podman
osbuild-composer
osbuild-composer-worker
osbuild-composer-core
python3-osbuild
osbuild-selinux
osbuild-ostree
osbuild-lvm2
osbuild-luks2
osbuild-doc
osbuild-depsolve-dnf
osbuild
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
IBM Cloud Pak System
Multicluster Engine for Kubernetes
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM Security Verify Access
IBM API Connect

Install updates from vendor's website.

Go programming language - addressed in versions 1.22.7, 1.23.1
trivy - update to 0.56.0
IBM Concert Software - update to 1.0.5
QRadar Suite - addressed in versions 1.10.26.0, 1.10.27.0
IBM Process Mining - update to 2.0
Guardium Data Security Center (GDSC) - update to 3.6.1
Red Hat OpenShift Container Platform - addressed in versions 4.12.68, 4.13.53, 4.14.40, 4.15.37, 4.15.38, 4.16.18, 4.16.19, 4.17.2, 4.17.3
IBM Business Automation Manager Open Editions - update to 8.0.8
Splunk Enterprise - addressed in versions 9.1.9, 9.2.6, 9.3.4, 9.4.2
Business Automation Insights - update to 24.0.0.0.2
IBM Observability with Instana - update to 282
golang-1.18 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18-src (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
golang-1.18-go (Ubuntu package) - addressed in versions Ubuntu Pro, 1.18.1-1ubuntu1.2, 1.18.1-1ubuntu1~20.04.3
toolbox - update to 0.0.99.5-2.0.1
toolbox-tests - update to 0.0.99.5-2.0.1
udica - update to 0.2.6-21
golang-github-prometheus-promu (Red Hat package) - addressed in versions 0.15.0-18.gitd5383c5.el8, 0.16.0-19.gitf6c51c9.el9
butane (Red Hat package) - addressed in versions 0.16.0-5.rhaos4.12.el8, 0.19.0-4.rhaos4.14.el8, 0.20.0-4.rhaos4.15.el8, 0.21.0-4.rhaos4.16.el8, 0.22.0-2.rhaos4.17.el8
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.1.2
runc (Red Hat package) - addressed in versions 1.1.6-9.rhaos4.12.el8, 1.1.14-2.rhaos4.13.el8, 1.1.14-2.rhaos4.13.el9, 1.1.14-2.rhaos4.14.el8, 1.1.14-2.rhaos4.14.el9, 1.1.14-2.rhaos4.15.el8, 1.1.14-2.rhaos4.15.el9, 1.1.14-2.rhaos4.17.el9, 1.1.14-3.rhaos4.16.el8, 1.1.14-3.rhaos4.16.el9
runc - update to 1.1.12-5.0.1
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.2.2
slirp4netns - update to 1.2.3-1
oci-seccomp-bpf-hook - update to 1.2.10-1
OpenShift API for Data Protection (OADP) - addressed in versions 1.3.4, 1.4.2
containernetworking-plugins (Red Hat package) - addressed in versions 1.4.0-4.rhaos4.12.el8, 1.4.0-4.rhaos4.14.el8, 1.4.0-4.rhaos4.15.el8, 1.4.0-4.rhaos4.17.el8, 1.4.0-5.rhaos4.13.el8, 1.4.0-5.rhaos4.16.el8
containernetworking-plugins - update to 1.4.0-5.0.1
Network Observability plugin for the Openshift Console - update to 1.7.0
Migration Toolkit for Containers - update to 1.8.5
skopeo (Red Hat package) - addressed in versions 1.9.4-7.rhaos4.12.el8, 1.9.4-7.rhaos4.12.el9, 1.11.3-4.rhaos4.13.el8, 1.11.3-4.rhaos4.13.el9, 1.11.3-4.rhaos4.14.el8, 1.11.3-4.rhaos4.14.el9, 1.11.3-5.rhaos4.15.el8, 1.11.3-6.rhaos4.15.el9, 1.14.5-3.rhaos4.16.el8, 1.14.5-3.rhaos4.16.el9, 1.16.0-3.rhaos4.17.el8, 1.16.0-3.rhaos4.17.el9
aardvark-dns - update to 1.10.1-2.0.1
netavark - update to 1.10.3-1.0.1
fuse-overlayfs - update to 1.13-1.0.1
crun - update to 1.14.3-2
skopeo - update to 1.14.5-3.0.1
skopeo-tests - update to 1.14.5-3.0.1
golang-help - addressed in versions 1.17.3-37, 1.21.4-25
golang - addressed in versions 1.17.3-37, 1.21.4-25
golang-devel - addressed in versions 1.17.3-37, 1.21.4-25
golang-1.17-go (Ubuntu package) - update to 1.17.13-3ubuntu1.3
golang-1.17 (Ubuntu package) - update to 1.17.13-3ubuntu1.3
golang-1.17-src (Ubuntu package) - update to 1.17.13-3ubuntu1.3
delve - update to 1.21.2-4.0.1
go-toolset - update to 1.21.13-1
golang-tests - update to 1.21.13-2.0.1
golang-bin - update to 1.21.13-2.0.1
golang - update to 1.21.13-2.0.1
golang-docs - update to 1.21.13-2.0.1
golang-misc - update to 1.21.13-2.0.1
golang-src - update to 1.21.13-2.0.1
golang (Red Hat package) - update to 1.21.13-3.el9_4
go1.21-openssl-doc - update to 1.21.13.4-150000.1.14.1
go1.21-openssl - update to 1.21.13.4-150000.1.14.1
go1.21-openssl-race - update to 1.21.13.4-150000.1.14.1
golang-1.22-go (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.3, 1.22.2-2~20.04.2, 1.22.2-2~22.04.2
golang-1.22 (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.3, 1.22.2-2~20.04.2, 1.22.2-2~22.04.2
golang-1.22-src (Ubuntu package) - addressed in versions 1.22.2-2ubuntu0.3, 1.22.2-2~20.04.2, 1.22.2-2~22.04.2
go1.22 - addressed in versions 1.22.7-1.21.1, 1.22.7-150000.1.27.1
go1.22-doc - addressed in versions 1.22.7-1.21.1, 1.22.7-150000.1.27.1
go1.22-openssl - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl-doc - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl-race - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-openssl-debuginfo - addressed in versions 1.22.7.1-150000.1.3.1, 1.22.7.1-150600.13.3.1
go1.22-race - update to 1.22.7-150000.1.27.1
go1.23 - addressed in versions 1.23.1-1.6.1, 1.23.1-150000.1.6.1
go1.23-doc - addressed in versions 1.23.1-1.6.1, 1.23.1-150000.1.6.1
go1.23-race - update to 1.23.1-150000.1.6.1
go1.23-openssl-race - addressed in versions 1.23.2.2-150000.1.3.1, 1.23.2.2-150600.13.3.1
go1.23-openssl-doc - addressed in versions 1.23.2.2-150000.1.3.1, 1.23.2.2-150600.13.3.1
go1.23-openssl-debuginfo - addressed in versions 1.23.2.2-150000.1.3.1, 1.23.2.2-150600.13.3.1
go1.23-openssl - addressed in versions 1.23.2.2-150000.1.3.1, 1.23.2.2-150600.13.3.1
buildah (Red Hat package) - addressed in versions 1.23.4-8.rhaos4.12.el8, 1.23.4-8.rhaos4.12.el9, 1.29.1-5.rhaos4.13.el9, 1.29.1-13.rhaos4.14.el8, 1.29.1-13.rhaos4.14.el9, 1.29.1-24.rhaos4.15.el8, 1.29.1-24.rhaos4.15.el9, 1.33.7-3.rhaos4.17.el8, 1.33.7-3.rhaos4.17.el9, 1.33.7-4.rhaos4.16.el8, 1.33.7-4.rhaos4.16.el9, 1.33.9-1.el9_4, 1.37.5-1.el9_5
cri-tools (Red Hat package) - addressed in versions 1.25.0-5.el8, 1.25.0-5.el9, 1.26.0-7.el8, 1.26.0-7.el9, 1.27.0-6.el8, 1.27.0-6.el9, 1.28.0-7.el8, 1.28.0-7.el9, 1.29.0-6.el8, 1.29.0-6.el9, 1.30.0-5.el8, 1.30.0-5.el9
cri-o (Red Hat package) - addressed in versions 1.25.5-5.rhaos4.12.git53dc492.el9, 1.25.5-30.rhaos4.12.git53dc492.el8, 1.26.5-26.rhaos4.13.giteb3d487.el8, 1.26.5-26.rhaos4.13.giteb3d487.el9, 1.27.8-12.rhaos4.14.git7597c43.el8, 1.27.8-12.rhaos4.14.git7597c43.el9, 1.28.11-5.rhaos4.15.git35a2431.el8, 1.28.11-5.rhaos4.15.git35a2431.el9, 1.29.9-5.rhaos4.16.git34690b9.el8, 1.29.9-5.rhaos4.16.git34690b9.el9, 1.30.6-5.rhaos4.17.git690d4d6.el8, 1.30.6-5.rhaos4.17.git690d4d6.el9
buildah-tests - update to 1.33.8-4
buildah - update to 1.33.8-4
containers-common - update to 1-82.0.1
conmon (Red Hat package) - addressed in versions 2.1.2-8.rhaos4.12.el8, 2.1.2-9.rhaos4.12.el9, 2.1.7-5.rhaos4.13.el8, 2.1.7-5.rhaos4.13.el9, 2.1.7-6.rhaos4.14.el8, 2.1.7-6.rhaos4.14.el9, 2.1.7-10.rhaos4.15.el8, 2.1.7-15.rhaos4.15.el9, 2.1.10-5.rhaos4.16.el8, 2.1.10-5.rhaos4.16.el9, 2.1.12-5.rhaos4.17.el8, 2.1.12-5.rhaos4.17.el9
conmon - update to 2.1.10-1
haproxy (Red Hat package) - addressed in versions 2.2.24-5.rhaos4.12.el8, 2.2.24-5.rhaos4.13.el8
IBM Cloud Pak System - addressed in versions 2.3.4.1, 2.3.5.0
Multicluster Engine for Kubernetes - update to 2.3.8
ignition (Red Hat package) - addressed in versions 2.14.0-8.rhaos4.12.el9, 2.14.0-10.rhaos4.12.el8, 2.15.0-10.rhaos4.13.el9, 2.16.2-5.rhaos4.14.el9, 2.16.2-6.rhaos4.15.el9, 2.18.0-5.rhaos4.16.el9
container-selinux (Red Hat package) - update to 2.228.1-1.rhaos4.12.el8
container-selinux - update to 2.229.0-2
Splunk Operator for Kubernetes Add-on - update to 3.0.0
Red Hat OpenShift Dev Spaces - update to 3.17.0
crit - update to 3.18-5.0.1
python3-criu - update to 3.18-5.0.1
criu - update to 3.18-5.0.1
criu-devel - update to 3.18-5.0.1
criu-libs - update to 3.18-5.0.1
podman (Red Hat package) - addressed in versions 4.2.0-12.rhaos4.12.el9, 4.4.1-8.rhaos4.12.el8, 4.4.1-15.rhaos4.13.el8, 4.4.1-16.rhaos4.13.el9, 4.4.1-21.rhaos4.14.el8, 4.4.1-21.rhaos4.14.el9, 4.4.1-31.rhaos4.15.el8, 4.4.1-31.rhaos4.15.el9, 4.9.4-10.rhaos4.16.el8, 4.9.4-12.rhaos4.16.el9, 4.9.4-13.el9_4, 5.2.2-9.el9_5, 5.2.3-2.rhaos4.17.el8, 5.2.3-2.rhaos4.17.el9
libslirp-devel - update to 4.4.0-2
libslirp - update to 4.4.0-2
libreswan (Red Hat package) - update to 4.5-1.el9
python3-podman - update to 4.9.0-2
podman-remote - update to 4.9.4-13.0.1
podman-docker - update to 4.9.4-13.0.1
podman - update to 4.9.4-13.0.1
podman-catatonit - update to 4.9.4-13.0.1
podman-gvproxy - update to 4.9.4-13.0.1
podman-plugins - update to 4.9.4-13.0.1
podman-tests - update to 4.9.4-13.0.1
openshift-ansible (Red Hat package) - addressed in versions 4.12.0-202410181935.p0.gd97dd6f.assembly.stream.el8, 4.13.0-202410181847.p0.g1397e80.assembly.stream.el8, 4.13.0-202410181847.p0.g1397e80.assembly.stream.el9, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el8, 4.14.0-202410181711.p0.g846e89b.assembly.stream.el9, 4.15.0-202410181710.p0.g41f6580.assembly.stream.el8, 4.15.0-202410181710.p0.g41f6580.assembly.stream.el9, 4.16.0-202410172045.p0.g06f35b9.assembly.stream.el8, 4.16.0-202410172045.p0.g06f35b9.assembly.stream.el9, 4.17.0-202410111511.p0.g7fe7411.assembly.stream.el8, 4.17.0-202410111511.p0.g7fe7411.assembly.stream.el9
openshift (Red Hat package) - addressed in versions 4.12.0-202410181935.p0.g1eb8682.assembly.stream.el8, 4.12.0-202410181935.p0.g1eb8682.assembly.stream.el9, 4.13.0-202410181847.p0.g53fd427.assembly.stream.el8, 4.13.0-202410181847.p0.g53fd427.assembly.stream.el9, 4.14.0-202410181711.p0.g03a907c.assembly.stream.el8, 4.14.0-202410181711.p0.g03a907c.assembly.stream.el9, 4.15.0-202410232006.p0.g502c5ce.assembly.stream.el8, 4.15.0-202410232006.p0.g502c5ce.assembly.stream.el9, 4.16.0-202410172045.p0.g632b078.assembly.stream.el8, 4.16.0-202410172045.p0.g632b078.assembly.stream.el9, 4.17.0-202410151605.p0.g6816ea6.assembly.stream.el8, 4.17.0-202410151605.p0.g6816ea6.assembly.stream.el9
openshift-kuryr (Red Hat package) - addressed in versions 4.12.0-202410181935.p0.g8fd2f8b.assembly.stream.el8, 4.13.0-202410181847.p0.g36754b7.assembly.stream.el8, 4.14.0-202410181711.p0.g8926a29.assembly.stream.el8
openshift4-aws-iso (Red Hat package) - addressed in versions 4.12.0-202410181935.p0.gd2acdd5.assembly.stream.el8, 4.13.0-202410181847.p0.gd2acdd5.assembly.stream.el8, 4.14.0-202410181711.p0.gd2acdd5.assembly.stream.el8, 4.15.0-202410181710.p0.gd2acdd5.assembly.stream.el8, 4.16.0-202410172045.p0.gd2acdd5.assembly.stream.el8, 4.17.0-202410111511.p0.gd2acdd5.assembly.stream.el8
openshift-clients (Red Hat package) - addressed in versions 4.12.0-202410181935.p0.gd691257.assembly.stream.el8, 4.12.0-202410181935.p0.gd691257.assembly.stream.el9, 4.13.0-202410181847.p0.gd192e90.assembly.stream.el8, 4.13.0-202410181847.p0.gd192e90.assembly.stream.el9, 4.14.0-202410181711.p0.g44b3ac2.assembly.stream.el8, 4.14.0-202410181711.p0.g44b3ac2.assembly.stream.el9, 4.15.0-202410181710.p0.g8231637.assembly.stream.el8, 4.15.0-202410181710.p0.g8231637.assembly.stream.el9, 4.16.0-202410172045.p0.gcf533b5.assembly.stream.el8, 4.16.0-202410172045.p0.gcf533b5.assembly.stream.el9, 4.17.0-202410160306.p0.g6bf65cc.assembly.stream.el8, 4.17.0-202410160306.p0.g6bf65cc.assembly.stream.el9
ose-aws-ecr-image-credential-provider (Red Hat package) - addressed in versions 4.14.0-202410181711.p0.g9a7820e.assembly.stream.el8, 4.14.0-202410181711.p0.g9a7820e.assembly.stream.el9, 4.15.0-202410181710.p0.gfd77d92.assembly.stream.el8, 4.15.0-202410181710.p0.gfd77d92.assembly.stream.el9, 4.16.0-202410172045.p0.ga53e9de.assembly.stream.el8, 4.16.0-202410172045.p0.ga53e9de.assembly.stream.el9, 4.17.0-202410111511.p0.g8c77f41.assembly.stream.el8, 4.17.0-202410111511.p0.g8c77f41.assembly.stream.el9
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.14.13, 4.15.9, 4.16.4, 4.17.1
ose-azure-acr-image-credential-provider (Red Hat package) - addressed in versions 4.15.0-202410181710.p0.g0d799a2.assembly.stream.el8, 4.15.0-202410181710.p0.g0d799a2.assembly.stream.el9, 4.16.0-202410172045.p0.g0e95532.assembly.stream.el8, 4.16.0-202410172045.p0.g0e95532.assembly.stream.el9, 4.17.0-202410111511.p0.gb9204e2.assembly.stream.el8, 4.17.0-202410111511.p0.gb9204e2.assembly.stream.el9
ose-gcp-gcr-image-credential-provider (Red Hat package) - addressed in versions 4.15.0-202410181710.p0.gfc50272.assembly.stream.el8, 4.15.0-202410181710.p0.gfc50272.assembly.stream.el9, 4.16.0-202410172045.p0.g26b43df.assembly.stream.el8, 4.16.0-202410172045.p0.g26b43df.assembly.stream.el9, 4.17.0-202410111511.p0.g8ce997d.assembly.stream.el8, 4.17.0-202410111511.p0.g8ce997d.assembly.stream.el9
kernel-rt (Red Hat package) - addressed in versions 4.18.0-372.127.1.rt7.287.el8_6, 5.14.0-284.90.1.rt14.375.el9_2
Kube Descheduler Operator for Red Hat OpenShift - update to 5.0.2
Watson CP4D Data Stores - update to 5.1
OpenShift Logging - addressed in versions 5.6.25, 5.8.14, 5.9.8, 6.0.1
kernel (Red Hat package) - update to 5.14.0-284.90.1.el9_2
openstack-ironic-python-agent (Red Hat package) - update to 9.0.1-0.20240913135525.2b2dd8f.el9
IBM Security Verify Access - update to 10.0.9
IBM API Connect - update to 10.0.9.0
IBM Spectrum Protect Plus - update to 10.1.6.4
openstack-ironic (Red Hat package) - update to 21.0.1-0.20240913135525.114badc.el9
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1
cockpit-podman - update to 84.1-1
osbuild-composer - update to 132.2-1.0.1
osbuild-composer-worker - update to 132.2-1.0.1
osbuild-composer-core - update to 132.2-1.0.1
python3-osbuild - update to 141.2-1.0.1
osbuild-selinux - update to 141.2-1.0.1
osbuild-ostree - update to 141.2-1.0.1
osbuild-lvm2 - update to 141.2-1.0.1
osbuild-luks2 - update to 141.2-1.0.1
osbuild-doc - update to 141.2-1.0.1
osbuild-depsolve-dnf - update to 141.2-1.0.1
osbuild - update to 141.2-1.0.1

• https://go.dev/cl/611240
• https://go.dev/issue/69141
• https://groups.google.com/g/golang-dev/c/S9POB9NCTdk
• https://pkg.go.dev/vuln/GO-2024-3107

• Multiple vulnerabilities in Go programming language
• SUSE update for go1.22
• SUSE update for go1.23
• SUSE update for go1.22
• SUSE update for go1.23
• Red Hat Enterprise Linux 8 update for the go-toolset:rhel8 module
• Red Hat Enterprise Linux 9 update for golang
• Multiple vulnerabilities in IBM Instana Observability
• Multiple vulnerabilities in IBM QRadar Suite Software
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Trivy update for Go
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console 1.7
• Multiple vulnerabilities in Red Hat build of Cryostat 3 on RHEL 8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17 packages
• Ubuntu update for golang-1.22
• Multiple vulnerabilities in OpenShift Logging 5.9
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in OpenShift Logging 6.0
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16 packages
• Red Hat Enterprise Linux 9 update for buildah
• Multiple vulnerabilities in IBM Cloud Pak System
• SUSE update for go1.22-openssl
• SUSE update for go1.23-openssl
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• SUSE update for go1.21-openssl
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• SUSE update for go1.23-openssl
• SUSE update for go1.22-openssl
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in QRadar Suite Software
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14 packages
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 9 update for buildah
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Ubuntu update for golang-1.17
• openEuler 22.03 LTS SP1 update for golang
• openEuler 22.03 LTS SP3 update for golang
• openEuler 24.03 LTS update for golang
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift (OSSO) 1.2
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.17
• Multiple vulnerabilities in Kube Descheduler Operator for Red Hat OpenShift 5.0
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.17
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.16
• Ubuntu update for golang-1.18
• openEuler 22.03 LTS SP4 update for golang
• Multiple vulnerabilities in IBM API Connect
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• IBM Watson CP4D Data Stores update for Golang Go
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.15
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Multiple vulnerabilities in Guardium Data Security Center
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.4
• Multiple vulnerabilities in IBM Security Verify Access
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Business Automation Insights
• Multiple vulnerabilities in IBM Concert Software
• Anolis OS update for go-toolset:an8 module
• Anolis OS update for container-tools:an8 module
• Multiple vulnerabilities in IBM Process Mining
• Anolis OS update for osbuild
• Anolis OS update for osbuild-composer
• Splunk Enterprise update for third-party components
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Splunk Operator for Kubernetes Add-on update for third-party components