Every CVE Search/ Get API key

CVE-2022-27664

golang.org/x/net/http2 Denial of Service vulnerability

7.5 HighFix available

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.49%Up 2.6 points since Sep 7, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
CVE-2022-27664
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
CVE List No score

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
CVE-2022-27664
Updated
2026-11-02
EUVDEUVD-2022-6718 No score

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
EUVD-2022-6718
Updated
2026-11-03
GitHub AdvisoriesGHSA-69cg-p879-7622 7.5

golang.org/x/net/http2 Denial of Service vulnerability

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
GHSA-69cg-p879-7622
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALPINE-CVE-2022-27664 7.5

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
ALPINE-CVE-2022-27664
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-10855 7.5

CVE-2022-27664 affecting package golang for versions less than 1.18.8-1

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
AZL-10855
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVAZL-31963 7.5

CVE-2022-27664 affecting package kured for versions less than 1.13.2-1

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
AZL-31963
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-37328 7.5

CVE-2022-27664 affecting package golang for versions less than 1.21.6-1

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
AZL-37328
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-52863 7.5

CVE-2022-27664 affecting package golang for versions less than 1.18.8-1

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
AZL-52863
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-79106 7.5

CVE-2022-27664 affecting package golang 1.25.7-1

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
AZL-79106
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-98982 7.5

CVE-2022-27664 affecting package golang 1.27.1-1

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
AZL-98982
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2022-27664 7.5

CVE-2022-27664 does not affect BellSoft software

Record
BELL-CVE-2022-27664
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-27664 7.5

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
DEBIAN-CVE-2022-27664
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVGHSA-69cg-p879-7622 7.5

golang.org/x/net/http2 Denial of Service vulnerability

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
GHSA-69cg-p879-7622
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-1939 7.5

golang security update

The Go Programming Language

Security Fix(es):

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.(CVE-2022-27664)

Record
OESA-2022-1939
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHBA-2023:0564 6.5

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.26 packages update

Record
RHBA-2023:0564
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:7129 7.5

Red Hat Security Advisory: git-lfs security and bug fix update

Record
RHSA-2022:7129
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:7398 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.0 packages and security update

Record
RHSA-2022:7398
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:8626 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.11.17 packages and security update

Record
RHSA-2022:8626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:0328 7.5

Red Hat Security Advisory: go-toolset and golang security and bug fix update

Record
RHSA-2023:0328
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:0446 7.5

Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update

Record
RHSA-2023:0446
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:0708 7.5

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.27.0

Record
RHSA-2023:0708
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:1275 7.5

Red Hat Security Advisory: Red Hat OpenStack Platform (etcd) security update

Record
RHSA-2023:1275
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2167 7.5

Red Hat Security Advisory: grafana security and enhancement update

Record
RHSA-2023:2167
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:2177 6.5

Red Hat Security Advisory: grafana-pcp security and enhancement update

Record
RHSA-2023:2177
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2193 6.5

Red Hat Security Advisory: butane security, bug fix, and enhancement update

Record
RHSA-2023:2193
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2204 7.5

Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Record
RHSA-2023:2204
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:2236 6.5

Red Hat Security Advisory: toolbox security and bug fix update

Record
RHSA-2023:2236
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2357 7.5

Red Hat Security Advisory: git-lfs security and bug fix update

Record
RHSA-2023:2357
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2758 7.5

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Record
RHSA-2023:2758
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2780 7.5

Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update

Record
RHSA-2023:2780
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:2784 7.5

Red Hat Security Advisory: grafana security update

Record
RHSA-2023:2784
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:2785 6.5

Red Hat Security Advisory: grafana-pcp security update

Record
RHSA-2023:2785
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2802 7.5

Red Hat Security Advisory: container-tools:4.0 security and bug fix update

Record
RHSA-2023:2802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:3204 7.5

Red Hat Security Advisory: OpenShift Virtualization 4.13.0 RPMs security and bug fix update

Record
RHSA-2023:3204
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2023:3613 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.22 packages and security update

Record
RHSA-2023:3613
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2023:4674 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.30 packages and security update

Record
RHSA-2023:4674
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:4734 6.5

Red Hat Security Advisory: OpenShift Container Platform 4.13.10 security update

Record
RHSA-2023:4734
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:5009 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.14.0 security update

Record
RHSA-2023:5009
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0121 7.5

Red Hat Security Advisory: container-tools:4.0 security update

Record
RHSA-2024:0121
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:7129 7.5

Moderate: git-lfs security and bug fix update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

  • golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851)

  • golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852)

  • golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

  • golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

  • golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  • golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

  • golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • git-lfs needs to be rebuild with golang 1.17.7-1 or above
Record
RLSA-2022:7129
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:2177 6.5

Moderate: grafana-pcp security and enhancement update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.2 Release Notes linked from the References section.

Record
RLSA-2023:2177
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:2758 7.5

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  • golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

  • golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

  • golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

  • golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  • golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  • golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

  • golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

  • golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

  • golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

  • podman: symlink exchange attack in podman export volume (CVE-2023-0778)

  • golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

Record
RLSA-2023:2758
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:2802 7.5

Moderate: container-tools:4.0 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  • golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

  • golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

  • golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

  • golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  • golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  • golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

  • golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

  • golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

  • golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

  • podman: symlink exchange attack in podman export volume (CVE-2023-0778)

  • podman: possible information disclosure and modification (CVE-2022-2989)

  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

Record
RLSA-2023:2802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2024:0121 7.5

Moderate: container-tools:4.0 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)

  • golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

  • golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

  • golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)

  • golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)

  • golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)

  • golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)

  • golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:0121
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-27664 7.5

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

Record
UBUNTU-CVE-2022-27664
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:7129 No score

Moderate: git-lfs security and bug fix update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

  • golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851)
  • golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852)
  • golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
  • golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
  • golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
  • golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
  • golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • git-lfs needs to be rebuild with golang 1.17.7-1 or above
Record
ALSA-2022:7129
Updated
2026-11-02
OSVALSA-2023:2167 No score

Moderate: grafana security and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

  • golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
  • grafana: Escalation from admin to server admin when auth proxy is used (CVE-2022-35957)
  • grafana: using email as a username can block other users from signing in (CVE-2022-39229)
  • golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2167
Updated
2026-11-02
OSVALSA-2023:2177 No score

Moderate: grafana-pcp security and enhancement update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.

Security Fix(es):

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2177
Updated
2026-11-02
OSVALSA-2023:2193 No score

Moderate: butane security, bug fix, and enhancement update

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition.

The following packages have been upgraded to a later upstream version: butane (0.16.0). (BZ#2135475)

Security Fix(es):

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2193
Updated
2026-11-02
OSVALSA-2023:2204 No score

Moderate: Image Builder security, bug fix, and enhancement update

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

  • golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)
  • golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
  • golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
  • golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2204
Updated
2026-11-02
OSVALSA-2023:2236 No score

Moderate: toolbox security and bug fix update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.

Security Fix(es):

  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
  • golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2236
Updated
2026-11-02
OSVALSA-2023:2357 No score

Moderate: git-lfs security and bug fix update

Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.

Security Fix(es):

  • golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
  • golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
  • golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
  • golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
  • golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
  • golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
  • golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)
  • golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2357
Updated
2026-11-02
OSVALSA-2023:2758 No score

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
  • golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
  • golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)
  • golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
  • golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
  • golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
  • golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
  • golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
  • golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
  • golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
  • golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
  • podman: symlink exchange attack in podman export volume (CVE-2023-0778)
  • golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)
  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2758
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
golang.org/x/net
Go
 before 0.0.0-20220906165146-f3363e06e74c
0.0.0-20220906165146-f3363e06e74c
golang.org/x/net/http2
Go
 before 0.0.0-20220906165146-f3363e06e74c
0.0.0-20220906165146-f3363e06e74c
docker-cli-compose
Alpine:v3.17
 before 2.15.1-r0
2.15.1-r0
docker-cli-compose
Alpine:v3.18
 before 2.15.1-r0
2.15.1-r0
docker-cli-compose
Alpine:v3.19
 before 2.15.1-r0
2.15.1-r0
docker-cli-compose
Alpine:v3.20
 before 2.15.1-r0
2.15.1-r0
docker-cli-compose
Alpine:v3.21
 before 2.15.1-r0
2.15.1-r0
docker-cli-compose
Alpine:v3.22
 before 2.15.1-r0
2.15.1-r0
docker-cli-compose
Alpine:v3.23
 before 2.15.1-r0
2.15.1-r0
docker-cli-compose
Alpine:v3.24
 before 2.15.1-r0
2.15.1-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
go
Alpine:v3.16
 before 1.18.6-r0
1.18.6-r0
go
Alpine:v3.17
 before 1.19.1-r0
1.19.1-r0
go
Alpine:v3.18
 before 1.19.1-r0
1.19.1-r0
go
Alpine:v3.19
 before 1.19.1-r0
1.19.1-r0
go
Alpine:v3.20
 before 1.19.1-r0
1.19.1-r0
go
Alpine:v3.21
 before 1.19.1-r0
1.19.1-r0
go
Alpine:v3.22
 before 1.19.1-r0
1.19.1-r0
go
Alpine:v3.23
 before 1.19.1-r0
1.19.1-r0
go
Alpine:v3.24
 before 1.19.1-r0
1.19.1-r0
git-lfs
AlmaLinux:8
 before 2.13.3-3.el8_6
2.13.3-3.el8_6
grafana
AlmaLinux:9
 before 9.0.9-2.el9
9.0.9-2.el9
grafana-pcp
AlmaLinux:9
 before 5.1.1-1.el9
5.1.1-1.el9
butane
AlmaLinux:9
 before 0.16.0-1.el9
0.16.0-1.el9
osbuild-composer
AlmaLinux:9
 before 76-2.el9_2.alma
76-2.el9_2.alma
osbuild-composer-core
AlmaLinux:9
 before 76-2.el9_2.alma
76-2.el9_2.alma
osbuild-composer-dnf-json
AlmaLinux:9
 before 76-2.el9_2.alma
76-2.el9_2.alma
osbuild-composer-worker
AlmaLinux:9
 before 76-2.el9_2.alma
76-2.el9_2.alma
weldr-client
AlmaLinux:9
 before 35.9-1.el9
35.9-1.el9
toolbox
AlmaLinux:9
 before 0.0.99.3-9.el9
0.0.99.3-9.el9
toolbox-tests
AlmaLinux:9
 before 0.0.99.3-9.el9
0.0.99.3-9.el9
git-lfs
AlmaLinux:9
 before 3.2.0-1.el9
3.2.0-1.el9
aardvark-dns
AlmaLinux:8
 before 2:1.5.0-2.module_el8.8.0+3470+252b1910
2:1.5.0-2.module_el8.8.0+3470+252b1910
buildah
AlmaLinux:8
 before 1:1.29.1-1.module_el8.8.0+3470+252b1910
1:1.29.1-1.module_el8.8.0+3470+252b1910
buildah-tests
AlmaLinux:8
 before 1:1.29.1-1.module_el8.8.0+3470+252b1910
1:1.29.1-1.module_el8.8.0+3470+252b1910
cockpit-podman
AlmaLinux:8
 before 63.1-1.module_el8.8.0+3557+7ba9cc13
63.1-1.module_el8.8.0+3557+7ba9cc13
conmon
AlmaLinux:8
 before 3:2.1.6-1.module_el8.8.0+3470+252b1910
3:2.1.6-1.module_el8.8.0+3470+252b1910
container-selinux
AlmaLinux:8
 before 2:2.205.0-2.module_el8.8.0+3557+7ba9cc13
2:2.205.0-2.module_el8.8.0+3557+7ba9cc13
containernetworking-plugins
AlmaLinux:8
 before 1:1.2.0-1.module_el8.8.0+3470+252b1910
1:1.2.0-1.module_el8.8.0+3470+252b1910
containers-common
AlmaLinux:8
 before 2:1-63.module_el8.8.0+3568+e8578284
2:1-63.module_el8.8.0+3568+e8578284
crit
AlmaLinux:8
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
criu
AlmaLinux:8
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
criu-devel
AlmaLinux:8
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
criu-libs
AlmaLinux:8
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
crun
AlmaLinux:8
 before 1.8.1-2.module_el8.8.0+3568+e8578284
1.8.1-2.module_el8.8.0+3568+e8578284
fuse-overlayfs
AlmaLinux:8
 before 1.10-1.module_el8.8.0+3470+252b1910
1.10-1.module_el8.8.0+3470+252b1910
libslirp
AlmaLinux:8
 before 4.4.0-1.module_el8.7.0+3407+95aa0ca9
4.4.0-1.module_el8.7.0+3407+95aa0ca9
libslirp-devel
AlmaLinux:8
 before 4.4.0-1.module_el8.7.0+3407+95aa0ca9
4.4.0-1.module_el8.7.0+3407+95aa0ca9
netavark
AlmaLinux:8
 before 2:1.5.0-4.module_el8.8.0+3470+252b1910
2:1.5.0-4.module_el8.8.0+3470+252b1910
oci-seccomp-bpf-hook
AlmaLinux:8
 before 1.2.8-1.module_el8.8.0+3470+252b1910
1.2.8-1.module_el8.8.0+3470+252b1910
podman
AlmaLinux:8
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-catatonit
AlmaLinux:8
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-docker
AlmaLinux:8
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-gvproxy
AlmaLinux:8
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-plugins
AlmaLinux:8
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-remote
AlmaLinux:8
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
podman-tests
AlmaLinux:8
 before 3:4.4.1-8.module_el8.8.0+3568+e8578284
3:4.4.1-8.module_el8.8.0+3568+e8578284
python3-criu
AlmaLinux:8
 before 3.15-3.module_el8.7.0+3407+95aa0ca9
3.15-3.module_el8.7.0+3407+95aa0ca9
python3-podman
AlmaLinux:8
 before 4.4.1-1.module_el8.8.0+3470+252b1910
4.4.1-1.module_el8.8.0+3470+252b1910
runc
AlmaLinux:8
 before 1:1.1.4-1.module_el8.7.0+3407+95aa0ca9
1:1.1.4-1.module_el8.7.0+3407+95aa0ca9
skopeo
AlmaLinux:8
 before 2:1.11.2-0.2.module_el8.8.0+3470+252b1910
2:1.11.2-0.2.module_el8.8.0+3470+252b1910
skopeo-tests
AlmaLinux:8
 before 2:1.11.2-0.2.module_el8.8.0+3470+252b1910
2:1.11.2-0.2.module_el8.8.0+3470+252b1910
slirp4netns
AlmaLinux:8
 before 1.2.0-2.module_el8.7.0+3407+95aa0ca9
1.2.0-2.module_el8.7.0+3407+95aa0ca9
toolbox
AlmaLinux:8
 before 0.0.99.3-7.module_el8.8.0+3470+252b1910
0.0.99.3-7.module_el8.8.0+3470+252b1910
toolbox-tests
AlmaLinux:8
 before 0.0.99.3-7.module_el8.8.0+3470+252b1910
0.0.99.3-7.module_el8.8.0+3470+252b1910
udica
AlmaLinux:8
 before 0.2.6-20.module_el8.8.0+3470+252b1910
0.2.6-20.module_el8.8.0+3470+252b1910
osbuild-composer
AlmaLinux:8
 before 75-1.el8.alma
75-1.el8.alma
osbuild-composer-core
AlmaLinux:8
 before 75-1.el8.alma
75-1.el8.alma
osbuild-composer-dnf-json
AlmaLinux:8
 before 75-1.el8.alma
75-1.el8.alma
osbuild-composer-worker
AlmaLinux:8
 before 75-1.el8.alma
75-1.el8.alma
weldr-client
AlmaLinux:8
 before 35.9-2.el8
35.9-2.el8
grafana
AlmaLinux:8
 before 7.5.15-4.el8
7.5.15-4.el8
grafana-pcp
AlmaLinux:8
 before 3.2.0-3.el8
3.2.0-3.el8
aardvark-dns
AlmaLinux:8
 before 2:1.0.1-37.module_el8.8.0+3468+16b86c82
2:1.0.1-37.module_el8.8.0+3468+16b86c82
buildah
AlmaLinux:8
 before 1:1.24.6-5.module_el8.8.0+3468+16b86c82
1:1.24.6-5.module_el8.8.0+3468+16b86c82
buildah-tests
AlmaLinux:8
 before 1:1.24.6-5.module_el8.8.0+3468+16b86c82
1:1.24.6-5.module_el8.8.0+3468+16b86c82
cockpit-podman
AlmaLinux:8
 before 46-1.module_el8.7.0+3344+5bcd850f
46-1.module_el8.7.0+3344+5bcd850f
conmon
AlmaLinux:8
 before 2:2.1.4-1.module_el8.7.0+3344+5bcd850f
2:2.1.4-1.module_el8.7.0+3344+5bcd850f
container-selinux
AlmaLinux:8
 before 2:2.199.0-1.module_el8.8.0+3468+16b86c82
2:2.199.0-1.module_el8.8.0+3468+16b86c82
containernetworking-plugins
AlmaLinux:8
 before 1:1.1.1-2.module_el8.7.0+3344+5bcd850f
1:1.1.1-2.module_el8.7.0+3344+5bcd850f
containers-common
AlmaLinux:8
 before 2:1-37.module_el8.8.0+3468+16b86c82
2:1-37.module_el8.8.0+3468+16b86c82
crit
AlmaLinux:8
 before 3.15-3.module_el8.6.0+3137+d33c3efb
3.15-3.module_el8.6.0+3137+d33c3efb
crit
AlmaLinux:8
 before 3.15-3.module_el8.6.0+2877+8e437bf5
3.15-3.module_el8.6.0+2877+8e437bf5
criu
AlmaLinux:8
 before 3.15-3.module_el8.6.0+2877+8e437bf5
3.15-3.module_el8.6.0+2877+8e437bf5
criu
AlmaLinux:8
 before 3.15-3.module_el8.6.0+3137+d33c3efb
3.15-3.module_el8.6.0+3137+d33c3efb
golang
Azure Linux:2
 1.19.0 up to 1.18.8-1
1.18.8-1
kured
Azure Linux:2
 before 1.13.2-1
1.13.2-1
golang
Azure Linux:2
 before 1.21.6-1
1.21.6-1
golang
Azure Linux:3
 before 1.18.8-1
1.18.8-1
golang
Azure Linux:3
 through 1.25.7-1 None known
golang
Azure Linux:3
 1.27.0 to 1.27.1-1 None known
golang
Bitnami
 before 1.18.6, 1.19.0 up to 1.19.1
1.18.61.19.1
golang-1.19
Debian:12
 before 1.19.1-1
1.19.1-1
golang-golang-x-net
Debian:12
 before 1:0.0+git20221012.0b7e1fb+dfsg-1
1:0.0+git20221012.0b7e1fb+dfsg-1
golang-golang-x-net
Debian:13
 before 1:0.0+git20221012.0b7e1fb+dfsg-1
1:0.0+git20221012.0b7e1fb+dfsg-1
golang-golang-x-net
Debian:14
 before 1:0.0+git20221012.0b7e1fb+dfsg-1
1:0.0+git20221012.0b7e1fb+dfsg-1
stdlib
Go
 before 1.18.6, 1.19.0-0 up to 1.19.1
1.18.61.19.1
golang
Mageia:8
 before 1.18.6-1.mga8
1.18.6-1.mga8
golang
openEuler:20.03-LTS-SP1
 before 1.15.7-19.oe1
1.15.7-19.oe1
golang
openEuler:20.03-LTS-SP3
 before 1.15.7-19.oe1
1.15.7-19.oe1
golang
openEuler:22.03-LTS
 before 1.17.3-9.oe2203
1.17.3-9.oe2203
cri-o
Red Hat:openshift:4.11::el8
 before 0:1.24.4-5.rhaos4.11.git57d7127.el8
0:1.24.4-5.rhaos4.11.git57d7127.el8
cri-o-debuginfo
Red Hat:openshift:4.11::el8
 before 0:1.24.4-5.rhaos4.11.git57d7127.el8
0:1.24.4-5.rhaos4.11.git57d7127.el8
cri-o-debugsource
Red Hat:openshift:4.11::el8
 before 0:1.24.4-5.rhaos4.11.git57d7127.el8
0:1.24.4-5.rhaos4.11.git57d7127.el8
git-lfs
Red Hat:enterprise_linux:8::appstream
 before 0:2.13.3-3.el8_6
0:2.13.3-3.el8_6
git-lfs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.13.3-3.el8_6
0:2.13.3-3.el8_6
git-lfs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.13.3-3.el8_6
0:2.13.3-3.el8_6
openshift-clients
Red Hat:openshift:4.12::el8
 before 0:4.12.0-202301042257.p0.g854f807.assembly.stream.el8
0:4.12.0-202301042257.p0.g854f807.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.12::el8
 before 0:4.12.0-202301042257.p0.g854f807.assembly.stream.el8
0:4.12.0-202301042257.p0.g854f807.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.12::el9
 before 0:4.12.0-202301042257.p0.g854f807.assembly.stream.el9
0:4.12.0-202301042257.p0.g854f807.assembly.stream.el9
openshift-clients-redistributable
Red Hat:openshift:4.12::el9
 before 0:4.12.0-202301042257.p0.g854f807.assembly.stream.el9
0:4.12.0-202301042257.p0.g854f807.assembly.stream.el9
butane
Red Hat:openshift:4.12::el8
 before 0:0.16.0-2.rhaos4.12.el8
0:0.16.0-2.rhaos4.12.el8
butane-debuginfo
Red Hat:openshift:4.12::el8
 before 0:0.16.0-2.rhaos4.12.el8
0:0.16.0-2.rhaos4.12.el8
butane-debugsource
Red Hat:openshift:4.12::el8
 before 0:0.16.0-2.rhaos4.12.el8
0:0.16.0-2.rhaos4.12.el8
butane-redistributable
Red Hat:openshift:4.12::el8
 before 0:0.16.0-2.rhaos4.12.el8
0:0.16.0-2.rhaos4.12.el8
ignition
Red Hat:openshift:4.12::el8
 before 0:2.14.0-5.rhaos4.12.el8
0:2.14.0-5.rhaos4.12.el8
ignition-debuginfo
Red Hat:openshift:4.12::el8
 before 0:2.14.0-5.rhaos4.12.el8
0:2.14.0-5.rhaos4.12.el8
ignition-debugsource
Red Hat:openshift:4.12::el8
 before 0:2.14.0-5.rhaos4.12.el8
0:2.14.0-5.rhaos4.12.el8
ignition-validate
Red Hat:openshift:4.12::el8
 before 0:2.14.0-5.rhaos4.12.el8
0:2.14.0-5.rhaos4.12.el8
ignition-validate-debuginfo
Red Hat:openshift:4.12::el8
 before 0:2.14.0-5.rhaos4.12.el8
0:2.14.0-5.rhaos4.12.el8
ignition
Red Hat:openshift:4.12::el9
 before 0:2.14.0-5.rhaos4.12.el9
0:2.14.0-5.rhaos4.12.el9
ignition-debuginfo
Red Hat:openshift:4.12::el9
 before 0:2.14.0-5.rhaos4.12.el9
0:2.14.0-5.rhaos4.12.el9
ignition-debugsource
Red Hat:openshift:4.12::el9
 before 0:2.14.0-5.rhaos4.12.el9
0:2.14.0-5.rhaos4.12.el9
ignition-validate
Red Hat:openshift:4.12::el9
 before 0:2.14.0-5.rhaos4.12.el9
0:2.14.0-5.rhaos4.12.el9
ignition-validate-debuginfo
Red Hat:openshift:4.12::el9
 before 0:2.14.0-5.rhaos4.12.el9
0:2.14.0-5.rhaos4.12.el9
cri-o
Red Hat:openshift:4.12::el8
 before 0:1.25.1-5.rhaos4.12.git6005903.el8
0:1.25.1-5.rhaos4.12.git6005903.el8
cri-o-debuginfo
Red Hat:openshift:4.12::el8
 before 0:1.25.1-5.rhaos4.12.git6005903.el8
0:1.25.1-5.rhaos4.12.git6005903.el8
cri-o-debugsource
Red Hat:openshift:4.12::el8
 before 0:1.25.1-5.rhaos4.12.git6005903.el8
0:1.25.1-5.rhaos4.12.git6005903.el8
cri-o
Red Hat:openshift:4.12::el9
 before 0:1.25.1-5.rhaos4.12.git6005903.el9
0:1.25.1-5.rhaos4.12.git6005903.el9
cri-o-debuginfo
Red Hat:openshift:4.12::el9
 before 0:1.25.1-5.rhaos4.12.git6005903.el9
0:1.25.1-5.rhaos4.12.git6005903.el9
cri-o-debugsource
Red Hat:openshift:4.12::el9
 before 0:1.25.1-5.rhaos4.12.git6005903.el9
0:1.25.1-5.rhaos4.12.git6005903.el9
NetworkManager
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-adsl
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-adsl-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-bluetooth
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-bluetooth-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-cloud-setup
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-cloud-setup-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-config-connectivity-redhat
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-config-server
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-debugsource
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-dispatcher-routing-rules
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-libnm
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-libnm-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-libnm-devel
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-ovs
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-ovs-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-ppp
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-ppp-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-team
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-team-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-tui
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-tui-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-wifi
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-wifi-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-wwan
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
NetworkManager-wwan-debuginfo
Red Hat:openshift:4.12::el8
 before 1:1.36.0-8.el8_6
1:1.36.0-8.el8_6
afterburn
Red Hat:openshift:4.12::el8
 before 0:5.3.0-1.rhaos4.12.el8
0:5.3.0-1.rhaos4.12.el8
afterburn-debuginfo
Red Hat:openshift:4.12::el8
 before 0:5.3.0-1.rhaos4.12.el8
0:5.3.0-1.rhaos4.12.el8
ansible-runner
Red Hat:openshift:4.12::el8
 before 0:1.4.6-2.el8ar
0:1.4.6-2.el8ar
ansible-runner-http
Red Hat:openshift:4.12::el8
 before 0:1.0.0-2.el8ar
0:1.0.0-2.el8ar
atomic-openshift-service-idler
Red Hat:openshift:4.12::el8
 before 0:4.12.0-202210141624.p0.ga0f9090.assembly.stream.el8
0:4.12.0-202210141624.p0.ga0f9090.assembly.stream.el8
bootupd
Red Hat:openshift:4.12::el8
 before 0:0.2.5-3.rhaos4.12.el8
0:0.2.5-3.rhaos4.12.el8
bootupd-debuginfo
Red Hat:openshift:4.12::el8
 before 0:0.2.5-3.rhaos4.12.el8
0:0.2.5-3.rhaos4.12.el8
buildah
Red Hat:openshift:4.12::el8
 before 1:1.23.4-2.el8
1:1.23.4-2.el8
git-lfs
Rocky Linux:8
 before 0:2.13.3-3.el8_6
0:2.13.3-3.el8_6
grafana-pcp
Rocky Linux:9
 before 0:5.1.1-14.el9_7
0:5.1.1-14.el9_7
criu
Rocky Linux:8
 before 0:3.15-3.module+el8.9.0+1445+07728297
0:3.15-3.module+el8.9.0+1445+07728297
libslirp
Rocky Linux:8
 before 0:4.4.0-1.module+el8.9.0+1445+07728297
0:4.4.0-1.module+el8.9.0+1445+07728297
cockpit-podman
Rocky Linux:8
 before 0:46-1.module+el8.9.0+1445+07728297
0:46-1.module+el8.9.0+1445+07728297
oci-seccomp-bpf-hook
Rocky Linux:8
 before 0:1.2.5-2.module+el8.9.0+1445+07728297
0:1.2.5-2.module+el8.9.0+1445+07728297
buildah
Rocky Linux:8
 before 1:1.24.6-7.module+el8.9.0+1445+07728297
1:1.24.6-7.module+el8.9.0+1445+07728297
conmon
Rocky Linux:8
 before 2:2.1.4-2.module+el8.9.0+1445+07728297
2:2.1.4-2.module+el8.9.0+1445+07728297
containers-common
Rocky Linux:8
 before 2:1-38.module+el8.9.0+1445+07728297
2:1-38.module+el8.9.0+1445+07728297
container-selinux
Rocky Linux:8
 before 2:2.205.0-3.module+el8.9.0+1445+07728297
2:2.205.0-3.module+el8.9.0+1445+07728297
fuse-overlayfs
Rocky Linux:8
 before 0:1.9-2.module+el8.9.0+1445+07728297
0:1.9-2.module+el8.9.0+1445+07728297
python-podman
Rocky Linux:8
 before 0:4.0.0-2.module+el8.9.0+1445+07728297
0:4.0.0-2.module+el8.9.0+1445+07728297
runc
Rocky Linux:8
 before 1:1.1.5-2.module+el8.9.0+1445+07728297
1:1.1.5-2.module+el8.9.0+1445+07728297
skopeo
Rocky Linux:8
 before 2:1.6.2-9.module+el8.9.0+1578+aa900b44
2:1.6.2-9.module+el8.9.0+1578+aa900b44
slirp4netns
Rocky Linux:8
 before 0:1.1.8-3.module+el8.9.0+1445+07728297
0:1.1.8-3.module+el8.9.0+1445+07728297
udica
Rocky Linux:8
 before 0:0.2.6-4.module+el8.9.0+1445+07728297
0:0.2.6-4.module+el8.9.0+1445+07728297
golang-github-prometheus-node_exporter
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
 before 1.5.0-1.6.1
1.5.0-1.6.1
prometheus-postgres_exporter
SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS
 before 0.10.1-1.6.2
0.10.1-1.6.2
go1.18
SUSE:Linux Enterprise Module for Development Tools 15 SP3
 before 1.18.6-150000.1.31.1
1.18.6-150000.1.31.1
go1.18
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 1.18.6-150000.1.31.1
1.18.6-150000.1.31.1
go1.18
openSUSE:Leap 15.3
 before 1.18.6-150000.1.31.1
1.18.6-150000.1.31.1
go1.18
openSUSE:Leap 15.4
 before 1.18.6-150000.1.31.1
1.18.6-150000.1.31.1
go1.19
SUSE:Linux Enterprise Module for Development Tools 15 SP3
 before 1.19.1-150000.1.9.1
1.19.1-150000.1.9.1
go1.19
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 1.19.1-150000.1.9.1
1.19.1-150000.1.9.1
go1.19
openSUSE:Leap 15.3
 before 1.19.1-150000.1.9.1
1.19.1-150000.1.9.1
go1.19
openSUSE:Leap 15.4
 before 1.19.1-150000.1.9.1
1.19.1-150000.1.9.1
golang-github-prometheus-node_exporter
SUSE:OpenStack Cloud 9
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-node_exporter
SUSE:OpenStack Cloud Crowbar 9
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-alertmanager
SUSE:Manager Client Tools 12
 before 0.23.0-1.18.3
0.23.0-1.18.3
golang-github-prometheus-node_exporter
SUSE:Manager Client Tools 12
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-prometheus
SUSE:Manager Client Tools 12
 before 2.37.6-1.44.3
2.37.6-1.44.3
golang-github-prometheus-promu
SUSE:Manager Client Tools 12
 before 0.14.0-1.12.1
0.14.0-1.12.1
prometheus-blackbox_exporter
SUSE:Manager Client Tools 12
 before 0.19.0-1.17.1
0.19.0-1.17.1
prometheus-postgres_exporter
SUSE:Manager Client Tools 12
 before 0.10.1-1.11.5
0.10.1-1.11.5
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP4-ESPOS
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 12 SP5
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.5.0-1.24.4
1.5.0-1.24.4
golang-github-prometheus-node_exporter
SUSE:EL-9:Update:Products:ManagerTools:Update
 before 1.5.0-1.6.1
1.5.0-1.6.1
golang-packaging
SUSE:EL-9:Update:Products:ManagerTools:Update
 before 15.0.16-1.3.2
15.0.16-1.3.2
prometheus-postgres_exporter
SUSE:EL-9:Update:Products:ManagerTools:Update
 before 0.10.1-1.6.2
0.10.1-1.6.2
golang-github-prometheus-alertmanager
SUSE:Manager Client Tools 15
 before 0.23.0-150100.4.13.2
0.23.0-150100.4.13.2
golang-github-prometheus-node_exporter
SUSE:Manager Client Tools for SLE Micro 5
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-alertmanager
SUSE:Manager Proxy Module 4.2
 before 0.23.0-150100.4.13.2
0.23.0-150100.4.13.2
golang-github-prometheus-alertmanager
SUSE:Manager Proxy Module 4.3
 before 0.23.0-150100.4.13.2
0.23.0-150100.4.13.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Real Time 15 SP3
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Manager Proxy 4.2
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Manager Server 4.2
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Enterprise Storage 7
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-node_exporter
SUSE:Enterprise Storage 7.1
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
golang-github-prometheus-alertmanager
openSUSE:Leap 15.4
 before 0.23.0-150100.4.13.2
0.23.0-150100.4.13.2
golang-github-prometheus-node_exporter
openSUSE:Leap 15.4
 before 1.5.0-150100.3.23.2
1.5.0-150100.3.23.2
go1.18-openssl
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise Real Time 15 SP3
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
SUSE:Enterprise Storage 7.1
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
openSUSE:Leap 15.4
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
go1.18-openssl
openSUSE:Leap 15.5
 before 1.18.10.1-150000.1.9.1
1.18.10.1-150000.1.9.1
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 9.5.1-150200.3.41.3
9.5.1-150200.3.41.3
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 9.5.1-150200.3.41.3
9.5.1-150200.3.41.3
grafana
openSUSE:Leap 15.4
 before 9.5.1-150200.3.41.3
9.5.1-150200.3.41.3
grafana
openSUSE:Leap 15.5
 before 9.5.1-150200.3.41.3
9.5.1-150200.3.41.3
dracut-saltboot
SUSE:Manager Client Tools 15
 before 0.1.1681904360.84ef141-150000.1.50.1
0.1.1681904360.84ef141-150000.1.50.1
grafana
SUSE:Manager Client Tools 15
 before 9.5.1-150000.1.48.5
9.5.1-150000.1.48.5
mgr-daemon
SUSE:Manager Client Tools 15
 before 4.3.7-150000.1.41.1
4.3.7-150000.1.41.1
spacecmd
SUSE:Manager Client Tools 15
 before 4.3.21-150000.3.98.1
4.3.21-150000.3.98.1
uyuni-common-libs
SUSE:Manager Client Tools 15
 before 4.3.8-150000.1.33.1
4.3.8-150000.1.33.1
zypp-plugin-spacewalk
SUSE:Manager Client Tools 15
 before 1.0.14-150000.3.35.1
1.0.14-150000.3.35.1
bind
SUSE:Manager Client Tools for SLE Micro 5
 before 9.16.6-150000.12.65.1
9.16.6-150000.12.65.1
dracut-saltboot
SUSE:Manager Client Tools for SLE Micro 5
 before 0.1.1681904360.84ef141-150000.1.50.1
0.1.1681904360.84ef141-150000.1.50.1
zypp-plugin-spacewalk
SUSE:Manager Proxy Module 4.2
 before 1.0.14-150000.3.35.1
1.0.14-150000.3.35.1
zypp-plugin-spacewalk
SUSE:Manager Proxy Module 4.3
 before 1.0.14-150000.3.35.1
1.0.14-150000.3.35.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 9.16.6-150000.12.65.1
9.16.6-150000.12.65.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 9.16.6-150000.12.65.1
9.16.6-150000.12.65.1
bind
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 9.16.6-150000.12.65.1
9.16.6-150000.12.65.1
bind
openSUSE:Leap 15.4
 before 9.16.6-150000.12.65.1
9.16.6-150000.12.65.1
dracut-saltboot
openSUSE:Leap 15.4
 before 0.1.1681904360.84ef141-150000.1.50.1
0.1.1681904360.84ef141-150000.1.50.1
spacecmd
openSUSE:Leap 15.4
 before 4.3.21-150000.3.98.1
4.3.21-150000.3.98.1
wire
openSUSE:Leap 15.4
 before 0.5.0-150000.1.12.3
0.5.0-150000.1.12.3
dracut-saltboot
openSUSE:Leap 15.5
 before 0.1.1681904360.84ef141-150000.1.50.1
0.1.1681904360.84ef141-150000.1.50.1
spacecmd
openSUSE:Leap 15.5
 before 4.3.21-150000.3.98.1
4.3.21-150000.3.98.1
wire
openSUSE:Leap 15.5
 before 0.5.0-150000.1.12.3
0.5.0-150000.1.12.3
golang-1.10
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~14.04.1
 None known
golang-golang-x-net-dev
Ubuntu:Pro:16.04:LTS
 before 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2, plus listed versions
0.0+git20150226.3d87fd6-30.0+git20151007.b846920+dfsg-11:0.0+git20150817.66f0418-11:0.0+git20160110.4fd4a9f-11:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm1
1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
juju-core
Ubuntu:Pro:16.04:LTS
 before 2.3.7-0ubuntu0.16.04.1+esm2, plus listed versions
1.24.6-0ubuntu31.25.0-0ubuntu11.25.0-0ubuntu21.25.0-0ubuntu32.0~beta4-0ubuntu2
Show 11 moreShow less
2.0~beta6-0ubuntu1.16.04.12.0~beta7-0ubuntu1.16.04.12.0~beta12-0ubuntu1.16.04.12.0~beta15-0ubuntu2.16.04.12.0.0-0ubuntu0.16.04.22.0.2-0ubuntu0.16.04.12.0.2-0ubuntu0.16.04.22.3.1-0ubuntu0.16.04.12.3.2-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.1+esm1
2.3.7-0ubuntu0.16.04.1+esm2
lxd
Ubuntu:Pro:16.04:LTS
 before 2.0.11-0ubuntu1~16.04.4+esm2, plus listed versions
0.20-0ubuntu40.21-0ubuntu30.21-0ubuntu50.22-0ubuntu10.22-0ubuntu2
Show 45 moreShow less
0.23-0ubuntu10.23-0ubuntu20.23-0ubuntu30.24-0ubuntu20.24-0ubuntu30.24-0ubuntu40.25-0ubuntu10.26-0ubuntu20.26-0ubuntu30.27-0ubuntu10.27-0ubuntu22.0.0~beta1-0ubuntu32.0.0~beta1-0ubuntu42.0.0~beta2-0ubuntu12.0.0~beta2-0ubuntu22.0.0~beta3-0ubuntu12.0.0~beta3-0ubuntu22.0.0~beta3-0ubuntu32.0.0~beta3-0ubuntu42.0.0~beta4-0ubuntu12.0.0~beta4-0ubuntu22.0.0~beta4-0ubuntu32.0.0~beta4-0ubuntu42.0.0~beta4-0ubuntu52.0.0~beta4-0ubuntu62.0.0~beta4-0ubuntu72.0.0~rc1-0ubuntu12.0.0~rc1-0ubuntu22.0.0~rc1-0ubuntu32.0.0~rc2-0ubuntu22.0.0~rc2-0ubuntu32.0.0~rc3-0ubuntu12.0.0~rc3-0ubuntu22.0.0~rc3-0ubuntu32.0.0~rc3-0ubuntu42.0.0~rc4-0ubuntu12.0.0~rc5-0ubuntu12.0.0~rc6-0ubuntu12.0.0~rc6-0ubuntu22.0.0~rc7-0ubuntu12.0.0~rc7-0ubuntu22.0.0~rc8-0ubuntu12.0.0~rc8-0ubuntu22.0.0~rc8-0ubuntu32.0.0~rc8-0ubuntu5
2.0.11-0ubuntu1~16.04.4+esm2
golang-1.13
Ubuntu:Pro:16.04:LTS
 before 1.13.8-1ubuntu1~16.04.3+esm3, plus listed versions
1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm2
1.13.8-1ubuntu1~16.04.3+esm3
golang-1.10
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2
 None known
golang-1.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5
Show 5 moreShow less
1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4
 None known
google-guest-agent
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~16.04.020230426.00-0ubuntu2~16.04.320231004.02-0ubuntu1~16.04.120231004.02-0ubuntu1~16.04.220240716.00-0ubuntu1~16.04.020240716.00-0ubuntu1~16.04.0+esm120240716.00-0ubuntu1~16.04.0+esm220240716.00-0ubuntu1~16.04.0+esm3
 None known
golang-1.18
Ubuntu:18.04:LTS
 before 1.18.1-1ubuntu1~18.04.4, plus listed versions
1.18.1-1ubuntu1~18.04.3
1.18.1-1ubuntu1~18.04.4
golang-1.10
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2
 None known
lxd
Ubuntu:Pro:18.04:LTS
 before 3.0.3-0ubuntu1~18.04.2+esm2, plus listed versions
2.18-0ubuntu62.19-0ubuntu12.20-0ubuntu32.20-0ubuntu42.21-0ubuntu1
Show 16 moreShow less
2.21-0ubuntu22.21-0ubuntu32.21-0ubuntu43.0.0~beta2-0ubuntu33.0.0~beta3-0ubuntu33.0.0~beta5-0ubuntu23.0.0~beta7-0ubuntu13.0.0-0ubuntu13.0.0-0ubuntu23.0.0-0ubuntu33.0.0-0ubuntu43.0.1-0ubuntu1~18.04.13.0.2-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.23.0.3-0ubuntu1~18.04.2+esm1
3.0.3-0ubuntu1~18.04.2+esm2
golang-1.13
Ubuntu:Pro:18.04:LTS
 before 1.13.8-1ubuntu1~18.04.4+esm1, plus listed versions
1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.4
1.13.8-1ubuntu1~18.04.4+esm1
golang-1.16
Ubuntu:Pro:18.04:LTS
 before 1.16.2-0ubuntu1~18.04.2+esm1, plus listed versions
1.16.2-0ubuntu1~18.04.2
1.16.2-0ubuntu1~18.04.2+esm1
golang-1.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1
 None known
golang-1.9
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1
 None known
golang-golang-x-net-dev
Ubuntu:Pro:18.04:LTS
 before 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2, plus listed versions
1:0.0+git20170629.c81e7f2+dfsg-1ubuntu11:0.0+git20170629.c81e7f2+dfsg-1ubuntu21:0.0+git20170629.c81e7f2+dfsg-21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm1
1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2
google-guest-agent
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
20201217.02-0ubuntu1~18.04.020210414.00-0ubuntu1~18.04.020210629.00-0ubuntu1~18.04.120220622.00-0ubuntu2~18.04.020220622.00-0ubuntu2~18.04.1
Show 8 moreShow less
20230426.00-0ubuntu2~18.04.020231004.02-0ubuntu1~18.04.220231004.02-0ubuntu1~18.04.320240716.00-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.020241011.01-0ubuntu1~18.04.0+esm120241011.01-0ubuntu1~18.04.0+esm220241011.01-0ubuntu1~18.04.0+esm3
 None known
golang-1.13
Ubuntu:20.04:LTS
 before 1.13.8-1ubuntu1.2, plus listed versions
1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1
Show 4 moreShow less
1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.1
1.13.8-1ubuntu1.2
golang-1.16
Ubuntu:20.04:LTS
 before 1.16.2-0ubuntu1~20.04.1, plus listed versions
1.16.2-0ubuntu1~20.04
1.16.2-0ubuntu1~20.04.1
golang-1.18
Ubuntu:20.04:LTS
 before 1.18.1-1ubuntu1~20.04.2, plus listed versions
1.18.1-1ubuntu1~20.04.1
1.18.1-1ubuntu1~20.04.2
google-guest-agent
Ubuntu:20.04:LTS
 before 20231004.02-0ubuntu1~20.04.3, plus listed versions
20201217.02-0ubuntu1~20.04.020210414.00-0ubuntu1~20.04.020210629.00-0ubuntu1~20.04.020220622.00-0ubuntu2~20.04.020220622.00-0ubuntu2~20.04.220230426.00-0ubuntu2~20.04.020231004.02-0ubuntu1~20.04.120231004.02-0ubuntu1~20.04.2
20231004.02-0ubuntu1~20.04.3
adsys
Ubuntu:Pro:20.04:LTS
 before 0.9.2~20.04.2ubuntu0.1+esm1, plus listed versions
0.8~22.040.9.2~20.040.9.2~20.04.10.9.2~20.04.20.9.2~20.04.2ubuntu0.1
0.9.2~20.04.2ubuntu0.1+esm1
golang-1.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1
Show 4 moreShow less
1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2
 None known
golang-golang-x-net-dev
Ubuntu:Pro:20.04:LTS
 before 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20190811.74dc4d7+dfsg-11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm1
1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
golang-1.13
Ubuntu:22.04:LTS
 before 1.13.8-1ubuntu2.22.04.2, plus listed versions
1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.1
1.13.8-1ubuntu2.22.04.2
golang-1.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3
 None known
golang-1.18
Ubuntu:22.04:LTS
 before 1.18.1-1ubuntu1.1, plus listed versions
1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu11.18.1-1ubuntu1
1.18.1-1ubuntu1.1
golang-golang-x-net
Ubuntu:22.04:LTS
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
google-guest-agent
Ubuntu:22.04:LTS
 before 20231004.02-0ubuntu1~22.04.3, plus listed versions
20210629.00-0ubuntu120210629.00-0ubuntu220220104.00-0ubuntu120220104.00-0ubuntu220220622.00-0ubuntu2~22.04.0
Show 4 moreShow less
20220622.00-0ubuntu2~22.04.120230426.00-0ubuntu2~22.04.020231004.02-0ubuntu1~22.04.120231004.02-0ubuntu1~22.04.2
20231004.02-0ubuntu1~22.04.3
golang-golang-x-net
Ubuntu:Pro:22.04:LTS
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-11:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:Pro:24.04:LTS
 before 1:0.21.0+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.10.0-11:0.17.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.21.0+dfsg-1ubuntu0.1~esm1
1:0.21.0+dfsg-1ubuntu0.1~esm2
go1.18
openSUSE:Tumbleweed
 before 1.18.6-1.1
1.18.6-1.1
go1.19
openSUSE:Tumbleweed
 before 1.19.1-1.1
1.19.1-1.1
docker-compose
openSUSE:Tumbleweed
 before 2.15.1-1.1
2.15.1-1.1
grafana
openSUSE:Tumbleweed
 before 9.3.6-1.1
9.3.6-1.1
kubernetes1.25
openSUSE:Tumbleweed
 before 1.25.7-1.1
1.25.7-1.1
cadvisor
openSUSE:Tumbleweed
 before 0.49.1-1.1
0.49.1-1.1
cadvisor
openSUSE:Leap 15.6
 before 0.52.1-bp156.3.3.1
0.52.1-bp156.3.3.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-27664 is a high vulnerability (CVSS 7.5) in Golang Go, published September 6, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.49%, the 89th percentile. Fixed in golang.org/x/net 0.0.0-20220906165146-f3363e06e74c.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,230 package rows, 24 versions and 530 references. The JSON record has them. Also not on the record: 553 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 34 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open