{"id":"CVE-2020-14040","aliases":["ALSA-2020:4694","AZL-44364","AZL-44877","DEBIAN-CVE-2020-14040","EUVD-2021-0962","GHSA-5rcv-m4m3-hfh7","GO-2020-0015","RHSA-2020:3369","RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4297","RHSA-2020:4694","RHSA-2020:5054","RHSA-2020:5055","RHSA-2020:5056","RHSA-2020:5606","RLSA-2020:4694","UBUNTU-CVE-2020-14040","USN-5873-1"],"status":"published","title":"golang.org/x/text Infinite loop","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01886,"percentile":0.7979,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-835"],"published":"2020-06-17T19:22:31Z","modified":"2026-10-29T11:00:13Z","fixes":[{"ecosystem":"Go","package":"golang.org/x/text","fixed_in":["0.3.3"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:3","package":"podman","fixed_in":["5.6.1-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"buildah","fixed_in":["1.41.4-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"golang-golang-x-text","fixed_in":["0.3.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"golang-golang-x-text","fixed_in":["0.3.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-golang-x-text","fixed_in":["0.3.3-1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"containers-common","fixed_in":["1:0.1.40-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo","fixed_in":["1:0.1.40-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo-debuginfo","fixed_in":["1:0.1.40-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"buildah","fixed_in":["0:1.11.6-12.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_extras_other:7","package":"buildah-debuginfo","fixed_in":["0:1.11.6-12.el7_9"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"golang-x-text","fixed_in":["0.0~git20170627.0.6353ef0-1ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-golang-x-text","fixed_in":["0.3.2-4ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"golang.org/x/text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1.module_el8.6.0+2876+9ed4eae2"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:3","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.4-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"golang-golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"golang-golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"golang-golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.3-1"}]}]},{"source":"osv","ecosystem":"Go","package":"golang.org/x/text","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.3"}]}]},{"source":"osv","ecosystem":"Go","package":"golang.org/x/text","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.3"}]}]},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el7","package":"kiali","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:v1.12.10.redhat2-1.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"ior","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-citadel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-galley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-13.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-13.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-istioctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-2.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-14.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-sidecar-injector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.1601368321-1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.0.20-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.144.0-1.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-5.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-2.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-1.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.module+el8.3.0+8221+97165c3f"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.1.40-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-12.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras_other:7","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.4-26.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_container_storage:4.6::el8","package":"mcg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-39.2279a46.5.6.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.7.0+1076+9b1c11c1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.4.0+556+40122d08"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.5.0+709+440d5e7e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1-1.module+el8.6.0+783+10209741"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-1.module+el8.4.0+556+40122d08"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0+git20151019.0fe7e68-0ubuntu1","0+git20151217.cf49866-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0~git20170627.0.6353ef0-1ubuntu2.1"}]}],"versions":["0.0~git20170627.0.6353ef0-1ubuntu1","0.0~git20170627.0.6353ef0-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.2-4ubuntu0.1"}]}],"versions":["0.3.2-3","0.3.2-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.2-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0~git20170627.0.6353ef0-1ubuntu2.1"}]}],"versions":["0.0~git20170627.0.6353ef0-1ubuntu1","0.0~git20170627.0.6353ef0-1ubuntu2"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.2-4ubuntu0.1"}]}],"versions":["0.3.2-3","0.3.2-4"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-golang-x-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.7-1ubuntu0.20.04.1"}]}],"versions":["0.3.6-1","0.3.7-1"],"bundled":5}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"golang","product":"text"}],"references":[{"url":"https://groups.google.com/forum/#%21topic/golang-announce/bXVeAmGOqz0","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14040","tags":["web","advisory"]},{"url":"https://github.com/golang/go/issues/39491","tags":["web","article"]},{"url":"https://github.com/golang/text/commit/23ae387dee1f90d29a23c0e87ee0b46038fbed0e","tags":["web"]},{"url":"https://go-review.googlesource.com/c/text/+/238238","tags":["web"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0","tags":["web","article","report"]},{"url":"https://groups.google.com/g/golang-announce/c/bXVeAmGOqz0","tags":["web"]},{"url":"https://go.dev/cl/238238","tags":["web","fix"]},{"url":"https://go.dev/issue/39491","tags":["web","report"]},{"url":"https://go.googlesource.com/text/+/23ae387dee1f90d29a23c0e87ee0b46038fbed0e","tags":["web","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5rcv-m4m3-hfh7"},{"url":"https://access.redhat.com/errata/RHSA-2020:4694","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1682970","tags":["report"]},{"url":"https://bugzilla.redhat.com/1752079","tags":["report"]},{"url":"https://bugzilla.redhat.com/1785242","tags":["report"]},{"url":"https://bugzilla.redhat.com/1800815","tags":["report"]},{"url":"https://bugzilla.redhat.com/1801874","tags":["report"]},{"url":"https://bugzilla.redhat.com/1804193","tags":["report"]},{"url":"https://bugzilla.redhat.com/1804195","tags":["report"]},{"url":"https://bugzilla.redhat.com/1813845","tags":["report"]},{"url":"https://bugzilla.redhat.com/1814928","tags":["report"]},{"url":"https://bugzilla.redhat.com/1818694","tags":["report"]},{"url":"https://bugzilla.redhat.com/1821193","tags":["report"]},{"url":"https://bugzilla.redhat.com/1822038","tags":["report"]},{"url":"https://bugzilla.redhat.com/1825789","tags":["report"]},{"url":"https://bugzilla.redhat.com/1827794","tags":["report"]},{"url":"https://bugzilla.redhat.com/1833220","tags":["report"]},{"url":"https://bugzilla.redhat.com/1835986","tags":["report"]},{"url":"https://bugzilla.redhat.com/1837755","tags":["report"]},{"url":"https://bugzilla.redhat.com/1847544","tags":["report"]},{"url":"https://bugzilla.redhat.com/1849557","tags":["report"]},{"url":"https://bugzilla.redhat.com/1850230","tags":["report"]},{"url":"https://bugzilla.redhat.com/1853230","tags":["report"]},{"url":"https://bugzilla.redhat.com/1853652","tags":["report"]},{"url":"https://bugzilla.redhat.com/1857606","tags":["report"]},{"url":"https://bugzilla.redhat.com/1858862","tags":["report"]},{"url":"https://bugzilla.redhat.com/1860126","tags":["report"]},{"url":"https://bugzilla.redhat.com/1866153","tags":["report"]},{"url":"https://bugzilla.redhat.com/1866833","tags":["report"]},{"url":"https://bugzilla.redhat.com/1867447","tags":["report"]},{"url":"https://bugzilla.redhat.com/1868612","tags":["report"]},{"url":"https://bugzilla.redhat.com/1872263","tags":["report"]},{"url":"https://bugzilla.redhat.com/1877463","tags":["report"]},{"url":"https://bugzilla.redhat.com/1879622","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-4694.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-10749","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-10756","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-14040","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-14040","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3369","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857412","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3369.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8203","tags":["advisory"]},{"url":"https://hackerone.com/reports/712065","tags":["article"]},{"url":"https://www.npmjs.com/advisories/1523","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9283","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/3L45YRc91SY","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","tags":["advisory"]},{"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12666","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12666","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12666","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14040","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3665","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3665.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4214","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.13_toolset/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4214.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4297","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886637","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4297.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16541","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1106","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2252","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2254","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1956","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2255","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1961","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8564","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95622","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14370","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14370","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1682970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1785242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1800815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1818694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1821193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1822038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1825789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1833220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1835986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1858862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879622","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4694.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10749","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/kubernetes-security-announce/BMb_6ICCfp8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10756","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10756","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10756","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1005/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5054","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5054.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5055","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5055.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5056","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877699","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5056.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5606","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5606.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4694","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14040","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5873-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-28851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-28852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-38561","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32149","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-14040","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T19:22:31Z","modified":"2024-08-04T12:32:14.681Z","updated_at":"2026-11-02T14:35:46.476719Z"}],"euvd":[{"id":"EUVD-2021-0962","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T19:22:31Z","modified":"2024-08-04T12:32:14Z","updated_at":"2026-11-03T03:07:35.697348Z"}],"ghsa":[{"id":"GHSA-5rcv-m4m3-hfh7","title":"golang.org/x/text Infinite loop","description":"Go version v0.3.3 of the x/text package fixes a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.\n\n### Specific Go Packages Affected\ngolang.org/x/text/encoding/unicode\ngolang.org/x/text/transform","status":"published","published":"2021-05-18T18:34:35Z","modified":"2024-05-20T19:24:16Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"medium"}],"cwes":["CWE-400","CWE-835"],"updated_at":"2026-11-02T14:37:50.750599Z"}],"nvd":[{"id":"CVE-2020-14040","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T20:15:09.993Z","modified":"2026-06-17T02:54:08.71Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:06:07.249892Z"}],"osv":[{"id":"AZL-44364","title":"CVE-2020-14040 affecting package podman for versions less than 5.6.1-2","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T20:15:09Z","modified":"2026-04-21T04:33:32.743987Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44877","title":"CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T20:15:09Z","modified":"2026-04-21T04:51:34.528165Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"CVE-2020-14040","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T20:15:09.993Z","modified":"2026-10-24T10:30:18.674680681Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"DEBIAN-CVE-2020-14040","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T20:15:09.993Z","modified":"2026-10-26T12:00:40.587718709Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"GHSA-5rcv-m4m3-hfh7","title":"golang.org/x/text Infinite loop","description":"Go version v0.3.3 of the x/text package fixes a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.\n\n### Specific Go Packages Affected\ngolang.org/x/text/encoding/unicode\ngolang.org/x/text/transform","status":"published","published":"2021-05-18T18:34:35Z","modified":"2026-09-10T03:49:04.60392076Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","level":"high"}],"cwes":["CWE-400","CWE-835"],"updated_at":"2026-11-02T15:46:38.911014Z"},{"id":"RHSA-2020:3369","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh security update","status":"published","published":"2024-09-30T13:53:57Z","modified":"2026-10-19T10:01:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3665","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","status":"published","published":"2024-10-21T23:22:20Z","modified":"2026-10-14T10:01:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4214","title":"Red Hat Security Advisory: go-toolset-1.13-golang security and bug fix update","status":"published","published":"2024-09-30T13:53:57Z","modified":"2026-10-14T10:01:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4297","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update","status":"published","published":"2024-09-30T13:54:04Z","modified":"2026-10-14T10:01:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4694","title":"Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T23:23:38Z","modified":"2026-10-14T10:01:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5054","title":"Red Hat Security Advisory: skopeo security update","status":"published","published":"2024-09-30T13:54:22Z","modified":"2026-10-14T10:01:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5055","title":"Red Hat Security Advisory: buildah security update","status":"published","published":"2024-09-30T13:54:28Z","modified":"2026-10-14T10:01:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5056","title":"Red Hat Security Advisory: podman security and bug fix update","status":"published","published":"2024-09-30T13:54:36Z","modified":"2026-10-14T10:01:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5606","title":"Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.6 bug fix and enhancement update","status":"published","published":"2024-09-30T13:55:17Z","modified":"2026-10-14T10:01:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:4694","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749)\n\n* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)\n\n* golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:27:37Z","modified":"2026-02-04T22:00:10.075148Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-14040","description":"The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.","status":"published","published":"2020-06-17T20:15:00Z","modified":"2026-02-04T04:33:35.153476Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"ALSA-2020:4694","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749)\n\n* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)\n\n* golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:27:37Z","modified":"2026-10-29T11:00:13.836208454Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"GO-2020-0015","title":"Infinite loop when decoding some inputs in golang.org/x/text","description":"An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to transform.String. If used to parse user supplied input, this may be used as a denial of service vector.","status":"published","published":"2021-04-14T20:04:52Z","modified":"2026-02-04T03:02:32.031255Z","updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"USN-5873-1","title":"golang-golang-x-text, golang-x-text vulnerabilities","description":"It was discovered that Go Text incorrectly handled certain encodings. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14040)\n\nIt was discovered that Go Text incorrectly handled certain BCP 47 language\ntags. An attacker could possibly use this issue to cause a denial of service.\nCVE-2020-28851, CVE-2020-28852 and CVE-2021-38561 affected only\nUbuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2020-28851, CVE-2020-28852, CVE-2021-38561, CVE-2022-32149)\n","status":"published","published":"2023-02-16T09:20:08Z","modified":"2026-04-27T16:32:14.263781Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}