{"id":"CVE-2020-15586","aliases":["ALPINE-CVE-2020-15586","AZL-38206","AZL-79042","AZL-98934","BELL-CVE-2020-15586","BIT-golang-2020-15586","DEBIAN-CVE-2020-15586","DLA-2459-1","DLA-2460-1","DSA-4848-1","EUVD-2020-7573","GHSA-9rmg-8r3f-xrq7","GO-2021-0224","MGASA-2020-0325","RHBA-2020:4197","RHBA-2020:4229","RHBA-2020:5123","RHBA-2020:5356","RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4297","RHSA-2020:5119","RHSA-2020:5606","RHSA-2020:5649","RHSA-2021:0172","RHSA-2021:0713","RHSA-2021:0956","RHSA-2021:1016","RHSA-2021:1366","RHSA-2021:2122","RHSA-2021:4103","SUSE-SU-2020:2562-1","UBUNTU-CVE-2020-15586","openSUSE-SU-2020:1087-1","openSUSE-SU-2020:1095-1","openSUSE-SU-2020:1405-1","openSUSE-SU-2020:1407-1","openSUSE-SU-2024:10806-1","openSUSE-SU-2024:10807-1"],"status":"published","title":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02883,"percentile":0.87036,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2020-07-17T15:38:24Z","modified":"2026-11-03T06:32:36Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"go","fixed_in":["1.13.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"go","fixed_in":["1.13.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"go","fixed_in":["1.14.5-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"python-tensorboard","fixed_in":["2.16.2-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.13.13","1.14.5"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"golang-1.15","fixed_in":["1.15~rc1-1"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.13.13","1.14.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.13.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.13.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14.0"},{"fixed":"1.14.5-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-tensorboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.2-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.25.7-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.13.13"},{"introduced":"1.14.0"},{"fixed":"1.14.5"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"golang-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"golang-1.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-2+deb9u2"}]}],"versions":["1.7.4-2","1.7.4-2+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1+deb9u2"}]}],"versions":["1.8.1-1","1.8.1-1+deb9u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"golang-1.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.6-1+deb10u4"}]}],"versions":["1.11.6-1","1.11.6-1+deb10u1","1.11.6-1+deb10u2","1.11.6-1+deb10u3"],"bundled":4},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.13.13"},{"introduced":"1.14.0-0"},{"fixed":"1.14.5"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.15-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.5.0-202010081312.p0.git.1808.498e523.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.5.0-202010081312.p0.git.1808.498e523.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202010081312.p0.git.15.d7814b2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"faq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"faq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"machine-config-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202012050338.p0.git.2581.e7a62a7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.1601368321-1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_container_storage:4.6::el8","package":"mcg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-39.2279a46.5.6.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"ior","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-citadel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-galley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-19.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-19.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-istioctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-20.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-sidecar-injector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"apb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"apb-container-scripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"apb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"kubefed-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202002271711.git.2.3bd46d6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift-eventrouter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-5.git7c289cc.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift-eventrouter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-5.git7c289cc.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1621361158-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"redhat-release-coreos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:47.83-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el7","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el7","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el7","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el8","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el8","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el8","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-1.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-1.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~16.04.1","1.10.4-2ubuntu1~16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6-0ubuntu1","1.6-0ubuntu2","1.6-0ubuntu3","1.6-0ubuntu4","1.6-0ubuntu5","1.6.1-0ubuntu1","1.6.2-0ubuntu5~16.04","1.6.2-0ubuntu5~16.04.2","1.6.2-0ubuntu5~16.04.3","1.6.2-0ubuntu5~16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2","1.13.8-1ubuntu1~16.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10~rc1-1","1.10~rc1-1ubuntu1","1.10~rc1-2ubuntu1","1.10~rc2-1ubuntu1","1.10-1ubuntu1","1.10.1-1ubuntu2","1.10.4-2ubuntu1~18.04.1","1.10.4-2ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4","1.13.8-1ubuntu1~18.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-2ubuntu1","1.8.3-2ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1-2ubuntu1","1.9.2-1ubuntu1","1.9.2-3ubuntu1","1.9.3-1ubuntu1","1.9.4-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1","1.13.8-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14~beta1-1","1.14~beta1-2","1.14~rc1-1","1.14-1","1.14.1-1","1.14.2-1","1.14.2-1ubuntu1","1.14.3-2ubuntu2~20.04.1","1.14.3-2ubuntu2~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1","1.13.8-1ubuntu2.22.04.1+esm1","1.13.8-1ubuntu2.22.04.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.14-lp151.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.14-lp152.2.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-lp151.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-lp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.15-2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.15-1.6"}]}],"bundled":9}],"products":[{"vendor":"cloudfoundry","product":"cf-deployment"},{"vendor":"cloudfoundry","product":"routing-release"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"golang","product":"go"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00077.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00082.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OCR6LAKCVKL55KJQPPBBWVQGOP7RL2RW/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WIRVUHD7TJIT7JJ33FKHIVTHPYABYPHR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4848","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://groups.google.com/forum/#%21topic/golang-announce/XZNfaiwgt2w","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20200731-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://groups.google.com/forum/#%21topic/golang-announce/f2c5bqrGH_g","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.cloudfoundry.org/blog/cve-2020-15586/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["web","advisory"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/XZNfaiwgt2w"},{"url":"https://groups.google.com/forum/#!topic/golang-announce/f2c5bqrGH_g"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCR6LAKCVKL55KJQPPBBWVQGOP7RL2RW/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WIRVUHD7TJIT7JJ33FKHIVTHPYABYPHR/"},{"url":"https://github.com/advisories/GHSA-9rmg-8r3f-xrq7"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-15586","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-15586","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-15586","tags":["advisory"]},{"url":"https://go.dev/cl/242598","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/fa98f46741f818913a8c11b877520a548715131f","tags":["fix"]},{"url":"https://go.dev/issue/34902","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2020-0325.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27039","tags":["report"]},{"url":"https://golang.org/doc/go1.13","tags":["web"]},{"url":"https://golang.org/doc/devel/release.html#go1.13.minor","tags":["web"]},{"url":"https://groups.google.com/forum/?utm_medium=email\u0026utm_source=footer#!msg/golang-announce/XZNfaiwgt2w/E6gHDs32AQAJ","tags":["web"]},{"url":"https://groups.google.com/forum/?utm_medium=email\u0026utm_source=footer#!topic/golang-announce/NyPIaucMgXo","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00082.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHBA-2020:4197","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834410","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_4197.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1851422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8559","tags":["advisory"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory","report"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["article"]},{"url":"https://access.redhat.com/errata/RHBA-2020:4229","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1887283","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_4229.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2020:5123","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897975","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5123.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2020:5356","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905005","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5356.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3665","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853652","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3665.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14040","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/39491","tags":["article"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4214","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.13_toolset/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4214.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4297","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886637","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4297.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16541","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1106","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2252","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2254","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1956","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2255","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1961","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8564","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95622","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14370","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14370","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5119","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897972","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5119.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5606","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5606.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5649","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5649.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0172","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0172.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0713","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934454","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0713.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0956","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941433","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0956.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1016","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944040","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1016.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1366","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953464","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1366.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2122","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964770","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2122.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21642","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21643","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21643","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21645","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4103","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981345","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4103.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31525","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31525","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202562-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164903","tags":["report"]},{"url":"https://bugzilla.suse.com/1169832","tags":["report"]},{"url":"https://bugzilla.suse.com/1170826","tags":["report"]},{"url":"https://bugzilla.suse.com/1172868","tags":["report"]},{"url":"https://bugzilla.suse.com/1174153","tags":["report"]},{"url":"https://bugzilla.suse.com/1174191","tags":["report"]},{"url":"https://bugzilla.suse.com/1174977","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16845","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-15586","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EQ5XLGDKB3NTUQ5I5XPWTRHM2CUY2C5T/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1149259","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6TN7IMXFQNIWPWCTWVOLRVJXRRQCR67T/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DMSI6TFFNOIMEI3XSXGHKMVCWZP2743Q/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U3IHSSMDNFW647PZERRLZDGVMXZUQPNM/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3115","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-15586","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T15:38:24Z","modified":"2024-08-04T13:22:29.273Z","updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7573","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T15:38:24Z","modified":"2024-08-04T13:22:29Z","updated_at":"2026-11-03T03:07:30.980066Z"}],"ghsa":[{"id":"GHSA-9rmg-8r3f-xrq7","title":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2022-05-24T17:23:51Z","modified":"2023-01-29T05:02:10Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:45:00.532867Z"}],"nvd":[{"id":"CVE-2020-15586","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:11.48Z","modified":"2026-06-17T02:56:51.913Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:06:10.086163Z"}],"osv":[{"id":"ALPINE-CVE-2020-15586","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:11.48Z","modified":"2026-11-03T06:32:36.314961878Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"AZL-38206","title":"CVE-2020-15586 affecting package python-tensorboard for versions less than 2.16.2-1","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:11Z","modified":"2026-04-21T04:54:30.382323Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-79042","title":"CVE-2020-15586 affecting package golang 1.25.7-1","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:11Z","modified":"2026-04-21T04:34:36.0758Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:10.017343Z"},{"id":"AZL-98934","title":"CVE-2020-15586 affecting package golang 1.27.1-1","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:11Z","modified":"2026-09-16T06:39:01Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2020-15586","title":"CVE-2020-15586 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:23.32457Z","modified":"2026-01-26T09:50:07.754713Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-15586","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:11.48Z","modified":"2026-10-24T10:31:06.738847491Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-15586","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:11.48Z","modified":"2026-08-27T13:03:06.633393048Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"RHBA-2020:4197","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.6 GA RPMs","status":"published","published":"2024-09-29T17:49:53Z","modified":"2026-06-29T10:28:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:4229","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.5.15 packages update","status":"published","published":"2024-09-18T02:35:24Z","modified":"2026-06-29T10:28:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:5123","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.31 packages update","status":"published","published":"2024-09-18T02:35:33Z","modified":"2026-06-29T10:28:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:5356","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.5.23 packages update","status":"published","published":"2024-09-18T02:35:57Z","modified":"2026-06-29T10:28:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2020:3665","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","status":"published","published":"2024-10-21T23:22:20Z","modified":"2026-10-14T10:01:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4214","title":"Red Hat Security Advisory: go-toolset-1.13-golang security and bug fix update","status":"published","published":"2024-09-30T13:53:57Z","modified":"2026-10-14T10:01:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4297","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update","status":"published","published":"2024-09-30T13:54:04Z","modified":"2026-10-14T10:01:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5119","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.20 packages and golang security update","status":"published","published":"2024-09-18T02:35:06Z","modified":"2026-06-29T10:33:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5606","title":"Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.6 bug fix and enhancement update","status":"published","published":"2024-09-30T13:55:17Z","modified":"2026-10-14T10:01:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5649","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.11 security update","status":"published","published":"2024-09-18T02:35:49Z","modified":"2026-06-29T10:33:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0172","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update","status":"published","published":"2024-09-18T02:36:04Z","modified":"2026-10-13T10:02:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0713","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.34 packages and security update","status":"published","published":"2024-09-18T02:35:10Z","modified":"2026-06-29T10:34:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0956","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.23 security update","status":"published","published":"2024-09-18T02:35:18Z","modified":"2026-10-13T10:02:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1016","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.37 security update","status":"published","published":"2024-09-18T02:35:35Z","modified":"2026-06-29T10:34:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1366","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.9 packages and security update","status":"published","published":"2024-09-18T04:17:58Z","modified":"2026-10-13T10:02:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2122","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.13 packages and security update","status":"published","published":"2024-09-18T02:36:31Z","modified":"2026-08-12T10:01:32Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:4103","title":"Red Hat Security Advisory: OpenShift Virtualization 4.9.0 RPMs security and bug fix update","status":"published","published":"2024-09-18T04:20:14Z","modified":"2026-08-08T10:01:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2020-15586","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2020-07-17T16:15:00Z","modified":"2025-10-24T04:48:36Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"BIT-golang-2020-15586","description":"Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","status":"published","published":"2024-03-06T11:08:19.802Z","modified":"2026-09-08T08:45:13.391160395Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"DLA-2459-1","title":"golang-1.7 - security update","status":"published","published":"2020-11-21T00:00:00Z","modified":"2026-03-09T01:23:27.768122Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-2460-1","title":"golang-1.8 - security update","status":"published","published":"2020-11-21T00:00:00Z","modified":"2026-03-09T01:23:16.795161Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4848-1","title":"golang-1.11 - security update","status":"published","published":"2021-02-08T00:00:00Z","modified":"2026-03-09T02:09:04.720191Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"GO-2021-0224","title":"Data race and crash in net/http","description":"HTTP servers where the Handler concurrently reads the request body and writes a response can encounter a data race and crash. The httputil.ReverseProxy Handler is affected.","status":"published","published":"2022-02-17T17:36:04Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"MGASA-2020-0325","title":"Updated golang packages fix security vulnerability","description":"Servers where the Handler concurrently reads the request body and writes a\nresponse can encounter a data race and crash. The httputil.ReverseProxy Handler\nis affected (CVE-2020-15586).\n\nCertain invalid inputs to ReadUvarint or ReadVarint could cause those functions\nto read an unlimited number of bytes from the ByteReader argument before\nreturning an error. This could lead to processing more input than expected when\nthe caller is reading directly from the network and depends on ReadUvarint and\nReadVarint only consuming a small, bounded number of bytes, even from invalid\ninputs (CVE-2020-16845).\n\nThe golang package has been updated to version 1.13.15, fixing these issues\nand containing several other bug fixes and enhancements.  See the 1.13 release\nnotes and other references for details.\n","status":"published","published":"2020-08-18T17:41:27Z","modified":"2026-04-16T04:44:38.880428582Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:1087-1","title":"Security update for go1.13","description":"This update for go1.13 fixes the following issues:\n\n- go1.13.14 (released 2020/07/16) includes fixes to the compiler,\n  vet, and the database/sql, net/http, and reflect packages\n  Refs bsc#1149259 go1.13 release tracking\n  * go#39925 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39848 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39823 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39697 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39561 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64\n  * go#39538 net: TestDialParallel is flaky on windows-amd64-longtest\n  * go#39287 cmd/vet: update for new number formats\n  * go#40211 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40209 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n  * go#38932 runtime: preemption in startTemplateThread may cause infinite hang\n  * go#36689 go/types, math/big: data race in go/types due to math/big.Rat accessors unsafe for concurrent use\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-26T14:26:20Z","modified":"2025-05-07T18:11:29.50012Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1095-1","title":"Security update for go1.13","description":"This update for go1.13 fixes the following issues:\n\n- go1.13.14 (released 2020/07/16) includes fixes to the compiler,\n  vet, and the database/sql, net/http, and reflect packages\n  Refs bsc#1149259 go1.13 release tracking\n  * go#39925 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39848 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39823 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39697 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39561 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it tries to use an older version of dlv which only supports linux/amd64\n  * go#39538 net: TestDialParallel is flaky on windows-amd64-longtest\n  * go#39287 cmd/vet: update for new number formats\n  * go#40211 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40209 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n  * go#38932 runtime: preemption in startTemplateThread may cause infinite hang\n  * go#36689 go/types, math/big: data race in go/types due to math/big.Rat accessors unsafe for concurrent use\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-27T12:20:54Z","modified":"2026-02-04T04:12:03.321448Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1405-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14 was updated to version 1.14.7 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\t  \n\n- go1.14.6 (released 2020-07-16) includes fixes to the go command,\n  the compiler, the linker, vet, and the database/sql,\n  encoding/json, net/http, reflect, and testing packages.\n  Refs bsc#1164903 go1.14 release tracking\n  Refs bsc#1174153 bsc#1174191\n  * go#39991 runtime: missing deferreturn on linux/ppc64le\n  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39636 reflect: DeepEqual can return true for values that are not equal\n  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va\nlues\n  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie\ns to use an older version of dlv which only supports linux/amd64\n  * go#39308 testing: streaming output loses parallel subtest associations\n  * go#39288 cmd/vet: update for new number formats\n  * go#39101 database/sql: context cancellation allows statements to execute after rollback\n  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes\n  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-09-10T18:24:01Z","modified":"2026-02-04T02:50:16.518473Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1407-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14 was updated to version 1.14.7 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\t  \n\n- go1.14.6 (released 2020-07-16) includes fixes to the go command,\n  the compiler, the linker, vet, and the database/sql,\n  encoding/json, net/http, reflect, and testing packages.\n  Refs bsc#1164903 go1.14 release tracking\n  Refs bsc#1174153 bsc#1174191\n  * go#39991 runtime: missing deferreturn on linux/ppc64le\n  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39636 reflect: DeepEqual can return true for values that are not equal\n  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va\nlues\n  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie\ns to use an older version of dlv which only supports linux/amd64\n  * go#39308 testing: streaming output loses parallel subtest associations\n  * go#39288 cmd/vet: update for new number formats\n  * go#39101 database/sql: context cancellation allows statements to execute after rollback\n  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes\n  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-09-11T04:23:21Z","modified":"2026-02-04T02:22:41.91839Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10806-1","title":"go1.13-1.13.15-2.6 on GA media","description":"These are all security issues fixed in the go1.13-1.13.15-2.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:13.150101Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10807-1","title":"go1.14-1.14.15-1.6 on GA media","description":"These are all security issues fixed in the go1.14-1.14.15-1.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:32:42.416924Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:2562-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14 was updated to version 1.14.7 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\t  \n\n- go1.14.6 (released 2020-07-16) includes fixes to the go command,\n  the compiler, the linker, vet, and the database/sql,\n  encoding/json, net/http, reflect, and testing packages.\n  Refs bsc#1164903 go1.14 release tracking\n  Refs bsc#1174153 bsc#1174191\n  * go#39991 runtime: missing deferreturn on linux/ppc64le\n  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39636 reflect: DeepEqual can return true for values that are not equal\n  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va\nlues\n  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie\ns to use an older version of dlv which only supports linux/amd64\n  * go#39308 testing: streaming output loses parallel subtest associations\n  * go#39288 cmd/vet: update for new number formats\n  * go#39101 database/sql: context cancellation allows statements to execute after rollback\n  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes\n  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n","status":"published","published":"2020-09-07T15:10:08Z","modified":"2026-02-04T03:24:27.754562Z","updated_at":"2026-11-02T15:53:48.11786Z"}]}}