{"id":"CVE-2020-16845","aliases":["ALPINE-CVE-2020-16845","AZL-79098","AZL-98940","BELL-CVE-2020-16845","BIT-golang-2020-16845","DEBIAN-CVE-2020-16845","DLA-2459-1","DLA-2460-1","DSA-4848-1","EUVD-2021-2567","GHSA-q6gq-997w-f55g","GO-2021-0142","MGASA-2020-0325","RHBA-2020:4197","RHBA-2020:4229","RHBA-2020:5123","RHBA-2020:5356","RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4297","RHSA-2020:5119","RHSA-2020:5159","RHSA-2020:5606","RHSA-2020:5649","RHSA-2021:0172","RHSA-2021:0713","RHSA-2021:0956","RHSA-2021:1016","RHSA-2021:1366","RHSA-2021:2122","RHSA-2021:4103","SUSE-SU-2020:2562-1","UBUNTU-CVE-2020-16845","USN-5725-1","USN-5725-2","openSUSE-SU-2020:1178-1","openSUSE-SU-2020:1194-1","openSUSE-SU-2020:1405-1","openSUSE-SU-2020:1407-1","openSUSE-SU-2024:10806-1","openSUSE-SU-2024:10807-1"],"status":"published","title":"Withdrawn Advisory: Infinite loop in xz","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04861,"percentile":0.92101,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2020-08-06T17:03:33Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"go","fixed_in":["1.13.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"go","fixed_in":["1.15-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.13.15","1.14.7"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"golang-1.15","fixed_in":["1.15~rc2-1"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.13.15","1.14.7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.6::el8","package":"faq","fixed_in":["0:0.0.6-5.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1~16.04.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1~18.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu2.22.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"go1.13","fixed_in":["1.13.15-lp151.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"go1.13","fixed_in":["1.13.15-lp152.2.7.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.13.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.14"},{"fixed":"1.15-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.26.10-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.13.15"},{"introduced":"1.14.0"},{"fixed":"1.14.7"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"golang-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15~rc2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"golang-1.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-2+deb9u2"}]}],"versions":["1.7.4-2","1.7.4-2+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-1+deb9u2"}]}],"versions":["1.8.1-1","1.8.1-1+deb9u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"golang-1.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.6-1+deb10u4"}]}],"versions":["1.11.6-1","1.11.6-1+deb10u1","1.11.6-1+deb10u2","1.11.6-1+deb10u3"],"bundled":4},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.13.15"},{"introduced":"1.14.0-0"},{"fixed":"1.14.7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.15-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010022112.p0.git.94033.ef41184.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-5.rhaos4.6.git947598e.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.5.0-202010081312.p0.git.1808.498e523.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.5.0-202010081312.p0.git.1808.498e523.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202010081312.p0.git.15.d7814b2.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"faq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"faq-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011122017.p0.git.3445.6937a03.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-202011130111.p0.git.0.4861dfa.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"machine-config-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202012050338.p0.git.2581.e7a62a7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-3.module+el8.2.0+5581+896cb53e"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.module+el8.2.0+7662+fa98b974"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-3.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:devtools:2020","package":"go-toolset-1.13-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.15-1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.1601368321-1.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202010081244.p0.git.3794.4743d24.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-3.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.6.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-81.rhaos4.6.git5b757d4.el8"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-4.rhaos4.5.git6dee389.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"faq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.6-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift_container_storage:4.6::el8","package":"mcg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-39.2279a46.5.6.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"ior","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-citadel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-galley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-19.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-grafana-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-19.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-istioctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-mixs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-20.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:1.1::el8","package":"servicemesh-sidecar-injector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-2.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-202101160934.p0.git.94242.fc5242e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3.rhaos4.6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"apb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"apb-container-scripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"apb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.6-9.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-7.rhaos4.5.git572d9f7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-4.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202102261511.p0.git.0.f0229b9.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"openshift-eventrouter-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-6.git7c289cc.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"kubefed-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.0-202002271711.git.2.3bd46d6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift-eventrouter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-5.git7c289cc.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"openshift-eventrouter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2-5.git7c289cc.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.35.1-12.rhaos4.5.gitb4d18ad.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.3-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-2.rhaos4.5.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-3.git642a960.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.2-12.rhaos4.7.git9f7be76.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1621361158-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"redhat-release-coreos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:47.83-2.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el7","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el7","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el7","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el8","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el8","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.9::el8","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-287.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-1.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-1.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~16.04.3+esm2"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~16.04.1","1.10.4-2ubuntu1~16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6-0ubuntu1","1.6-0ubuntu2","1.6-0ubuntu3","1.6-0ubuntu4","1.6-0ubuntu5","1.6.1-0ubuntu1","1.6.2-0ubuntu5~16.04","1.6.2-0ubuntu5~16.04.2","1.6.2-0ubuntu5~16.04.3","1.6.2-0ubuntu5~16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~18.04.4"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10~rc1-1","1.10~rc1-1ubuntu1","1.10~rc1-2ubuntu1","1.10~rc2-1ubuntu1","1.10-1ubuntu1","1.10.1-1ubuntu2","1.10.4-2ubuntu1~18.04.1","1.10.4-2ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-2ubuntu1","1.8.3-2ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1-2ubuntu1","1.9.2-1ubuntu1","1.9.2-3ubuntu1","1.9.3-1ubuntu1","1.9.4-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1.1"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14~beta1-1","1.14~beta1-2","1.14~rc1-1","1.14-1","1.14.1-1","1.14.2-1","1.14.2-1ubuntu1","1.14.3-2ubuntu2~20.04.1","1.14.3-2ubuntu2~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu2.22.04.1"}]}],"versions":["1.13.8-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~18.04.4"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1.1"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu2.22.04.1"}]}],"versions":["1.13.8-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~16.04.3+esm2"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.15-lp151.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.15-lp152.2.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-lp151.13.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.7-lp152.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.15-2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.15-1.6"}]}],"bundled":9}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"golang","product":"go"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://groups.google.com/forum/#%21topic/golang-announce/_ulYYcIWg3Q","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00028.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2021/dsa-4848","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://groups.google.com/forum/#%21topic/golang-announce/NyPIaucMgXo","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20200924-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","tags":["web","advisory"]},{"url":"https://github.com/ulikunitz/xz/issues/35","tags":["web"]},{"url":"https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b","tags":["web"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/NyPIaucMgXo","tags":["web","report"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/_ulYYcIWg3Q","tags":["web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20200924-0002","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q6gq-997w-f55g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-16845","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-16845","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-16845","tags":["advisory"]},{"url":"https://go.dev/cl/247120","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/027d7241ce050d197e7fabea3d541ffbe3487258","tags":["fix"]},{"url":"https://go.dev/issue/40618","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/NyPIaucMgXo","tags":["web","article"]},{"url":"https://advisories.mageia.org/MGASA-2020-0325.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27039","tags":["report"]},{"url":"https://golang.org/doc/go1.13","tags":["web"]},{"url":"https://golang.org/doc/devel/release.html#go1.13.minor","tags":["web"]},{"url":"https://groups.google.com/forum/?utm_medium=email\u0026utm_source=footer#!msg/golang-announce/XZNfaiwgt2w/E6gHDs32AQAJ","tags":["web"]},{"url":"https://groups.google.com/forum/?utm_medium=email\u0026utm_source=footer#!topic/golang-announce/NyPIaucMgXo","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00082.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHBA-2020:4197","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834410","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_4197.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1851422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8559","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8559","tags":["advisory"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15586","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-16845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16845","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHBA-2020:4229","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1887283","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_4229.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2020:5123","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897975","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5123.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2020:5356","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905005","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5356.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3665","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853652","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3665.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14040","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/39491","tags":["article"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4214","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.13_toolset/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4214.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4297","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886637","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4297.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16541","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16541","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1106","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2252","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2254","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["article"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1956","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2255","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2255","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1961","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8564","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95622","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14370","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14370","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5119","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897972","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5119.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5159","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5159.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5606","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5606.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5649","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5649.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0172","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917413","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0172.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28362","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0713","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934454","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0713.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0956","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941433","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0956.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1016","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944040","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1016.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1366","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953464","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1366.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2122","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964770","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2122.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21642","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21643","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21643","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21645","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4103","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981345","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4103.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31525","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31525","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202562-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1164903","tags":["report"]},{"url":"https://bugzilla.suse.com/1169832","tags":["report"]},{"url":"https://bugzilla.suse.com/1170826","tags":["report"]},{"url":"https://bugzilla.suse.com/1172868","tags":["report"]},{"url":"https://bugzilla.suse.com/1174153","tags":["report"]},{"url":"https://bugzilla.suse.com/1174191","tags":["report"]},{"url":"https://bugzilla.suse.com/1174977","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16845","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-16845","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5725-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5725-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NTKKA7ADT427537ZHXUCOBP56XN63G5Z/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1149259","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZQ73K4ZFTLIPSDCYRJXTRBAIY7W3SXLD/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DMSI6TFFNOIMEI3XSXGHKMVCWZP2743Q/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U3IHSSMDNFW647PZERRLZDGVMXZUQPNM/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3115","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T17:03:33Z","modified":"2024-08-04T13:45:33.92Z","updated_at":"2026-11-02T14:35:59.116379Z"}],"euvd":[{"id":"EUVD-2021-2567","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T17:03:33Z","modified":"2024-08-04T13:45:33Z","updated_at":"2026-11-03T03:07:28.222143Z"}],"ghsa":[{"id":"GHSA-q6gq-997w-f55g","title":"Withdrawn Advisory: Infinite loop in xz","description":"### Withdrawn Advisory\nThis advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time.\n\n### Original Description\nGo before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"withdrawn","published":"2021-12-16T19:16:40Z","modified":"2026-08-21T03:22:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:41:04.755504Z"}],"nvd":[{"id":"CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T18:15:13.7Z","modified":"2026-06-17T02:58:07.777Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:06:10.994748Z"}],"osv":[{"id":"ALPINE-CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T18:15:13.7Z","modified":"2026-11-03T06:32:24.484802803Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"AZL-79098","title":"CVE-2020-16845 affecting package golang 1.26.10-1","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T18:15:13Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"AZL-98940","title":"CVE-2020-16845 affecting package golang 1.27.1-1","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T18:15:13Z","modified":"2026-09-16T06:39:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2020-16845","title":"CVE-2020-16845 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:25.124584Z","modified":"2026-01-26T09:50:13.616598Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T18:15:13.7Z","modified":"2026-10-24T10:31:02.114655218Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T18:15:13.7Z","modified":"2026-08-27T13:03:08.032264382Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"GHSA-q6gq-997w-f55g","title":"Withdrawn Advisory: Infinite loop in xz","description":"### Withdrawn Advisory\nThis advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time.\n\n### Original Description\nGo before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"withdrawn","published":"2021-12-16T19:16:40Z","modified":"2025-10-14T19:37:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"RHBA-2020:4197","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.6 GA RPMs","status":"published","published":"2024-09-29T17:49:53Z","modified":"2026-06-29T10:28:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:4229","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.5.15 packages update","status":"published","published":"2024-09-18T02:35:24Z","modified":"2026-06-29T10:28:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:5123","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.31 packages update","status":"published","published":"2024-09-18T02:35:33Z","modified":"2026-06-29T10:28:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:5356","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.5.23 packages update","status":"published","published":"2024-09-18T02:35:57Z","modified":"2026-06-29T10:28:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2020:3665","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","status":"published","published":"2024-10-21T23:22:20Z","modified":"2026-10-14T10:01:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4214","title":"Red Hat Security Advisory: go-toolset-1.13-golang security and bug fix update","status":"published","published":"2024-09-30T13:53:57Z","modified":"2026-10-14T10:01:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4297","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update","status":"published","published":"2024-09-30T13:54:04Z","modified":"2026-10-14T10:01:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5119","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.20 packages and golang security update","status":"published","published":"2024-09-18T02:35:06Z","modified":"2026-06-29T10:33:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5159","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.6 security update","status":"published","published":"2024-09-18T02:35:26Z","modified":"2026-06-29T10:33:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5606","title":"Red Hat Security Advisory: Red Hat OpenShift Container Storage 4.6 bug fix and enhancement update","status":"published","published":"2024-09-30T13:55:17Z","modified":"2026-10-14T10:01:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:5649","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.11 security update","status":"published","published":"2024-09-18T02:35:49Z","modified":"2026-06-29T10:33:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0172","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update","status":"published","published":"2024-09-18T02:36:04Z","modified":"2026-10-13T10:02:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0713","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.34 packages and security update","status":"published","published":"2024-09-18T02:35:10Z","modified":"2026-06-29T10:34:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0956","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.23 security update","status":"published","published":"2024-09-18T02:35:18Z","modified":"2026-10-13T10:02:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1016","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.37 security update","status":"published","published":"2024-09-18T02:35:35Z","modified":"2026-06-29T10:34:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1366","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.9 packages and security update","status":"published","published":"2024-09-18T04:17:58Z","modified":"2026-10-13T10:02:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2122","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.13 packages and security update","status":"published","published":"2024-09-18T02:36:31Z","modified":"2026-08-12T10:01:32Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:4103","title":"Red Hat Security Advisory: OpenShift Virtualization 4.9.0 RPMs security and bug fix update","status":"published","published":"2024-09-18T04:20:14Z","modified":"2026-08-08T10:01:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2020-08-06T18:15:00Z","modified":"2026-05-20T16:04:14.454421404Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"BIT-golang-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.","status":"published","published":"2024-03-06T11:08:08.182Z","modified":"2026-09-08T08:47:46.891233298Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"DLA-2459-1","title":"golang-1.7 - security update","status":"published","published":"2020-11-21T00:00:00Z","modified":"2026-03-09T01:23:27.768122Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-2460-1","title":"golang-1.8 - security update","status":"published","published":"2020-11-21T00:00:00Z","modified":"2026-03-09T01:23:16.795161Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4848-1","title":"golang-1.11 - security update","status":"published","published":"2021-02-08T00:00:00Z","modified":"2026-03-09T02:09:04.720191Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"GO-2021-0142","title":"Unbounded read from invalid inputs in encoding/binary","description":"ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs.\n\nCertain invalid inputs to ReadUvarint or ReadVarint can cause these functions to read an unlimited number of bytes from the ByteReader parameter before returning an error. This can lead to processing more input than expected when the caller is reading directly from a network and depends on ReadUvarint or ReadVarint only consuming a small, bounded number of bytes, even from invalid inputs.","status":"published","published":"2022-07-01T20:11:09Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"MGASA-2020-0325","title":"Updated golang packages fix security vulnerability","description":"Servers where the Handler concurrently reads the request body and writes a\nresponse can encounter a data race and crash. The httputil.ReverseProxy Handler\nis affected (CVE-2020-15586).\n\nCertain invalid inputs to ReadUvarint or ReadVarint could cause those functions\nto read an unlimited number of bytes from the ByteReader argument before\nreturning an error. This could lead to processing more input than expected when\nthe caller is reading directly from the network and depends on ReadUvarint and\nReadVarint only consuming a small, bounded number of bytes, even from invalid\ninputs (CVE-2020-16845).\n\nThe golang package has been updated to version 1.13.15, fixing these issues\nand containing several other bug fixes and enhancements.  See the 1.13 release\nnotes and other references for details.\n","status":"published","published":"2020-08-18T17:41:27Z","modified":"2026-04-16T04:44:38.880428582Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:1178-1","title":"Security update for go1.13","description":"This update for go1.13 fixes the following issues:\n\n- go1.13 was updated to version 1.13.5 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-08-10T18:20:07Z","modified":"2025-05-07T18:11:45.173175Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1194-1","title":"Security update for go1.13","description":"This update for go1.13 fixes the following issues:\n\n- go1.13 was updated to version 1.13.5 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-08-12T12:23:01Z","modified":"2026-02-04T02:45:36.200705Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1405-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14 was updated to version 1.14.7 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\t  \n\n- go1.14.6 (released 2020-07-16) includes fixes to the go command,\n  the compiler, the linker, vet, and the database/sql,\n  encoding/json, net/http, reflect, and testing packages.\n  Refs bsc#1164903 go1.14 release tracking\n  Refs bsc#1174153 bsc#1174191\n  * go#39991 runtime: missing deferreturn on linux/ppc64le\n  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39636 reflect: DeepEqual can return true for values that are not equal\n  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va\nlues\n  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie\ns to use an older version of dlv which only supports linux/amd64\n  * go#39308 testing: streaming output loses parallel subtest associations\n  * go#39288 cmd/vet: update for new number formats\n  * go#39101 database/sql: context cancellation allows statements to execute after rollback\n  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes\n  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-09-10T18:24:01Z","modified":"2026-02-04T02:50:16.518473Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1407-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14 was updated to version 1.14.7 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\t  \n\n- go1.14.6 (released 2020-07-16) includes fixes to the go command,\n  the compiler, the linker, vet, and the database/sql,\n  encoding/json, net/http, reflect, and testing packages.\n  Refs bsc#1164903 go1.14 release tracking\n  Refs bsc#1174153 bsc#1174191\n  * go#39991 runtime: missing deferreturn on linux/ppc64le\n  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39636 reflect: DeepEqual can return true for values that are not equal\n  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va\nlues\n  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie\ns to use an older version of dlv which only supports linux/amd64\n  * go#39308 testing: streaming output loses parallel subtest associations\n  * go#39288 cmd/vet: update for new number formats\n  * go#39101 database/sql: context cancellation allows statements to execute after rollback\n  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes\n  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-09-11T04:23:21Z","modified":"2026-02-04T02:22:41.91839Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10806-1","title":"go1.13-1.13.15-2.6 on GA media","description":"These are all security issues fixed in the go1.13-1.13.15-2.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:13.150101Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10807-1","title":"go1.14-1.14.15-1.6 on GA media","description":"These are all security issues fixed in the go1.14-1.14.15-1.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:32:42.416924Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:2562-1","title":"Security update for go1.14","description":"This update for go1.14 fixes the following issues:\n\n- go1.14 was updated to version 1.14.7 \n- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).\t  \n\n- go1.14.6 (released 2020-07-16) includes fixes to the go command,\n  the compiler, the linker, vet, and the database/sql,\n  encoding/json, net/http, reflect, and testing packages.\n  Refs bsc#1164903 go1.14 release tracking\n  Refs bsc#1174153 bsc#1174191\n  * go#39991 runtime: missing deferreturn on linux/ppc64le\n  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent\n  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes\n  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15\n  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally\n  * go#39636 reflect: DeepEqual can return true for values that are not equal\n  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va\nlues\n  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie\ns to use an older version of dlv which only supports linux/amd64\n  * go#39308 testing: streaming output loses parallel subtest associations\n  * go#39288 cmd/vet: update for new number formats\n  * go#39101 database/sql: context cancellation allows statements to execute after rollback\n  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes\n  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586\n  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)\n- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is\n  not present bsc#1172868 gh#golang/go#35305\n","status":"published","published":"2020-09-07T15:10:08Z","modified":"2026-02-04T03:24:27.754562Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-5725-1","title":"golang-1.13 vulnerability","description":"Diederik Loerakker, Jonny Rhea, Raúl Kripalani, and Preston\nVan Loon discovered that Go incorrectly handled certain inputs.\nAn attacker could possibly use this issue to cause Go applications\nto hang or crash, resulting in a denial of service.\n","status":"published","published":"2022-11-15T10:09:51Z","modified":"2026-04-27T16:24:33.725519Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5725-2","title":"golang-1.13 vulnerability","description":"USN-5725-1 fixed a vulnerability in Go. This update provides\nthe corresponding update for Ubuntu 16.04 LTS.\n\nOriginal advisory details:\n\n Diederik Loerakker, Jonny Rhea, Raúl Kripalani, and Preston\n Van Loon discovered that Go incorrectly handled certain inputs.\n An attacker could possibly use this issue to cause Go applications\n to hang or crash, resulting in a denial of service.\n","status":"published","published":"2023-05-23T13:10:08Z","modified":"2026-06-25T13:31:33.113521577Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}