{"id":"CVE-2021-34558","aliases":["ALPINE-CVE-2021-34558","ALSA-2021:4226","ALSA-2022:7954","AZL-105164","AZL-105167","BELL-CVE-2021-34558","BIT-golang-2021-34558","DEBIAN-CVE-2021-34558","EUVD-2021-21208","GHSA-hqrm-74p3-w275","GO-2021-0243","MGASA-2021-0369","MGASA-2023-0213","OESA-2021-1402","OESA-2025-1059","RHBA-2021:2979","RHEA-2021:3287","RHSA-2021:2984","RHSA-2021:3009","RHSA-2021:3015","RHSA-2021:3076","RHSA-2021:3248","RHSA-2021:3555","RHSA-2021:3820","RHSA-2021:4226","RHSA-2021:4722","RHSA-2021:5085","RHSA-2022:0237","RHSA-2022:0260","RHSA-2022:0988","RHSA-2022:0998","RHSA-2022:1329","RHSA-2022:7954","RHSA-2024:2988","RLSA-2021:3076","RLSA-2021:4226","RLSA-2024:2988","SUSE-SU-2021:2392-1","SUSE-SU-2021:2398-1","UBUNTU-CVE-2021-34558","openSUSE-SU-2021:1078-1","openSUSE-SU-2021:1079-1","openSUSE-SU-2021:2392-1","openSUSE-SU-2021:2398-1","openSUSE-SU-2024:10808-1","openSUSE-SU-2024:10809-1"],"status":"published","title":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.06975,"percentile":0.94223,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-295"],"published":"2021-07-15T13:47:36Z","modified":"2026-11-03T06:32:40Z","exploits":[{"source":"pocgithub","id":"alexzorin/cve-2021-34558","title":"alexzorin/cve-2021-34558","date":"2021-07-13","url":"https://github.com/alexzorin/cve-2021-34558"}],"fixes":[{"ecosystem":"Alpine:v3.13","package":"go","fixed_in":["1.15.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"go","fixed_in":["1.16.6-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.15.14","1.16.6"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"golang-1.15","fixed_in":["1.15.9-6"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.15.14","1.16.6"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift_service_on_aws:1::el8","package":"rosa","fixed_in":["0:1.1.1-51c4a5e.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift_service_on_aws:1::el8","package":"rosa-redistributable","fixed_in":["0:1.1.1-51c4a5e.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-build","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-bin","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-docs","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-misc","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-race","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-src","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-tests","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-runtime","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-scldevel","fixed_in":["0:1.15.14-1.el7_9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.16","fixed_in":["1.16.6-1.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.16","fixed_in":["1.16.6-1.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.15","fixed_in":["1.15.14-1.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.15","fixed_in":["1.15.14-1.36.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"go1.16","fixed_in":["1.16.6-lp152.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"go1.15","fixed_in":["1.15.14-lp152.23.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"go1.16","fixed_in":["1.16.6-1.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"go1.15","fixed_in":["1.15.14-1.36.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.15.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.16.0"},{"fixed":"1.16.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.9-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.26.7-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.14"},{"introduced":"1.16.0"},{"fixed":"1.16.6"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"golang-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.9-6"}]}]},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.14"},{"introduced":"1.16.0-0"},{"fixed":"1.16.6"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.14-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.0-2.mga8"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.5-1.mga8"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.0-1.mga8"}]}],"bundled":13},{"source":"osv","ecosystem":"Mageia:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-1.mga8"}]}],"bundled":13},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-5.oe1"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-5.oe1"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.1-4.oe2203sp4"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-4.rhaos4.7.git1d56dc8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-4.rhaos4.7.git1d56dc8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-4.rhaos4.7.git1d56dc8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-4.rhaos4.7.git1d56dc8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-4.rhaos4.7.git1d56dc8.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-7.rhaos4.7.git6287500.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-7.rhaos4.7.git6287500.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107291238.p0.git.39cfc66.assembly.stream.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-7.rhaos4.7.git6287500.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-7.rhaos4.7.git6287500.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.4-7.rhaos4.7.git6287500.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.8b4b094.assembly.stream.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202107292242.p0.git.558d959.assembly.stream.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"redhat-release-coreos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:47.84-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift_service_on_aws:1::el8","package":"rosa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-51c4a5e.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift_service_on_aws:1::el8","package":"rosa-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-51c4a5e.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-8.rhaos4.8.git8d4264e.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-8.rhaos4.8.git8d4264e.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-8.rhaos4.8.git8d4264e.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-8.rhaos4.8.git8d4264e.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-8.rhaos4.8.git8d4264e.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-7.rhaos4.8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-7.rhaos4.8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-7.rhaos4.8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-7.rhaos4.8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-7.rhaos4.8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107292313.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107300027.p0.git.38b3ecc.assembly.stream.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-8.rhaos4.6.git947598e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-8.rhaos4.6.git947598e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-8.rhaos4.6.git947598e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-8.rhaos4.6.git947598e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-8.rhaos4.6.git947598e.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:devtools:2021","package":"go-toolset-1.15-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.module+el8.4.0+8864+58b0fcdb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.module+el8.4.0+8864+58b0fcdb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.module+el8.4.0+8864+58b0fcdb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+11833+614b07b8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-3.rhaos4.6.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.6-3.rhaos4.6.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-4.git642a960.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-4.git642a960.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.2-1.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.289.3.1633554819-1.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-2.rhaos4.8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-2.rhaos4.8.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.9-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"grafana-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.9-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:2.6::el7","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-211.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:2.6::el7","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-211.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:2.6::el7","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-211.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:2.6::el8","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-211.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:2.6::el8","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-211.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:2.6::el8","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-211.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift_data_foundation:4.9::el8","package":"mcg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.0-28.61dcf87.5.9.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-7.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-7.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-7.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-7.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"etcd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-7.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"etcd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-7.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"golang-github-vbatts-tar-split","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.1-6.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"golang-github-vbatts-tar-split","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.1-6.el8ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.8::el7","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.5-278.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.8::el7","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.5-278.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.8::el7","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.5-278.el7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.8::el8","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.5-278.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.8::el8","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.5-278.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.8::el8","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.5-278.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.0-3.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+21209+52deeb51"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+21373+0d273fdf"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+21196+3f0abbca"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-81.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+21196+3f0abbca"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+21196+3f0abbca"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-20.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.module+el8.4.0+396+d2d16ae3"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+632+4dba2916"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.14-1.module+el8.4.0+632+4dba2916"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.9-4.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-81.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-81.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1825+623b0c20.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1829+9bb2696f.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1843+6892ab28.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1872+2e18eb19.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1874+ce489889.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1880+8e896d1b.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1896+b18fa106.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1948+4b5cd4a9.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.6-1.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.6-1.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.14-1.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.14-1.36.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~16.04.1","1.10.4-2ubuntu1~16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6-0ubuntu1","1.6-0ubuntu2","1.6-0ubuntu3","1.6-0ubuntu4","1.6-0ubuntu5","1.6.1-0ubuntu1","1.6.2-0ubuntu5~16.04","1.6.2-0ubuntu5~16.04.2","1.6.2-0ubuntu5~16.04.3","1.6.2-0ubuntu5~16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2","1.13.8-1ubuntu1~16.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10~rc1-1","1.10~rc1-1ubuntu1","1.10~rc1-2ubuntu1","1.10~rc2-1ubuntu1","1.10-1ubuntu1","1.10.1-1ubuntu2","1.10.4-2ubuntu1~18.04.1","1.10.4-2ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4","1.13.8-1ubuntu1~18.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-0ubuntu1~18.04.2","1.16.2-0ubuntu1~18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-2ubuntu1","1.8.3-2ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1-2ubuntu1","1.9.2-1ubuntu1","1.9.2-3ubuntu1","1.9.3-1ubuntu1","1.9.4-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1","1.13.8-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14~beta1-1","1.14~beta1-2","1.14~rc1-1","1.14-1","1.14.1-1","1.14.2-1","1.14.2-1ubuntu1","1.14.3-2ubuntu2~20.04.1","1.14.3-2ubuntu2~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-0ubuntu1~20.04","1.16.2-0ubuntu1~20.04.1","1.16.2-0ubuntu1~20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1","1.13.8-1ubuntu2.22.04.1+esm1","1.13.8-1ubuntu2.22.04.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.6-lp152.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.14-lp152.23.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.6-1.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.14-1.36.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.15-1.2"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.8-1.1"}]}],"bundled":10}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"golang","product":"go"},{"vendor":"netapp","product":"cloud_insights_telegraf"},{"vendor":"netapp","product":"storagegrid"},{"vendor":"netapp","product":"trident"},{"vendor":"oracle","product":"timesten_in-memory_database"}],"references":[{"url":"https://groups.google.com/g/golang-announce","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://golang.org/doc/devel/release#go1.16.minor","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D7FRFM7WWR2JCT6NORQ7AO6B453OMI3I/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BA7MFVXRBEKRTLSLYDICTYCGEMK2HZ7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYIUSR4YP52PWG7YE7AA3DZ5OSURNFJB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXJ2MVMAHOIGRH37ZSFYC4EVWLJFL2EQ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBMLUQMN6XRKPVOI5XFFBP4XSR7RNTYR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XBQUFVI5TMV4KMKI7GKA223LHGPQISE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BTC3JQUASFN5U2XA4UZIGAPZQBD5JSS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITRXPCHUCJGXCX2CUEPKZRRTB27GG4ZB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLOGBB7XBBRB3J5FDPW5KWHSH7IRF64W/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://groups.google.com/g/golang-announce/c/n9FxMelZGAQ","tags":["x_refsource_MISC","x_transferred","Mailing List","Release Notes","Third Party Advisory","advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20210813-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202208-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34558","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3BA7MFVXRBEKRTLSLYDICTYCGEMK2HZ7/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3XBQUFVI5TMV4KMKI7GKA223LHGPQISE/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BTC3JQUASFN5U2XA4UZIGAPZQBD5JSS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D7FRFM7WWR2JCT6NORQ7AO6B453OMI3I/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRXPCHUCJGXCX2CUEPKZRRTB27GG4ZB/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JYIUSR4YP52PWG7YE7AA3DZ5OSURNFJB/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LBMLUQMN6XRKPVOI5XFFBP4XSR7RNTYR/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NLOGBB7XBBRB3J5FDPW5KWHSH7IRF64W/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WXJ2MVMAHOIGRH37ZSFYC4EVWLJFL2EQ/"},{"url":"https://github.com/advisories/GHSA-hqrm-74p3-w275"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-34558","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-27358","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3114","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-33195","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-33197","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-34558","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7954","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28851","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28852","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20199","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20291","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33197","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34558","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4024","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27191","tags":["report"]},{"url":"https://bugzilla.redhat.com/1913333","tags":["report"]},{"url":"https://bugzilla.redhat.com/1913338","tags":["report"]},{"url":"https://bugzilla.redhat.com/1919050","tags":["report"]},{"url":"https://bugzilla.redhat.com/1939485","tags":["report"]},{"url":"https://bugzilla.redhat.com/1983596","tags":["report"]},{"url":"https://bugzilla.redhat.com/1989570","tags":["report"]},{"url":"https://bugzilla.redhat.com/2026675","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064702","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-7954.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-34558","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-34558","tags":["advisory"]},{"url":"https://go.dev/cl/334031","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/a98589711da5e9d935e8d690cfca92892e86d557","tags":["fix"]},{"url":"https://go.dev/issue/47143","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2021-0369.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29037","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EXHOWUQKHNS4LEJ2GTYWY2EEAYVCKECW/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4PG5AXR4LXEWYU5DHYEVESCXWKO3HFHO/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QLUQXBCOPWP72ZSS3SM3CTURM7XOYALQ/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKQH4LHYIFOWBEGMGHD7S7TTV7JL4U7W/","tags":["web","advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OZJXXUXBI66VV2PXRNAWN4MCE3AOHNBA/","tags":["web","advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0213.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28885","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/25LCWXTFK5CEUYRWF74Y4C7VIMWDH2OI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/F3ARUFZTP54XZ36JGEVCIBJZPX4LTF3G/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/GWKDCFQ4EVHMJJ6V2EAABHSRZK34HUUT/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IKOQ2O3CAYO75ZV2PUCTL6G72K7JVGCT/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QKTJEKY2C35BIT22ZIPQZRQ4WY6ZW4W5/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XOKBC52ABMXFW242S6YAQLBUX3QPEDOR/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/A4W4OXY44AKASYVR6NZPWKHHCVDI7LMX/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HRFGZZIO26CZN3P2K72PZABZKT5J4IUT/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/OPCGIPJ4YWKRBYUO5NIO6H5RZROPWZVJ/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/XNDJJ36ISNZQL6I3K25POE5HZZJYUEIV/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/GDWE3ABI6VTR2BO4UV3HXEUYUN5CKUES/","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969264","tags":["report"]},{"url":"https://github.com/containers/buildah/security/advisories/GHSA-7638-r9r3-rmjj","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZAB6D3CGIKTOPITATFKEJEJZRRFUNAAF/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WYEKQOCOMRYA54WFUPJNNBZD5CPNRGHX/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4ZGUZD4KLTFHCQDYKB64PUVEWIB3YTL2/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LALQQUUGFHODEBITRRY26YKZFR2FQN5X/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/75MV35CPCW3Q5MAQR6OGEJEYVVEZ2MXI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CAYDF5STQQ2MWYFKJISEVKKCDRW6K3MP/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WXJ2MVMAHOIGRH37ZSFYC4EVWLJFL2EQ/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JYIUSR4YP52PWG7YE7AA3DZ5OSURNFJB/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3TUZNDAH2B26VPBK342UC3BHZNLBUXGX/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IA7RFWWF2TAD6ABTSEOCANQQEGMSU4YP/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5BA2TLW7O5ZURGQUAQUH4HD5SQYNDDZ6/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WFIDXN6UAK2I4PPVFPBE4STNQH2FZQ4A/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FY3N7H6VSDZM37B4SKM2PFFCUWU7QYWN/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2VWH6X6HOFPO6HTESF42HIJZEPXSWVIO/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/COAZMKGIFFK6JHHLFRHHTVMQ4HK5XI73/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/J5WPM42UR6XIBQNQPNQHM32X7S4LJTRX/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2IK53GWZ475OQ6ENABKMJMTOBZG6LXUR/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3XQI3JGSN3QUR2TTD5PKGO62TDA7VS3I/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BOSR3QWWI2B7POIUKKJJMCEE2T3PFI5B/","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-October/012775.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PL4K6SMPK6ISI4ZPOM3PI6GAYO6XYPYB/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7822","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-January/013557.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NKDIDANN2OO6H6AMGCEODFI5ZES7PJYI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HX2XHVJTED7LYWP3LLJ3FTJMPQ4KYG44/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/I5RR5DUZHU2FFOE3EKYH6T74SA43EB4T/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-6170-1","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36221","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-24791","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2021:2979","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988937","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_2979.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31525","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33195","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989570","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33197","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989575","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33198","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983596","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34558","tags":["advisory","report"]},{"url":"https://golang.org/doc/devel/release#go1.15.minor","tags":["article"]},{"url":"https://access.redhat.com/errata/RHEA-2021:3287","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/SDA-2928","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-3085","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-3673","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-3896","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-4584","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-4593","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-4594","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-4602","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-4610","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-4613","tags":["article"]},{"url":"https://issues.redhat.com/browse/SDA-4623","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhea-2021_3287.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2984","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988945","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2984.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33196","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3009","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989867","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3009.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3015","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_developer_tools/1/html/using_go_1.15.7_toolset","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3015.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3076","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978567","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3076.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-27918","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-27918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27918","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3248","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996707","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3248.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3555","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992955","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3555.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3703","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3703","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3703","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3820","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2007750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2013510","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3820.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21670","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21670","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21670","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2278","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21671","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21671","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21671","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-06-30/#SECURITY-2371","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4226","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941024","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4226.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-27358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-27358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27358","tags":["advisory"]},{"url":"https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4722","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2012329","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4722.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29923","tags":["advisory"]},{"url":"https://sick.codes/sick-2021-016/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:5085","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998680","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5085.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8565","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8565","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/95623","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-announce/c/ScdmyORnPDk","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0237","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030801","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0237.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44716","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/hcmEScgc00k","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0260","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0260.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0988","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020629","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0988.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0998","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0998.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1329","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044050","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1329.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2088116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097694","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7954.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28851","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28852","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4024","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4024","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20199","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20291","tags":["advisory"]},{"url":"https://unit42.paloaltonetworks.com/cve-2021-20291/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27191","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2988","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262272","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-18150","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-2598","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-26594","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3088","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3093","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3146","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-9836","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2988.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25091","tags":["advisory"]},{"url":"https://security.snyk.io/vuln/SNYK-PYTHON-URLLIB3-5969479","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2879","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/54853","tags":["article"]},{"url":"https://github.com/vbatts/tar-split/releases/tag/v0.12.1","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2880","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/54663","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41715","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/55949","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29409","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29409","tags":["advisory"]},{"url":"https://go.dev/cl/515257","tags":["article"]},{"url":"https://go.dev/issue/61460","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1987","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39318","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39318","tags":["advisory"]},{"url":"https://go.dev/cl/526156","tags":["article"]},{"url":"https://go.dev/issue/62196","tags":["article"]},{"url":"https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ","tags":["article"]},{"url":"https://vuln.go.dev/ID/GO-2023-2041.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39319","tags":["advisory"]},{"url":"https://go.dev/cl/526157","tags":["article"]},{"url":"https://go.dev/issue/62197","tags":["article"]},{"url":"https://vuln.go.dev/ID/GO-2023-2043.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39321","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39321","tags":["advisory"]},{"url":"https://go.dev/cl/523039","tags":["article"]},{"url":"https://go.dev/issue/62266","tags":["article"]},{"url":"https://vuln.go.dev/ID/GO-2023-2044.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39322","tags":["advisory"]},{"url":"https://vuln.go.dev/ID/GO-2023-2045.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39326","tags":["advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2382","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45287","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45287","tags":["advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2375","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803","tags":["advisory"]},{"url":"https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9","tags":["article"]},{"url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110.html#name-get","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-48795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48795","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/7071748","tags":["article"]},{"url":"https://terrapin-attack.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23650","tags":["advisory"]},{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2021:3076","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4226","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2988","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212392-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182345","tags":["report"]},{"url":"https://bugzilla.suse.com/1188229","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34558","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212398-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-34558","tags":["report"]},{"url":"https://github.com/golang/go/issues/47143","tags":["report"]},{"url":"https://github.com/golang/go/commit/58bc454a11d4b3dbc03f44dfcabb9068a9c076f4","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V2VBWNYDPOVJ4NFLIRNHJGULW2GKRQ4T/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KY7UHEDTSX6MOHJLHMRNQVBUTCR2XMOB/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-39293","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-34558","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T13:47:36Z","modified":"2024-08-04T00:12:50.36Z","updated_at":"2026-11-02T14:33:11.59359Z"}],"euvd":[{"id":"EUVD-2021-21208","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T13:47:36Z","modified":"2024-08-04T00:12:50Z","updated_at":"2026-11-03T03:24:32.445199Z"}],"ghsa":[{"id":"GHSA-hqrm-74p3-w275","title":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key...","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2022-05-24T19:08:13Z","modified":"2023-01-27T05:03:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:42:20.442744Z"}],"nvd":[{"id":"CVE-2021-34558","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T14:15:19.66Z","modified":"2026-06-17T03:56:07.257Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:06:55.747384Z"}],"osv":[{"id":"ALPINE-CVE-2021-34558","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T14:15:19.66Z","modified":"2026-11-03T06:32:40.496739955Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-105164","title":"CVE-2021-34558 affecting package golang 1.26.7-1","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T14:15:19Z","modified":"2026-10-15T05:37:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"AZL-105167","title":"CVE-2021-34558 affecting package golang 1.27.1-1","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T14:15:19Z","modified":"2026-10-15T05:37:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"BELL-CVE-2021-34558","title":"CVE-2021-34558 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:58.907925Z","modified":"2026-01-26T09:48:35.403513Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-34558","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T14:15:19.66Z","modified":"2026-10-24T10:30:32.602500231Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-34558","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T14:15:19.66Z","modified":"2026-08-27T23:04:04.16273814Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1402","title":"golang security update","description":"The go programming language\r\n\r\nSecurity Fix(es):\r\n\r\nGo before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.(CVE-2021-33195)\n\nIn archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive s header) can cause a NewReader or OpenReader panic.(CVE-2021-33196)\n\nIn Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.(CVE-2021-33197)\n\nIn Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.(CVE-2021-33198)\n\nThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.(CVE-2021-34558)\n\nGo before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.(CVE-2021-29923)\n\nGo before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.(CVE-2021-38297)\n\nGo before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.(CVE-2021-36221)","status":"published","published":"2021-10-27T11:04:40Z","modified":"2026-08-18T01:16:06.608548299Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"OESA-2025-1059","title":"buildah security update","description":"The  package provides a command line tool which can be used to * create a working container from scratch or * create a working container from an image as a starting point * mount/umount a working container\u0026apos;s root file system for manipulation * save container\u0026apos;s root file system layer to create a new image * delete a working container or an image\r\n\r\nSecurity Fix(es):\r\n\r\nThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.(CVE-2021-34558)\r\n\r\nUncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.(CVE-2022-1962)\r\n\r\nAn incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.(CVE-2022-2990)\r\n\r\nPrograms which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.(CVE-2022-41715)\r\n\r\nA maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)\r\n\r\nHTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than required to hold the parsed headers. An attacker can exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially leading to memory exhaustion and a denial of service. With fix, header parsing now correctly allocates only the memory required to hold parsed headers.(CVE-2023-24534)\r\n\r\nMultipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount of memory consumed, leading it to accept larger inputs than intended. 2. Limiting total memory does not account for increased pressure on the garbage collector from large numbers of small allocations in forms with many parts. 3. ReadForm can allocate a large number of short-lived buffers, further increasing pressure on the garbage collector. The combination of these factors can permit an attacker to cause an program that parses multipart forms to consume large amounts of CPU and memory, potentially resulting in a denial of service. This affects programs that use mime/multipart.Reader.ReadForm, as well as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. With fix, ReadForm now does a better job of estimating the memory consumption of parsed forms, and performs many fewer short-lived allocations. In addition, the fixed mime/multipart.Reader imposes the following limits on the size of parsed forms: 1. Forms parsed with ReadForm may contain no more than 1000 parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxparts=. 2. Form parts parsed with NextPart and NextRawPart may contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 header fields across all parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxheaders=.(CVE-2023-24536)\r\n\r\nCalling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.(CVE-2023-24537)\r\n\r\nTemplates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g. \u0026quot;var a = {{.}}\u0026quot;), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template.Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported, but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution.(CVE-2023-24538)\r\n\r\nA malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.(CVE-2023-39325)\r\n\r\nThe SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH\u0026apos;s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.(CVE-2023-48795)\r\n\r\nA flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.(CVE-2024-1753)\r\n\r\nThe net/http HTTP/1.1 client mishandled the case where a server responds to a request with an \u0026quot;Expect: 100-continue\u0026quot; header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending \u0026quot;Expect: 100-continue\u0026quot; requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.(CVE-2024-24791)","status":"published","published":"2025-01-17T11:08:09Z","modified":"2026-08-18T01:18:45.898226214Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHBA-2021:2979","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.7.23 packages update","status":"published","published":"2024-09-29T18:29:41Z","modified":"2026-08-05T10:08:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHEA-2021:3287","title":"Red Hat Enhancement Advisory: Red Hat OpenShift Service on AWS 1.0 enhancements","status":"published","published":"2024-09-29T18:21:20Z","modified":"2026-06-29T10:33:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2021:2984","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.4 bug fix and security update","status":"published","published":"2024-09-30T14:17:59Z","modified":"2026-08-05T10:09:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3009","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.42 security update","status":"published","published":"2024-09-29T18:29:20Z","modified":"2026-08-05T10:09:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3015","title":"Red Hat Security Advisory: go-toolset-1.15 and go-toolset-1.15-golang security and bug fix update","status":"published","published":"2024-09-29T18:20:24Z","modified":"2026-06-29T10:36:29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3076","title":"Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T18:02:10Z","modified":"2026-06-29T10:36:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3248","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.9 packages and security update","status":"published","published":"2024-09-29T18:29:55Z","modified":"2026-08-05T10:09:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3555","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.17.0","status":"published","published":"2024-09-30T14:18:38Z","modified":"2026-08-05T10:09:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3820","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.15 packages and security update","status":"published","published":"2024-09-29T18:29:45Z","modified":"2026-08-05T10:09:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4226","title":"Red Hat Security Advisory: grafana security, bug fix, and enhancement update","status":"published","published":"2024-09-29T18:30:07Z","modified":"2026-08-08T10:01:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4722","title":"Red Hat Security Advisory: OpenShift Virtualization 2.6.8 RPMs security and bug fix update","status":"published","published":"2024-09-30T14:18:15Z","modified":"2026-06-30T10:01:46Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2021:5085","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.9.0 enhancement, security, and bug fix update","status":"published","published":"2024-09-29T18:30:20Z","modified":"2026-08-05T10:09:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0237","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update","status":"published","published":"2024-09-30T14:19:03Z","modified":"2026-06-30T10:01:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0260","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update","status":"published","published":"2024-09-30T14:19:21Z","modified":"2026-06-30T10:01:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0988","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (golang-github-vbatts-tar-split) security update","status":"published","published":"2024-09-30T14:20:03Z","modified":"2026-06-30T10:01:52Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0998","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (golang-github-vbatts-tar-split) security update","status":"published","published":"2024-09-30T14:19:46Z","modified":"2026-06-30T10:01:54Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:1329","title":"Red Hat Security Advisory: OpenShift Virtualization 4.8.5 RPMs security update","status":"published","published":"2024-09-29T18:30:58Z","modified":"2026-08-05T10:10:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:7954","title":"Red Hat Security Advisory: podman security and bug fix update","status":"published","published":"2024-09-30T14:28:34Z","modified":"2026-10-17T10:01:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2024:2988","title":"Red Hat Security Advisory: container-tools:rhel8 security update","status":"published","published":"2024-10-21T18:50:41Z","modified":"2026-10-20T10:02:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2021:3076","title":"Moderate: go-toolset:rhel8 security, bug fix, and enhancement update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nThe following packages have been upgraded to a later upstream version: golang (1.15.14). (BZ#1982287)\n\nSecurity Fix(es):\n\n* golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader (CVE-2021-27918)\n\n* golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header (CVE-2021-31525)\n\n* golang: archive/zip: malformed archive may cause panic or memory exhaustion (CVE-2021-33196)\n\n* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* FIPS mode AES CBC CryptBlocks incorrectly re-initializes IV in file crypto/internal/boring/aes.go (BZ#1978567)\n\n* FIPS mode AES CBC Decrypter produces incorrect result (BZ#1983976)","status":"published","published":"2021-08-10T12:00:58Z","modified":"2026-02-05T07:30:11.469797Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2021:4226","title":"Moderate: grafana security, bug fix, and enhancement update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nThe following packages have been upgraded to a later upstream version: grafana (7.5.9). (BZ#1921191)\n\nSecurity Fix(es):\n\n* golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)\n\n* grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call (CVE-2021-27358)\n\n* golang: net: lookup functions may return invalid host names (CVE-2021-33195)\n\n* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)\n\n* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:46:47Z","modified":"2026-02-05T08:15:12.635566Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2024:2988","title":"Moderate: container-tools:rhel8 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect (CVE-2018-25091)\n\n* golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)\n\n* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)\n\n* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)\n\n* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)\n\n* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)\n\n* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)\n\n* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)\n\n* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)\n\n* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)\n\n* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\n* urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)\n\n* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)\n\n* moby/buildkit: Possible race condition with accessing subpaths from cache mounts (CVE-2024-23650)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T20:08:43.004434Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2021-34558","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2021-07-15T14:15:00Z","modified":"2025-10-24T04:50:24Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2021:4226","title":"Moderate: grafana security, bug fix, and enhancement update","description":"Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nThe following packages have been upgraded to a later upstream version: grafana (7.5.9). (BZ#1921191)\n\nSecurity Fix(es):\n\n* golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)\n\n* grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call (CVE-2021-27358)\n\n* golang: net: lookup functions may return invalid host names (CVE-2021-33195)\n\n* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)\n\n* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:46:47Z","modified":"2026-10-29T11:01:09.798224032Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:7954","title":"Moderate: podman security and bug fix update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension (CVE-2020-28851)\n* golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag (CVE-2020-28852)\n* podman: podman machine spawns gvproxy with port bound to all IPs (CVE-2021-4024)\n* podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)\n* containers/storage: DoS via malicious image (CVE-2021-20291)\n* golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)\n* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)\n* golang: crash in a golang.org/x/crypto/ssh server (CVE-2022-27191)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:17.390295247Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-golang-2021-34558","description":"The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.","status":"published","published":"2024-03-06T11:04:35.975Z","modified":"2026-09-08T08:47:48.258768731Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"GO-2021-0243","title":"Panic on certain certificates in crypto/tls","description":"crypto/tls clients can panic when provided a certificate of the wrong type for the negotiated parameters. net/http clients performing HTTPS requests are also affected.","status":"published","published":"2022-02-17T17:32:57Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"MGASA-2021-0369","title":"Updated golang packages fix security vulnerabilities","description":"encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop\nif a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of\nan element. This can occur in the Decode, DecodeElement, or Skip method\n(CVE-2021-27918).\n\nnet/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers\nto cause a denial of service (panic) via a large header to ReadRequest or\nReadResponse. Server, Transport, and Client can each be affected in some\nconfigurations (CVE-2021-31525).\n\nA security issue has been found in Go before version 1.16.5. The LookupCNAME,\nLookupSRV, LookupMX, LookupNS, and LookupAddr functions in net, and their\nrespective methods on the Resolver type may return arbitrary values retrieved\nfrom DNS which do not follow the established RFC 1035 rules for domain names.\nIf these names are used without further sanitization, for instance unsafely\nincluded in HTML, they may allow for injection of unexpected content. Note\nthat LookupTXT may still return arbitrary values that could require\nsanitization before further use (CVE-2021-33195).\n\nA security issue has been found in Go. Due to a pre-allocation optimization in\nzip.NewReader, a malformed archive which indicates it has a significant number\nof files can cause either a panic or memory exhaustion (CVE-2021-33196).\n\nReverseProxy fails to delete the Connection headers (as well as other legacy\nhop-by-hop headers, which however per RFC 7230 need to also be specified in\nConnection) if there are multiple ones and the first is empty, due to an\nincorrect Get(h) == \"\" check. This can lead to a security issue if the proxy\nis adding an important header, like X-Forwarded-For, and is sitting in front\nof another proxy which can be instructed by an attacker to drop that header as\na hop-by-hop header (CVE-2021-33197).\n\nA security issue has been found in Go before version 1.16.5. The SetString and\nUnmarshalText methods of math/big.Rat may cause a panic or an unrecoverable\nfatal error if passed inputs with very large exponents (CVE-2021-33198).\n\nThe crypto/tls package of Go through 1.16.5 does not properly assert that the\ntype of public key in an X.509 certificate matches the expected type when\ndoing a RSA based key exchange, allowing a malicious TLS server to cause a TLS\nclient to panic (CVE-2021-34558).\n","status":"published","published":"2021-07-25T08:34:17Z","modified":"2026-04-16T04:41:34.082310587Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"MGASA-2023-0213","title":"Updated skopeo/buildah/podman packages fix security vulnerability","description":"Information disclosure flaw was found in Buildah (CVE-2021-3602)\npodman allows forwarding hosts ports to vm from within vm (CVE-2021-4024)\nAllows use  \"../\" separators in containernetworking/cni to reference\nbinaries such as 'reboot' in network configuration (CVE-2021-20206)\ngithub.com/containers/storage ddos via crafted tar file (CVE-2021-20291)\nbuildah improper checking of X.509 certificate (CVE-2021-34558)\nbuildah improper Content-Type checking (CVE-2021-41190)\npodman privilege escalation (CVE-2022-1227)\npodman incorrect handling of the supplementary groups (CVE-2022-2989)\nbuildah incorrect handling of the supplementary groups (CVE-2022-2990)\nskopeo/podman Denial of Service through unbounded cardinality, and\npotential memory exhaustion (CVE-2022-21698)\nbuildah/podman AddHostKey denail of service (CVE-2022-27191)\npodman inheritable file capabilities (CVE-2022-27649)\nbuildah inheritable file capabilities (CVE-2022-27651)\n","status":"published","published":"2023-07-07T05:54:45Z","modified":"2026-04-16T04:43:02.693218953Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2021:1078-1","title":"Security update for go1.16","description":"This update for go1.16 fixes the following issues:\n\ngo1.16.6 (released 2021-07-12, bsc#1182345) includes a security fix to the\ncrypto/tls package, as well as bug fixes to the compiler, and the\nnet and net/http packages.\n\nSecurity issue fixed:\n\nCVE-2021-34558: Fixed crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parameters (bsc#1188229)\n\ngo1.16 release:\n\n* bsc#1188229 go#47143 CVE-2021-34558\n* go#47145 security: fix CVE-2021-34558\n* go#46999 net: LookupMX behaviour broken\n* go#46981 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3\n* go#46769 syscall: TestGroupCleanupUserNamespace test failure on Fedora\n* go#46657 runtime: deeply nested struct initialized with non-zero values\n* go#44984 net/http: server not setting Content-Length in certain cases\n","status":"published","published":"2021-07-22T16:06:24Z","modified":"2026-02-04T03:37:42.881194Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:1079-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\n- go1.15.14 (released 2021-07-12) includes a security fix to the\n  crypto/tls package, as well as bug fixes to the linker, and the\n  net package.\n  CVE-2021-34558\n  Refs bsc#1175132 go1.15 release tracking\n  * bsc#1188229 go#47143 CVE-2021-34558\n  * go#47144 security: fix CVE-2021-34558\n  * go#47012 net: LookupMX behaviour broken\n  * go#46994 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3\n  * go#46768 syscall: TestGroupCleanupUserNamespace test failure on Fedora\n  * go#46684 x/build/cmd/release: linux-armv6l release tests aren't passing\n  * go#46656 runtime: deeply nested struct initialized with non-zero values\n\n- Fix extraneous trailing percent character %endif% in spec file.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-07-22T18:06:03Z","modified":"2026-02-04T04:09:13.46191Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:2392-1","title":"Security update for go1.16","description":"This update for go1.16 fixes the following issues:\n\ngo1.16.6 (released 2021-07-12, bsc#1182345) includes a security fix to the\ncrypto/tls package, as well as bug fixes to the compiler, and the\nnet and net/http packages.\n\nSecurity issue fixed:\n\nCVE-2021-34558: Fixed crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parameters (bsc#1188229)\n\ngo1.16 release:\n\n* bsc#1188229 go#47143 CVE-2021-34558\n* go#47145 security: fix CVE-2021-34558\n* go#46999 net: LookupMX behaviour broken\n* go#46981 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3\n* go#46769 syscall: TestGroupCleanupUserNamespace test failure on Fedora\n* go#46657 runtime: deeply nested struct initialized with non-zero values\n* go#44984 net/http: server not setting Content-Length in certain cases\n","status":"published","published":"2021-07-19T06:50:28Z","modified":"2026-02-04T02:54:07.669338Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:2398-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\n- go1.15.14 (released 2021-07-12) includes a security fix to the\n  crypto/tls package, as well as bug fixes to the linker, and the\n  net package.\n  CVE-2021-34558\n  Refs bsc#1175132 go1.15 release tracking\n  * bsc#1188229 go#47143 CVE-2021-34558\n  * go#47144 security: fix CVE-2021-34558\n  * go#47012 net: LookupMX behaviour broken\n  * go#46994 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3\n  * go#46768 syscall: TestGroupCleanupUserNamespace test failure on Fedora\n  * go#46684 x/build/cmd/release: linux-armv6l release tests aren't passing\n  * go#46656 runtime: deeply nested struct initialized with non-zero values\n\n- Fix extraneous trailing percent character %endif% in spec file.\n","status":"published","published":"2021-07-19T14:57:38Z","modified":"2026-02-04T04:26:29.018391Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10808-1","title":"go1.15-1.15.15-1.2 on GA media","description":"These are all security issues fixed in the go1.15-1.15.15-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:46:55.765323Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10809-1","title":"go1.16-1.16.8-1.1 on GA media","description":"These are all security issues fixed in the go1.16-1.16.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:42.475775Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:2392-1","title":"Security update for go1.16","description":"This update for go1.16 fixes the following issues:\n\ngo1.16.6 (released 2021-07-12, bsc#1182345) includes a security fix to the\ncrypto/tls package, as well as bug fixes to the compiler, and the\nnet and net/http packages.\n\nSecurity issue fixed:\n\nCVE-2021-34558: Fixed crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parameters (bsc#1188229)\n\ngo1.16 release:\n\n* bsc#1188229 go#47143 CVE-2021-34558\n* go#47145 security: fix CVE-2021-34558\n* go#46999 net: LookupMX behaviour broken\n* go#46981 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3\n* go#46769 syscall: TestGroupCleanupUserNamespace test failure on Fedora\n* go#46657 runtime: deeply nested struct initialized with non-zero values\n* go#44984 net/http: server not setting Content-Length in certain cases\n","status":"published","published":"2021-07-19T06:50:27Z","modified":"2026-02-04T02:31:04.848105Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2398-1","title":"Security update for go1.15","description":"This update for go1.15 fixes the following issues:\n\n- go1.15.14 (released 2021-07-12) includes a security fix to the\n  crypto/tls package, as well as bug fixes to the linker, and the\n  net package.\n  CVE-2021-34558\n  Refs bsc#1175132 go1.15 release tracking\n  * bsc#1188229 go#47143 CVE-2021-34558\n  * go#47144 security: fix CVE-2021-34558\n  * go#47012 net: LookupMX behaviour broken\n  * go#46994 net: TestCVE202133195 fails if /etc/resolv.conf specifies ndots larger than 3\n  * go#46768 syscall: TestGroupCleanupUserNamespace test failure on Fedora\n  * go#46684 x/build/cmd/release: linux-armv6l release tests aren't passing\n  * go#46656 runtime: deeply nested struct initialized with non-zero values\n\n- Fix extraneous trailing percent character %endif% in spec file.\n","status":"published","published":"2021-07-19T14:57:33Z","modified":"2026-02-04T04:27:06.537976Z","updated_at":"2026-11-02T15:53:49.605187Z"}]}}