{"id":"CVE-2022-30629","aliases":["ALPINE-CVE-2022-30629","ALSA-2023:2253","ALSA-2023:2282","ALSA-2023:2283","ALSA-2023:2367","ALSA-2023:2758","AZL-10550","BELL-CVE-2022-30629","BIT-golang-2022-30629","DEBIAN-CVE-2022-30629","EUVD-2022-52460","GHSA-j55j-52j7-vq87","GO-2022-0531","MGASA-2022-0231","OESA-2022-1783","RHSA-2022:5775","RHSA-2022:5799","RHSA-2022:5866","RHSA-2022:6042","RHSA-2022:6102","RHSA-2022:6277","RHSA-2022:6535","RHSA-2023:0407","RHSA-2023:1275","RHSA-2023:2253","RHSA-2023:2282","RHSA-2023:2283","RHSA-2023:2367","RHSA-2023:2758","RHSA-2023:3914","RLSA-2022:5775","RLSA-2022:5799","RLSA-2023:2758","SUSE-SU-2022:2004-1","SUSE-SU-2022:2005-1","SUSE-SU-2023:2312-1","UBUNTU-CVE-2022-30629","USN-6038-1","USN-6038-2","openSUSE-SU-2024:12123-1","openSUSE-SU-2024:12124-1"],"status":"published","title":"Session tickets lack random ticket_age_add in crypto/tls","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0121,"percentile":0.68864,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-330"],"published":"2022-06-07T14:34:31Z","modified":"2026-11-03T07:31:15Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"go","fixed_in":["1.18.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"golang","fixed_in":["1.18.5-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.17.11","1.18.3"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.17.11","1.18.3"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"golang","fixed_in":["1.17.11-1.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"butane","fixed_in":["0:0.15.0-2.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"butane-debuginfo","fixed_in":["0:0.15.0-2.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"butane-debugsource","fixed_in":["0:0.15.0-2.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"butane-redistributable","fixed_in":["0:0.15.0-2.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-o","fixed_in":["0:1.24.2-4.rhaos4.11.gitd6283df.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-o-debuginfo","fixed_in":["0:1.24.2-4.rhaos4.11.gitd6283df.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-o-debugsource","fixed_in":["0:1.24.2-4.rhaos4.11.gitd6283df.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition","fixed_in":["0:2.14.0-4.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-debuginfo","fixed_in":["0:2.14.0-4.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-debugsource","fixed_in":["0:2.14.0-4.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-validate","fixed_in":["0:2.14.0-4.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-validate-debuginfo","fixed_in":["0:2.14.0-4.rhaos4.11.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-tools","fixed_in":["0:1.24.2-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-tools-debuginfo","fixed_in":["0:1.24.2-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-tools-debugsource","fixed_in":["0:1.24.2-6.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1~16.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1~18.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1~18.04.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","fixed_in":["1.16.2-0ubuntu1~18.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.16","fixed_in":["1.16.2-0ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","fixed_in":["1.13.8-1ubuntu2.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-2.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"63.1-1.module_el8.8.0+3557+7ba9cc13"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-2.module_el8.8.0+3557+7ba9cc13"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-63.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-2.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-4.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module_el8.8.0+3568+e8578284"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-1.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-2.module_el8.7.0+3407+95aa0ca9"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-7.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.3-7.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-20.module_el8.8.0+3470+252b1910"}]}],"bundled":14},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.18.5-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.11"},{"introduced":"1.18.0"},{"fixed":"1.18.3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"golang-1.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.15-1","1.15.15-1~deb11u1","1.15.15-1~deb11u2","1.15.15-1~deb11u3","1.15.15-1~deb11u4","1.15.15-2","1.15.15-3","1.15.15-4","1.15.15-5","1.15.9-6"]},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.17.11"},{"introduced":"1.18.0-0"},{"fixed":"1.18.3"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.11-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-14.oe1"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-14.oe1"}]}],"bundled":10},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-5.oe2203"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+12972+ebab5911"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+12972+ebab5911"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+12972+ebab5911"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+16014+a372c00b"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:devtools:2022","package":"go-toolset-1.17-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el7_9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-4.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.0-2.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.0-2.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"butane-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.0-2.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"butane-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.15.0-2.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-4.rhaos4.11.gitd6283df.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-4.rhaos4.11.gitd6283df.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-4.rhaos4.11.gitd6283df.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-4.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-4.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-4.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-4.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-4.rhaos4.11.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.23.0-9.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-ratelimit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.2-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el7","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el7","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el7","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el8","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el8","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.12::el8","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-1057.el8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-12.el8ost"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"etcd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-12.el8ost"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"etcd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-12.el8ost"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-12.el8ost"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-12.el8ost"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-12.el8ost"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.4.1-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.module+el8.8.0+18195+471da4bb"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:63.1-1.module+el8.8.0+18286+cd236dce"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module+el8.8.0+18098+9b44df5f"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module+el8.8.0+18098+9b44df5f"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.6-1.module+el8.8.0+18098+9b44df5f"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-2.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-63.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-2.module+el8.8.0+18418+f0e540fe"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-2.module+el8.8.0+18418+f0e540fe"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-2.module+el8.8.0+18418+f0e540fe"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.0-4.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.8-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-8.module+el8.8.0+18438+15d3aa65"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1-1.module+el8.8.0+18275+3a56cc62"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1-1.module+el8.8.0+18275+3a56cc62"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.4-1.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.3-7.module+el8.8.0+18119+e3deee03"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-20.module+el8.8.0+18060+3f21f2cc"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.23.4-3.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.23.4-3.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.23.4-3.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.23.4-3.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.23.4-3.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-7.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:1.1.2-2.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:1.1.2-2.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:1.1.2-2.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.2-4.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.2-4.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.2-4.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5.2-4.rhaos4.11.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-202306260054.p0.g990d55b.assembly.stream.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-202306260054.p0.g990d55b.assembly.stream.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:4.11::el8","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-202306230041.p0.g0a466d7.assembly.stream.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-1.module+el8.6.0+824+8e984c20"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+993+4fde2340"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.module+el8.6.0+993+4fde2340"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:9","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:9","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17.12-1.el9_0"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.11-150000.1.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.11-150000.1.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.11-150000.1.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.11-150000.1.37.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-150000.1.20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-150000.1.20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-150000.1.20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-150000.1.20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~16.04.3+esm3"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~18.04.4"}]}],"versions":["1.18.1-1ubuntu1~18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~18.04.4+esm1"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~18.04.2+esm1"}]}],"versions":["1.16.2-0ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1.2"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~20.04.1"}]}],"versions":["1.16.2-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~20.04.2"}]}],"versions":["1.18.1-1ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu2.22.04.2"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.17-1ubuntu2","1.17.3-1ubuntu1","1.17.3-1ubuntu2","1.17.13-3ubuntu1","1.17.13-3ubuntu1.2","1.17.13-3ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1.1"}]}],"versions":["1.18~beta1-0ubuntu1","1.18~beta2-1ubuntu1","1.18~beta2-1ubuntu2","1.18~rc1-1ubuntu1","1.18-1ubuntu1","1.18.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~18.04.4"}]}],"versions":["1.18.1-1ubuntu1~18.04.3"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~20.04.2"}]}],"versions":["1.18.1-1ubuntu1~20.04.1"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1.1"}]}],"versions":["1.18~beta1-0ubuntu1","1.18~beta2-1ubuntu1","1.18~beta2-1ubuntu2","1.18~rc1-1ubuntu1","1.18-1ubuntu1","1.18.1-1ubuntu1"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~16.04.3+esm3"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1~18.04.4+esm1"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~18.04.2+esm1"}]}],"versions":["1.16.2-0ubuntu1~18.04.2"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu1.2"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-0ubuntu1~20.04.1"}]}],"versions":["1.16.2-0ubuntu1~20.04"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.8-1ubuntu2.22.04.2"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.11-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.3-1.1"}]}],"bundled":4}],"products":[{"vendor":"go standard library","product":"crypto/tls"},{"vendor":"golang","product":"go"}],"references":[{"url":"https://go.dev/cl/405994","tags":["x_transferred","Patch","fix","web"]},{"url":"https://go.googlesource.com/go/+/fe4de36198794c447fbd9d7cc2d7199a506c76a5","tags":["x_transferred","Mailing List","Patch","fix","web"]},{"url":"https://go.dev/issue/52814","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","advisory","web","report"]},{"url":"https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ","tags":["x_transferred","Mailing List","Vendor Advisory","advisory","web"]},{"url":"https://pkg.go.dev/vuln/GO-2022-0531","tags":["x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30629","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6"},{"url":"https://security.netapp.com/advisory/ntap-20220915-0004"},{"url":"https://github.com/advisories/GHSA-j55j-52j7-vq87"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-30629","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2253","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30629","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41717","tags":["report"]},{"url":"https://bugzilla.redhat.com/2092793","tags":["report"]},{"url":"https://bugzilla.redhat.com/2161274","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2253.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2282","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2282.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2283","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2283.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2367","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2367.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2758","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1705","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1962","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27664","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28131","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30630","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30631","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30632","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30633","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30635","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32148","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32189","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0778","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107342","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107371","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107374","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107376","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107383","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107386","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107388","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107390","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107392","tags":["report"]},{"url":"https://bugzilla.redhat.com/2113814","tags":["report"]},{"url":"https://bugzilla.redhat.com/2124669","tags":["report"]},{"url":"https://bugzilla.redhat.com/2168256","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2758.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-30629","tags":["advisory"]},{"url":"https://pkg.go.dev","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30629.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-30629","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0231.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30530","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg","tags":["web","article","report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7YVS6P6QJPK5B4HQAT2XTPVX5KZ5WZ3B/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1783","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32148","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1705","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5775","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107392","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5775.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1705","tags":["advisory"]},{"url":"https://go.dev/issue/53188","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1962","tags":["advisory"]},{"url":"https://go.dev/issue/53616","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28131","tags":["advisory"]},{"url":"https://go.dev/issue/53614","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092793","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30629","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30630","tags":["advisory"]},{"url":"https://go.dev/issue/53415","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30631","tags":["advisory"]},{"url":"https://go.dev/issue/53168","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30632","tags":["advisory"]},{"url":"https://go.dev/issue/53416","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30633","tags":["advisory"]},{"url":"https://go.dev/issue/53611","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30635","tags":["advisory"]},{"url":"https://go.dev/issue/53615","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32148","tags":["advisory"]},{"url":"https://go.dev/issue/53423","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5799","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5799.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077688","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24675","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24675","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/oecdBNLOml8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24921","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28327","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2084085","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29526","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5866","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5866.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6042","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108527","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6042.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1996","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1996","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21698","tags":["advisory"]},{"url":"https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6102","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6102.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6277","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105075","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6277.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24785","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31129","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6535","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6535.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0407","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100495","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0407.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-38561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-38561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38561","tags":["advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2021-0113","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44716","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/hcmEScgc00k","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44717","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1275","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2113814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163037","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1275.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2880","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/54663","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3064","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3064","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6q6q-88xp-6f2r","tags":["advisory"]},{"url":"https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5","tags":["article"]},{"url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-0956","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27664","tags":["advisory"]},{"url":"https://go.dev/issue/54658","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/x49AQzIVX-s/m/0tgO0pjiBQAJ","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32189","tags":["advisory"]},{"url":"https://go.dev/issue/53871","tags":["article"]},{"url":"https://groups.google.com/g/golang-nuts/c/DCFSyTGM0wU","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41715","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/55949","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41717","tags":["advisory"]},{"url":"https://go.dev/cl/455635","tags":["article"]},{"url":"https://go.dev/cl/455717","tags":["article"]},{"url":"https://go.dev/issue/56350","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-1144","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182315","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2253.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2078411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182821","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2282.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182318","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2283.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129076","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2367.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2033280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2090166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128675","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168256","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2758.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0778","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qwqv-rqgf-8qh8","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3914","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-001","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212085","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3914.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23772","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23772","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3089","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3089","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24540","tags":["advisory"]},{"url":"https://go.dev/issue/59721","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5775","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5799","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2758","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222004-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190649","tags":["report"]},{"url":"https://bugzilla.suse.com/1200134","tags":["report"]},{"url":"https://bugzilla.suse.com/1200135","tags":["report"]},{"url":"https://bugzilla.suse.com/1200136","tags":["report"]},{"url":"https://bugzilla.suse.com/1200137","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30634","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222005-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193742","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232312-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183043","tags":["report"]},{"url":"https://bugzilla.suse.com/1198423","tags":["report"]},{"url":"https://bugzilla.suse.com/1198424","tags":["report"]},{"url":"https://bugzilla.suse.com/1198427","tags":["report"]},{"url":"https://bugzilla.suse.com/1199413","tags":["report"]},{"url":"https://bugzilla.suse.com/1201434","tags":["report"]},{"url":"https://bugzilla.suse.com/1201436","tags":["report"]},{"url":"https://bugzilla.suse.com/1201437","tags":["report"]},{"url":"https://bugzilla.suse.com/1201440","tags":["report"]},{"url":"https://bugzilla.suse.com/1201443","tags":["report"]},{"url":"https://bugzilla.suse.com/1201444","tags":["report"]},{"url":"https://bugzilla.suse.com/1201445","tags":["report"]},{"url":"https://bugzilla.suse.com/1201447","tags":["report"]},{"url":"https://bugzilla.suse.com/1201448","tags":["report"]},{"url":"https://bugzilla.suse.com/1202035","tags":["report"]},{"url":"https://bugzilla.suse.com/1203185","tags":["report"]},{"url":"https://bugzilla.suse.com/1204023","tags":["report"]},{"url":"https://bugzilla.suse.com/1204024","tags":["report"]},{"url":"https://bugzilla.suse.com/1204025","tags":["report"]},{"url":"https://bugzilla.suse.com/1204941","tags":["report"]},{"url":"https://bugzilla.suse.com/1206134","tags":["report"]},{"url":"https://bugzilla.suse.com/1206135","tags":["report"]},{"url":"https://bugzilla.suse.com/1208270","tags":["report"]},{"url":"https://bugzilla.suse.com/1208271","tags":["report"]},{"url":"https://bugzilla.suse.com/1208272","tags":["report"]},{"url":"https://bugzilla.suse.com/1208491","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41725","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-30629","tags":["report"]},{"url":"https://github.com/golang/go/commit/c838098c327a1b6d63446f4722e943b02d235d78","tags":["report"]},{"url":"https://github.com/golang/go/commit/c15a8e2dbb5ac376a6ed890735341b812d6b965c","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6038-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6038-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30632","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30633","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30635","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24538","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-30629","title":"Session tickets lack random ticket_age_add in crypto/tls","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-09T20:17:31Z","modified":"2026-03-06T19:12:16.725Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"updated_at":"2026-11-02T14:34:31.184134Z"}],"euvd":[{"id":"EUVD-2022-52460","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-09T20:17:31Z","modified":"2026-03-06T19:12:16Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T19:48:07.686491Z"}],"ghsa":[{"id":"GHSA-j55j-52j7-vq87","title":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1...","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-11T00:00:17Z","modified":"2026-03-06T21:30:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T15:06:29.785261Z"}],"nvd":[{"id":"CVE-2022-30629","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-10T20:15:40.56Z","modified":"2026-06-17T04:43:58.573Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:07:24.750124Z"}],"osv":[{"id":"ALPINE-CVE-2022-30629","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-10T20:15:40.56Z","modified":"2026-11-03T07:31:15.677899025Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-10550","title":"CVE-2022-30629 affecting package golang for versions less than 1.18.5-1","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-10T20:15:40Z","modified":"2026-04-21T04:21:08.364129Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"BELL-CVE-2022-30629","title":"CVE-2022-30629 does not affect BellSoft software","status":"withdrawn","published":"2022-08-10T20:15:00Z","modified":"2026-01-26T09:49:37.909842Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-30629","title":"Session tickets lack random ticket_age_add in crypto/tls","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-09T20:17:31Z","modified":"2026-10-28T02:30:54.138849522Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DEBIAN-CVE-2022-30629","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-10T20:15:40.56Z","modified":"2026-08-27T23:04:21.610034712Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:36.969609Z"},{"id":"OESA-2022-1783","title":"golang security update","description":"The Go Programming Language\r\n\r\nSecurity Fix(es):\r\n\r\nWhen httputil.ReverseProxy.ServeHTTP was called with a Request.Header map containing a nil value for the X-Forwarded-For header, ReverseProxy would set the client IP as the value of the X-Forwarded-For header, contrary to its documentation. In the more usual case where a Director function set the X-Forwarded-For header value to nil, ReverseProxy would leave the header unmodified as expected.(CVE-2022-32148)\n\nCalling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.(CVE-2022-30635)\n\nInfinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 \u0026lt;\u0026lt; 32 - 1 bytes. (CVE-2022-30634)\n\nCalling Unmarshal on a XML document into a Go struct which has a nested field that uses the any field tag can cause a panic due to stack exhaustion.(CVE-2022-30633)\n\nCalling Glob on a path which contains a large number of path separators can cause a panic due to stack exhaustion.(CVE-2022-30632)\n\nCalling Reader.Read on an archive containing a large number of concatenated 0-length compressed files can cause a panic due to stack exhaustion.(CVE-2022-30631)\n\nAs required by RFC 8446, section 4.6.1, ticket_age_add now holds arandom 32-bit value. Before this change, this value was always setto 0.(CVE-2022-30629)\n\nCalling Decoder.Skip when parsing a deeply nested XML document can cause a panic due to stack exhaustion.(CVE-2022-28131)\n\nCalling any of the Parse functions on Go source code which contains deeply nested types or declarations can cause a panic due to stack exhaustion.(CVE-2022-1962)\n\nThe HTTP/1 client accepted some invalid Transfer-Encoding headers as indicating a chunked encoding. This could potentially allow for request smuggling, but only if combined with an intermediate server that also improperly failed to reject the header as invalid.(CVE-2022-1705)","status":"published","published":"2022-07-29T11:05:03Z","modified":"2026-08-18T01:16:51.263559868Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:5775","title":"Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update","status":"published","published":"2024-10-21T18:06:39Z","modified":"2026-10-20T10:01:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5799","title":"Red Hat Security Advisory: go-toolset and golang security and bug fix update","status":"published","published":"2024-09-30T14:22:37Z","modified":"2026-10-20T10:01:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5866","title":"Red Hat Security Advisory: go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update","status":"published","published":"2024-09-30T14:22:54Z","modified":"2026-10-20T10:01:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6042","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.24.0","status":"published","published":"2024-09-30T14:23:13Z","modified":"2026-10-20T10:01:26Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6102","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.1 packages and security update","status":"published","published":"2024-09-30T14:24:15Z","modified":"2026-10-15T10:03:00Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6277","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.5 security update","status":"published","published":"2024-09-30T14:24:07Z","modified":"2026-10-15T10:03:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6535","title":"Red Hat Security Advisory: OpenShift Container Platform 4.11.5 packages and security update","status":"published","published":"2024-09-30T14:25:59Z","modified":"2026-10-15T10:03:06Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:0407","title":"Red Hat Security Advisory: OpenShift Virtualization 4.12.0 RPMs security update","status":"published","published":"2024-09-30T14:30:59Z","modified":"2026-10-20T10:01:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1275","title":"Red Hat Security Advisory: Red Hat OpenStack Platform (etcd) security update","status":"published","published":"2024-09-30T14:39:46Z","modified":"2026-10-17T10:01:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2253","title":"Red Hat Security Advisory: buildah security and bug fix update","status":"published","published":"2024-09-30T14:44:39Z","modified":"2026-10-16T10:02:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2282","title":"Red Hat Security Advisory: podman security and bug fix update","status":"published","published":"2024-09-30T14:44:54Z","modified":"2026-10-16T10:02:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2283","title":"Red Hat Security Advisory: skopeo security and bug fix update","status":"published","published":"2024-09-30T14:44:28Z","modified":"2026-10-16T10:02:06Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2367","title":"Red Hat Security Advisory: containernetworking-plugins security and bug fix update","status":"published","published":"2024-09-30T14:45:22Z","modified":"2026-10-16T10:02:07Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2758","title":"Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update","status":"published","published":"2024-10-21T18:20:56Z","modified":"2026-10-20T10:01:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:3914","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise security update","status":"published","published":"2024-09-30T14:48:52Z","modified":"2026-10-16T10:02:26Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2022:5775","title":"Important: go-toolset:rhel8 security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nSecurity Fix(es):\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Clean up dist-git patches (BZ#2110942)\n\n* Update Go to version 1.17.12 (BZ#2110943)","status":"published","published":"2022-08-01T08:57:38Z","modified":"2026-02-04T22:30:05.005771Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:5799","title":"Important: go-toolset and golang security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nThe golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Clean up dist-git patches (BZ#2109174)\n\n* Update Go to version 1.17.12 (BZ#2109183)","status":"published","published":"2022-08-01T15:29:25Z","modified":"2026-02-04T07:40:21.568848Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:2758","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n\n* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)\n\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n\n* podman: symlink exchange attack in podman export volume (CVE-2023-0778)\n\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\n* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","status":"published","published":"2025-11-28T09:04:16.963841Z","modified":"2025-11-28T09:32:47.978607Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-30629","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-08-10T20:15:00Z","modified":"2026-03-09T11:24:00.992418Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2023:2253","title":"Moderate: buildah security and bug fix update","description":"The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. \n\nSecurity Fix(es):\n\n* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:54.55863672Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2282","title":"Moderate: podman security and bug fix update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:53.649608676Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2283","title":"Moderate: skopeo security and bug fix update","description":"The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. \n\nSecurity Fix(es):\n\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:53.400146054Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2367","title":"Moderate: containernetworking-plugins security and bug fix update","description":"The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. \n\nSecurity Fix(es):\n\n* golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:55.942769641Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2758","title":"Moderate: container-tools:rhel8 security, bug fix, and enhancement update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)\n* golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)\n* golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)\n* golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)\n* golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)\n* golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)\n* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)\n* podman: symlink exchange attack in podman export volume (CVE-2023-0778)\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n* golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:01:37.16197587Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-golang-2022-30629","title":"Session tickets lack random ticket_age_add in crypto/tls","description":"Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2024-03-06T11:00:22.416Z","modified":"2026-09-08T08:47:48.419599653Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"GO-2022-0531","title":"Session tickets lack random ticket_age_add in crypto/tls","description":"An attacker can correlate a resumed TLS session with a previous connection.\n\nSession tickets generated by crypto/tls do not contain a randomly generated ticket_age_add, which allows an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.","status":"published","published":"2022-07-28T17:24:57Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.918515Z"},{"id":"MGASA-2022-0231","title":"Updated golang packages fix security vulnerability","description":"crypto/tls: session tickets lack random ticket_age_add. Session tickets\ngenerated by crypto/tls did not contain a randomly generated\nticket_age_add. This allows an attacker that can observe TLS handshakes to\ncorrelate successive connections by comparing ticket ages during session\nresumption. (CVE-2022-30629)\n","status":"published","published":"2022-06-16T21:05:59Z","modified":"2026-04-16T04:43:07.225834425Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12123-1","title":"go1.17-1.17.11-1.1 on GA media","description":"These are all security issues fixed in the go1.17-1.17.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:24:29.10711Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12124-1","title":"go1.18-1.18.3-1.1 on GA media","description":"These are all security issues fixed in the go1.18-1.18.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:21:24.450412Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2004-1","title":"Security update for go1.17","description":"This update for go1.17 fixes the following issues:\n\nUpdate to go1.17.11 (released 2022-06-01) (bsc#1190649):\n\n- CVE-2022-30634: Fixed crypto/rand rand.Read hangs with extremely large buffers (bsc#1200134).\n- CVE-2022-30629: Fixed crypto/tls session tickets lack random ticket_age_add (bsc#1200135).\n- CVE-2022-29804: Fixed path/filepath Clean(`.\\c:`) returns `c:` on Windows (bsc#1200137).\n- CVE-2022-30580: Fixed os/exec empty Cmd.Path can result in running unintended binary on Windows (bsc#1200136).\n","status":"published","published":"2022-06-07T14:34:31Z","modified":"2026-02-04T02:42:05.221104Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2005-1","title":"Security update for go1.18","description":"This update for go1.18 fixes the following issues:\n\nUpdate to go1.18.3 (released 2022-06-01) (bsc#1193742):\n\n- CVE-2022-30634: Fixed crypto/rand rand.Read hangs with extremely large buffers (bsc#1200134).\n- CVE-2022-30629: Fixed crypto/tls session tickets lack random ticket_age_add (bsc#1200135).\n- CVE-2022-29804: Fixed path/filepath Clean(`.\\c:`) returns `c:` on Windows (bsc#1200137).\n- CVE-2022-30580: Fixed os/exec empty Cmd.Path can result in running unintended binary on Windows (bsc#1200136).\n","status":"published","published":"2022-06-07T14:34:56Z","modified":"2026-02-04T02:29:04.305054Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2023:2312-1","title":"Security update for go1.18-openssl","description":"This update for go1.18-openssl fixes the following issues:\n\n- Add subpackage go1.x-libstd compiled shared object libstd.so (jsc#PED-1962)\n  * Main go1.x package included libstd.so in previous versions\n  * Split libstd.so into subpackage that can be installed standalone\n  * Continues the slimming down of main go1.x package by 40 Mb\n  * Experimental and not recommended for general use, Go currently has no ABI\n  * Upstream Go has not committed to support buildmode=shared long-term\n  * Do not use in packaging, build static single binaries (the default)\n  * Upstream Go go1.x binary releases do not include libstd.so\n  * go1.x Suggests go1.x-libstd so not installed by default Recommends\n  * go1.x-libstd does not Require: go1.x so can install standalone\n  * Provides go-libstd unversioned package name\n  * Fix build step -buildmode=shared std to omit -linkshared\n- Packaging improvements:\n  * go1.x Suggests go1.x-doc so not installed by default Recommends\n  * Use Group: Development/Languages/Go instead of Other\n\n- Improvements to go1.x packaging spec:\n  * On Tumbleweed bootstrap with current default gcc13 and gccgo118\n  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap\n    using go1.x package (%bcond_without gccgo). This is no longer\n    needed on current SLE-12:Update and removing will consolidate\n    the build configurations used.\n  * Change source URLs to go.dev as per Go upstream\n  * On x86_64 export GOAMD64=v1 as per the current baseline.\n    At this time forgo GOAMD64=v3 option for x86_64_v3 support.\n  * On x86_64 %define go_amd64=v1 as current instruction baseline\n\n- Update to version 1.18.10.1 cut from the go1.18-openssl-fips\n  branch at the revision tagged go1.18.10-1-openssl-fips.\n  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips\n  * Merge go1.18.10 into dev.boringcrypto.go1.18\n\n- go1.18.10 (released 2023-01-10) includes fixes to cgo, the\n  compiler, the linker, and the crypto/x509, net/http, and syscall\n  packages.\n  Refs bsc#1193742 go1.18 release tracking\n  * go#57705 misc/cgo: backport needed for dlltool fix\n  * go#57426 crypto/x509: Verify on macOS does not return typed errors\n  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its 'old' argument.\n  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices\n  * go#57213 os: TestLstat failure on Linux Aarch64\n  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length\n  * go#57057 cmd/go: remove test dependency on gopkg.in service\n  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders\n  * go#57044 cgo: malformed DWARF TagVariable entry\n  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14\n  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused\n  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target\n  * go#56323 net/http: bad handling of HEAD requests with a body\n","status":"published","published":"2023-05-30T06:54:51Z","modified":"2026-02-04T03:20:56.665396Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6038-1","title":"golang-1.18 vulnerabilities","description":"It was discovered that the Go net/http module incorrectly handled\nTransfer-Encoding headers in the HTTP/1 client. A remote attacker could\npossibly use this issue to perform an HTTP Request Smuggling attack.\n(CVE-2022-1705)\n\nIt was discovered that Go did not properly manage memory under certain\ncircumstances. An attacker could possibly use this issue to cause a panic\nresulting into a denial of service. (CVE-2022-1962, CVE-2022-27664,\nCVE-2022-28131, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632,\nCVE-2022-30633, CVE-2022-30635, CVE-2022-32189, CVE-2022-41715,\nCVE-2022-41717, CVE-2023-24534, CVE-2023-24537)\n\nIt was discovered that Go did not properly implemented the maximum size of\nfile headers in Reader.Read. An attacker could possibly use this issue to\ncause a panic resulting into a denial of service. (CVE-2022-2879)\n\nIt was discovered that the Go net/http module incorrectly handled query\nparameters in requests forwarded by ReverseProxy. A remote attacker could\npossibly use this issue to perform an HTTP Query Parameter Smuggling attack.\n(CVE-2022-2880)\n\nIt was discovered that Go did not properly manage the permissions for\nFaccessat function. A attacker could possibly use this issue to expose\nsensitive information. (CVE-2022-29526)\n\nIt was discovered that Go did not properly generate the values for\nticket_age_add in session tickets. An attacker could possibly use this\nissue to observe TLS handshakes to correlate successive connections by\ncomparing ticket ages during session resumption. (CVE-2022-30629)\n\nIt was discovered that Go did not properly manage client IP addresses in\nnet/http. An attacker could possibly use this issue to cause ReverseProxy\nto set the client IP as the value of the X-Forwarded-For header.\n(CVE-2022-32148)\n\nIt was discovered that Go did not properly validate backticks (`) as\nJavascript string delimiters, and do not escape them as expected. An\nattacker could possibly use this issue to inject arbitrary Javascript code\ninto the Go template. (CVE-2023-24538)\n","status":"published","published":"2023-04-25T10:23:57Z","modified":"2026-04-27T16:47:20.971153217Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6038-2","title":"golang-1.13, golang-1.16 vulnerabilities","description":"USN-6038-1 fixed several vulnerabilities in Go 1.18. This update provides\nthe corresponding updates for Go 1.13 and Go 1.16.\n\nCVE-2022-29526 and CVE-2022-30630 only affected Go 1.16.\n\nOriginal advisory details:\n\n It was discovered that the Go net/http module incorrectly handled\n Transfer-Encoding headers in the HTTP/1 client. A remote attacker could\n possibly use this issue to perform an HTTP Request Smuggling attack.\n (CVE-2022-1705)\n \n It was discovered that Go did not properly manage memory under certain\n circumstances. An attacker could possibly use this issue to cause a panic\n resulting into a denial of service. (CVE-2022-1962, CVE-2022-27664,\n CVE-2022-28131, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632,\n CVE-2022-30633, CVE-2022-30635, CVE-2022-32189, CVE-2022-41715,\n CVE-2022-41717, CVE-2023-24534, CVE-2023-24537)\n \n It was discovered that Go did not properly implemented the maximum size of\n file headers in Reader.Read. An attacker could possibly use this issue to\n cause a panic resulting into a denial of service. (CVE-2022-2879)\n \n It was discovered that the Go net/http module incorrectly handled query\n parameters in requests forwarded by ReverseProxy. A remote attacker could\n possibly use this issue to perform an HTTP Query Parameter Smuggling attack.\n (CVE-2022-2880)\n \n It was discovered that Go did not properly manage the permissions for\n Faccessat function. A attacker could possibly use this issue to expose\n sensitive information. (CVE-2022-29526)\n \n It was discovered that Go did not properly generate the values for\n ticket_age_add in session tickets. An attacker could possibly use this\n issue to observe TLS handshakes to correlate successive connections by\n comparing ticket ages during session resumption. (CVE-2022-30629)\n \n It was discovered that Go did not properly manage client IP addresses in\n net/http. An attacker could possibly use this issue to cause ReverseProxy\n to set the client IP as the value of the X-Forwarded-For header.\n (CVE-2022-32148)\n \n It was discovered that Go did not properly validate backticks (`) as\n Javascript string delimiters, and do not escape them as expected. An\n attacker could possibly use this issue to inject arbitrary Javascript code\n into the Go template. (CVE-2023-24538)\n","status":"published","published":"2024-01-09T13:08:13Z","modified":"2026-06-25T13:32:00.500319928Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}