{"id":"CVE-2022-41725","aliases":["ALPINE-CVE-2022-41725","ALSA-2023:3083","ALSA-2023:6346","ALSA-2023:6363","ALSA-2023:6402","ALSA-2023:6473","ALSA-2023:6474","ALSA-2023:6938","ALSA-2023:6939","AZL-13732","AZL-13739","AZL-34761","AZL-37334","AZL-37487","AZL-78992","AZL-98943","BELL-CVE-2022-41725","BIT-golang-2022-41725","CLSA-2025-1762538558","DEBIAN-CVE-2022-41725","EUVD-2022-44897","GHSA-w4h2-22wh-m6jx","GO-2023-1569","MGASA-2023-0109","OESA-2023-1192","RHBA-2023:2181","RHSA-2023:1325","RHSA-2023:3083","RHSA-2023:3445","RHSA-2023:3450","RHSA-2023:3612","RHSA-2023:4003","RHSA-2023:4470","RHSA-2023:5964","RHSA-2023:6346","RHSA-2023:6363","RHSA-2023:6402","RHSA-2023:6473","RHSA-2023:6474","RHSA-2023:6938","RHSA-2023:6939","RHSA-2023:7672","RLSA-2023:3083","RLSA-2023:6938","RLSA-2023:6939","SUSE-SU-2023:0733-1","SUSE-SU-2023:0735-1","SUSE-SU-2023:0869-1","SUSE-SU-2023:0871-1","SUSE-SU-2023:2312-1","UBUNTU-CVE-2022-41725","USN-7109-1","USN-7111-1","openSUSE-SU-2024:12707-1","openSUSE-SU-2024:12708-1","openSUSE-SU-2024:12798-1"],"status":"published","title":"Excessive resource consumption in mime/multipart","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01241,"percentile":0.6939,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-770"],"published":"2023-02-21T20:44:30Z","modified":"2026-11-03T08:04:10Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"go","fixed_in":["1.19.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"go","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"go","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"go","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"go","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"go","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"go","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"go","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"golang","fixed_in":["1.19.5-1","1.21.6-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"msft-golang","fixed_in":["1.19.6-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"golang","fixed_in":["1.19.5-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.19.6","1.20.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"golang-1.19","fixed_in":["1.19.6-2"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.19.6","1.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1~16.04.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1~18.04.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1~20.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.17","fixed_in":["1.17.13-3ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","fixed_in":["1.18.1-1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-1.module_el8.8.0+3471+a62632a0"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.module_el8.8.0+3558+75c9cb88"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-6.el9_3"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-6.el9_3"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"46-1.module_el8.7.0+3344+5bcd850f"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.module_el8.8.0+3468+16b86c82"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-4.module_el8.9.0+3627+db8ec155"}]}],"bundled":17},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module_el8.9.0+3657+d86e192f"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"75-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.221.0-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-54.module_el8.9.0+3673+0c64b403"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.8.0+3615+3543c705"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.8.0+3615+3543c705"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-4.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3643+9234dc3b"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-20.module_el8.8.0+3615+3543c705"}]}],"bundled":18},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.19.5-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"msft-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.5-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.21.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.25.7-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.19.6"},{"introduced":"1.20.0"},{"fixed":"1.20.1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.el9.tuxcare.els2"}]}],"bundled":13},{"source":"osv","ecosystem":"Debian:12","package":"golang-1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-2"}]}]},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.19.6"},{"introduced":"1.20.0-0"},{"fixed":"1.20.1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-24.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-24.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-15.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.3-15.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-2.el9_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-2.el9_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-2.el9_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-2.el9_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-2.el9_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-2.el9_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-2.el9_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202304211155.p0.gb404935.assembly.stream.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202304211155.p0.gb404935.assembly.stream.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-3.rhaos4.13.git641290e.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-3.rhaos4.13.git641290e.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-3.rhaos4.13.git641290e.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"haproxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"haproxy22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"haproxy22-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-3.rhaos4.13.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.el8ost"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.el8ost"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-4.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:openshift_ironic:4.13::el9","package":"python3-werkzeug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-4.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.1-1.module+el8.8.0+16778+5fbb74f5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.1-1.module+el8.8.0+16778+5fbb74f5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"delve-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.1-1.module+el8.8.0+16778+5fbb74f5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+18289+edd6c8b6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-14.el8ost"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-14.el8ost"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"etcd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.23-14.el8ost"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-3.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-5.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.7-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.7-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.7-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-7.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-7.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-7.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-9.rhaos4.13.git994242a.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-9.rhaos4.13.git994242a.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-9.rhaos4.13.git994242a.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202306072143.p0.g7d22122.assembly.stream.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202306072143.p0.g7d22122.assembly.stream.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.6-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.6-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.6-4.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-2.rhaos4.13.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.7-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.7-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.7-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-10.rhaos4.13.git994242a.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-10.rhaos4.13.git994242a.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3-10.rhaos4.13.git994242a.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-64k-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debug-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debug-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-rt-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.rt14.303.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-uki-virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-devel-matched","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"kernel-zfcpdump-modules-partner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202306072143.p0.g7d22122.assembly.stream.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.0-202306072143.p0.g7d22122.assembly.stream.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"rtla","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.14.0-284.18.1.el9_2"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openshift:4.13::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-2.1.rhaos4.13.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el8","package":"skupper-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-2.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el9","package":"skupper-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-2.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el8","package":"skupper-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el8","package":"skupper-router-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el8","package":"skupper-router-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el8","package":"skupper-router-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el8","package":"skupper-router-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el8","package":"skupper-router-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el9","package":"skupper-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el9","package":"skupper-router-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el9","package":"skupper-router-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el9","package":"skupper-router-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el9","package":"skupper-router-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:service_interconnect:1::el9","package":"skupper-router-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-2.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:ansible_automation_platform:2.3::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202307200611.p0.g49844f7.assembly.stream.el8"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"collectd-libpod-stats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-5.el8ost"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-6.el9_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-6.el9_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-6.el9_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-6.el9_3"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.el9"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.el9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.6.1-5.el9"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+19784+443be299"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+19243+df4d9ff2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-8.module+el8.9.0+19104+fcef53a3"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19656+a0b7daeb"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-4.module+el8.9.0+19098+6e7a5e3f"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.31.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.8-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.221.0-1.module+el8.9.0+19685+019f3589"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module+el8.9.0+19649+5879504a"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module+el8.9.0+19649+5879504a"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.0-4.module+el8.9.0+19649+5879504a"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-54.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.7.0-1.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-1.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.6.1-4.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-1.module+el8.9.0+19513+83322573"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+19090+d2921118"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.0-1.module+el8.9.0+19513+83322573"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.9-1.module+el8.9.0+19648+0d5ae0ec"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.13.3-1.module+el8.9.0+19761+326da906"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.module+el8.9.0+19731+94cfa27e"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+19655+b08391f8"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-20.module+el8.9.0+19244+655f84ee"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.14::el8","package":"kubevirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.1-2150.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.14::el8","package":"kubevirt-virtctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.1-2150.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:container_native_virtualization:4.14::el8","package":"kubevirt-virtctl-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.1-2150.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"delve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.1-1.module+el8.8.0+1263+19d1a562"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+1263+19d1a562"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"go-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.6-1.module+el8.8.0+1263+19d1a562"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-5.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-24.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.5-2.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-4.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.7-150000.1.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-150000.1.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-150000.1.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-150000.1.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP4","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"container-suseconnect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-150000.4.24.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"go1.18-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10.1-150000.1.9.1"}]}],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~16.04.6+esm1"}]}],"versions":["1.18.1-1ubuntu1~16.04.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-2ubuntu1~16.04.1","1.10.4-2ubuntu1~16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6-0ubuntu1","1.6-0ubuntu2","1.6-0ubuntu3","1.6-0ubuntu4","1.6-0ubuntu5","1.6.1-0ubuntu1","1.6.2-0ubuntu5~16.04","1.6.2-0ubuntu5~16.04.2","1.6.2-0ubuntu5~16.04.3","1.6.2-0ubuntu5~16.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~16.04.2","1.13.8-1ubuntu1~16.04.3","1.13.8-1ubuntu1~16.04.3+esm2","1.13.8-1ubuntu1~16.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10~rc1-1","1.10~rc1-1ubuntu1","1.10~rc1-2ubuntu1","1.10~rc2-1ubuntu1","1.10-1ubuntu1","1.10.1-1ubuntu2","1.10.4-2ubuntu1~18.04.1","1.10.4-2ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu1~18.04.2","1.13.8-1ubuntu1~18.04.3","1.13.8-1ubuntu1~18.04.4","1.13.8-1ubuntu1~18.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-0ubuntu1~18.04.2","1.16.2-0ubuntu1~18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~18.04.4+esm1"}]}],"versions":["1.18.1-1ubuntu1~18.04.3","1.18.1-1ubuntu1~18.04.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-2ubuntu1","1.8.3-2ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-1.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1-2ubuntu1","1.9.2-1ubuntu1","1.9.2-3ubuntu1","1.9.3-1ubuntu1","1.9.4-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~20.04.3"}]}],"versions":["1.18.1-1ubuntu1~20.04.1","1.18.1-1ubuntu1~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.1-1ubuntu1","1.13.3-1ubuntu1","1.13.4-1ubuntu1","1.13.5-1ubuntu1","1.13.6-1ubuntu1","1.13.6-2ubuntu1","1.13.7-1ubuntu1","1.13.8-1ubuntu1","1.13.8-1ubuntu1.1","1.13.8-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.14~beta1-1","1.14~beta1-2","1.14~rc1-1","1.14-1","1.14.1-1","1.14.2-1","1.14.2-1ubuntu1","1.14.3-2ubuntu2~20.04.1","1.14.3-2ubuntu2~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"golang-1.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.2-0ubuntu1~20.04","1.16.2-0ubuntu1~20.04.1","1.16.2-0ubuntu1~20.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-3ubuntu1.3"}]}],"versions":["1.17-1ubuntu2","1.17.3-1ubuntu1","1.17.3-1ubuntu2","1.17.13-3ubuntu1","1.17.13-3ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1.2"}]}],"versions":["1.18~beta1-0ubuntu1","1.18~beta2-1ubuntu1","1.18~beta2-1ubuntu2","1.18~rc1-1ubuntu1","1.18-1ubuntu1","1.18.1-1ubuntu1","1.18.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-1.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.8-1ubuntu2","1.13.8-1ubuntu2.22.04.1","1.13.8-1ubuntu2.22.04.1+esm1","1.13.8-1ubuntu2.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~16.04.6+esm1"}]}],"versions":["1.18.1-1ubuntu1~16.04.6"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~18.04.4+esm1"}]}],"versions":["1.18.1-1ubuntu1~18.04.3","1.18.1-1ubuntu1~18.04.4"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1~20.04.3"}]}],"versions":["1.18.1-1ubuntu1~20.04.1","1.18.1-1ubuntu1~20.04.2"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu1.2"}]}],"versions":["1.18~beta1-0ubuntu1","1.18~beta2-1ubuntu1","1.18~beta2-1ubuntu2","1.18~rc1-1ubuntu1","1.18-1ubuntu1","1.18.1-1ubuntu1","1.18.1-1ubuntu1.1"],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.13-3ubuntu1.3"}]}],"versions":["1.17-1ubuntu2","1.17.3-1ubuntu1","1.17.3-1ubuntu2","1.17.13-3ubuntu1","1.17.13-3ubuntu1.2"],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.6-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.10-1.1"}]}],"bundled":3}],"products":[{"vendor":"go standard library","product":"mime/multipart"},{"vendor":"golang","product":"go"}],"references":[{"url":"https://go.dev/issue/58006","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory","advisory","web","report","article"]},{"url":"https://go.dev/cl/468124","tags":["x_transferred","Patch","Release Notes","fix","web","article"]},{"url":"https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","tags":["x_transferred","Mailing List","Vendor Advisory","advisory","web","article","report"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1569","tags":["x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202311-09","tags":["x_transferred","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41725","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-w4h2-22wh-m6jx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-41725","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3083","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41724","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41725","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178488","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178492","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-3083.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6346","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3064","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41723","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24534","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24536","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24538","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24539","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24540","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29400","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29406","tags":["report"]},{"url":"https://bugzilla.redhat.com/2163037","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178358","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184481","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184482","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184483","tags":["report"]},{"url":"https://bugzilla.redhat.com/2196026","tags":["report"]},{"url":"https://bugzilla.redhat.com/2196027","tags":["report"]},{"url":"https://bugzilla.redhat.com/2196029","tags":["report"]},{"url":"https://bugzilla.redhat.com/2222167","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6346.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6363","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24537","tags":["report"]},{"url":"https://bugzilla.redhat.com/2184484","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6363.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6402","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6402.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6473","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25173","tags":["report"]},{"url":"https://bugzilla.redhat.com/2174485","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6473.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6474","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3978","tags":["report"]},{"url":"https://bugzilla.redhat.com/2228689","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6474.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6938","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25809","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27561","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28642","tags":["report"]},{"url":"https://bugzilla.redhat.com/2165743","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175721","tags":["report"]},{"url":"https://bugzilla.redhat.com/2182883","tags":["report"]},{"url":"https://bugzilla.redhat.com/2182884","tags":["report"]},{"url":"https://bugzilla.redhat.com/2231464","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6938.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6939","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6939.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-41725","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762538558.html","tags":["advisory"]},{"url":"https://pkg.go.dev","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41725.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-41725","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0109.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31575","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JRXUC3OICW2AVH5PMURCX4EAOCITSPPU/","tags":["web"]},{"url":"https://groups.google.com/g/golang-announce/c/3-TpUx48iQY","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-March/014037.html","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-March/014038.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41724","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2023:2181","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157587","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_2181.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41723","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vvpx-j8f3-3w6h","tags":["advisory"]},{"url":"https://go.dev/cl/468135","tags":["article"]},{"url":"https://go.dev/cl/468295","tags":["article"]},{"url":"https://go.dev/issue/57855","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1571","tags":["advisory"]},{"url":"https://vuln.go.dev/ID/GO-2023-1571.json","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41724","tags":["advisory"]},{"url":"https://go.dev/cl/468125","tags":["article"]},{"url":"https://go.dev/issue/58001","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1570","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41725","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1325","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.openshift.com/container-platform/4.13/release_notes/ocp-4-13-release-notes.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170242","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1325.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2990","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2990","tags":["advisory"]},{"url":"https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3259","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064702","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27191","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41717","tags":["advisory"]},{"url":"https://go.dev/cl/455635","tags":["article"]},{"url":"https://go.dev/cl/455717","tags":["article"]},{"url":"https://go.dev/issue/56350","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-1144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203008","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41722","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41722","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0056","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0056","tags":["advisory"]},{"url":"https://github.com/haproxy/haproxy/issues/1972","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0229","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0229","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5465-xc2j-6p84","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0778","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qwqv-rqgf-8qh8","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25577","tags":["advisory"]},{"url":"https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/releases/tag/2.2.3","tags":["article"]},{"url":"https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25725","tags":["advisory"]},{"url":"https://www.haproxy.com/blog/february-2023-header-parser-fixed/","tags":["article"]},{"url":"https://www.mail-archive.com/haproxy@formilux.org/msg43229.html","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167412","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3083.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3445","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196029","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3445.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28235","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28235","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24534","tags":["advisory"]},{"url":"https://go.dev/issue/58975","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24536","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24536","tags":["advisory"]},{"url":"https://go.dev/issue/59153","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24537","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/59180","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24538","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24538","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/59234","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24539","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/59720","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24540","tags":["advisory"]},{"url":"https://go.dev/issue/59721","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29400","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29400","tags":["advisory"]},{"url":"https://go.dev/issue/59722","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3450","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.11/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.12/html/serverless/index","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/openshift_container_platform/4.13/html/serverless/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185511","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3450.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25173","tags":["advisory"]},{"url":"https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a","tags":["article"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.5.18","tags":["article"]},{"url":"https://github.com/containerd/containerd/releases/tag/v1.6.18","tags":["article"]},{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3612","tags":["advisory"]},{"url":"https://access.redhat.com/articles/11258","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175721","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3612.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27561","tags":["advisory"]},{"url":"https://gist.github.com/LiveOverflow/c937820b688922eb127fb760ce06dab9","tags":["article"]},{"url":"https://github.com/opencontainers/runc/issues/2197#issuecomment-1437617334","tags":["article"]},{"url":"https://github.com/opencontainers/runc/issues/3751","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4003","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_service_interconnect","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132872","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4003.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2879","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/54853","tags":["article"]},{"url":"https://github.com/vbatts/tar-split/releases/tag/v0.12.1","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2880","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/54663","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28327","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/oecdBNLOml8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41715","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/55949","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4470","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4470.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5964","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5964.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29409","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29409","tags":["advisory"]},{"url":"https://go.dev/cl/515257","tags":["article"]},{"url":"https://go.dev/issue/61460","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1987","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","tags":["report"]},{"url":"https://go.dev/issue/63417","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","tags":["advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-44487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/277","tags":["article"]},{"url":"https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222789","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6346.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3064","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6q6q-88xp-6f2r","tags":["advisory"]},{"url":"https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5","tags":["article"]},{"url":"https://github.com/go-yaml/yaml/releases/tag/v2.2.4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2022-0956","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29406","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/2q13H6LEEx0","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6363.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212143","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6402.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6473.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2177611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233222","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-3132","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3133","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6474.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3978","tags":["advisory"]},{"url":"https://go.dev/cl/514896","tags":["article"]},{"url":"https://go.dev/issue/61615","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1988","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231464","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6938.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25809","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25809","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/commit/0d62b950e60f6980b54fe3bafd9a9c608dc1df17","tags":["article"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28642","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g2j6-57v7-gm8c","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233218","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-3126","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3149","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6939.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7672","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251685","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7672.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:3083","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6938","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6939","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230733-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200441","tags":["report"]},{"url":"https://bugzilla.suse.com/1208269","tags":["report"]},{"url":"https://bugzilla.suse.com/1208270","tags":["report"]},{"url":"https://bugzilla.suse.com/1208271","tags":["report"]},{"url":"https://bugzilla.suse.com/1208272","tags":["report"]},{"url":"https://bugzilla.suse.com/1209030","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-24532","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230735-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206346","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230869-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1208491","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230871-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206134","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41720","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232312-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183043","tags":["report"]},{"url":"https://bugzilla.suse.com/1193742","tags":["report"]},{"url":"https://bugzilla.suse.com/1198423","tags":["report"]},{"url":"https://bugzilla.suse.com/1198424","tags":["report"]},{"url":"https://bugzilla.suse.com/1198427","tags":["report"]},{"url":"https://bugzilla.suse.com/1199413","tags":["report"]},{"url":"https://bugzilla.suse.com/1200134","tags":["report"]},{"url":"https://bugzilla.suse.com/1200135","tags":["report"]},{"url":"https://bugzilla.suse.com/1200136","tags":["report"]},{"url":"https://bugzilla.suse.com/1200137","tags":["report"]},{"url":"https://bugzilla.suse.com/1201434","tags":["report"]},{"url":"https://bugzilla.suse.com/1201436","tags":["report"]},{"url":"https://bugzilla.suse.com/1201437","tags":["report"]},{"url":"https://bugzilla.suse.com/1201440","tags":["report"]},{"url":"https://bugzilla.suse.com/1201443","tags":["report"]},{"url":"https://bugzilla.suse.com/1201444","tags":["report"]},{"url":"https://bugzilla.suse.com/1201445","tags":["report"]},{"url":"https://bugzilla.suse.com/1201447","tags":["report"]},{"url":"https://bugzilla.suse.com/1201448","tags":["report"]},{"url":"https://bugzilla.suse.com/1202035","tags":["report"]},{"url":"https://bugzilla.suse.com/1203185","tags":["report"]},{"url":"https://bugzilla.suse.com/1204023","tags":["report"]},{"url":"https://bugzilla.suse.com/1204024","tags":["report"]},{"url":"https://bugzilla.suse.com/1204025","tags":["report"]},{"url":"https://bugzilla.suse.com/1204941","tags":["report"]},{"url":"https://bugzilla.suse.com/1206135","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41717","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-41725","tags":["report"]},{"url":"https://github.com/golang/go/commit/5c55ac9bf1e5f779220294c843526536605f42ab","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6140-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7109-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7111-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-41723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-24536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-29402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-29403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-29404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-29405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-29406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-39325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-24783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-24784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-24785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-24789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-24790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-24791","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34158","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-41725","title":"Excessive resource consumption in mime/multipart","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T17:19:42.989Z","modified":"2025-03-07T17:58:06.747Z","updated_at":"2026-11-02T14:34:28.038197Z"}],"euvd":[{"id":"EUVD-2022-44897","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T17:19:42Z","modified":"2025-03-07T17:58:06Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"none"}],"updated_at":"2026-11-02T20:53:10.661676Z"}],"ghsa":[{"id":"GHSA-w4h2-22wh-m6jx","title":"A denial of service is possible from excessive resource consumption in net/http and mime...","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:30:17Z","modified":"2023-11-25T12:30:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-770"],"updated_at":"2026-11-02T14:55:06.358976Z"}],"nvd":[{"id":"CVE-2022-41725","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10.12Z","modified":"2026-06-17T05:03:43.243Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:07:36.601381Z"}],"osv":[{"id":"ALPINE-CVE-2022-41725","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10.12Z","modified":"2026-11-03T07:31:26.091745909Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-13732","title":"CVE-2022-41725 affecting package golang for versions less than 1.19.5-1","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-04-21T04:22:58.094183Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-13739","title":"CVE-2022-41725 affecting package msft-golang for versions less than 1.19.6-1","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-04-21T04:22:59.607232Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-34761","title":"CVE-2022-41725 affecting package golang for versions less than 1.19.5-1","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-04-21T04:47:12.660743Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-37334","title":"CVE-2022-41725 affecting package golang for versions less than 1.21.6-1","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-04-21T04:28:16.046094Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-37487","title":"CVE-2022-41725 affecting package golang for versions less than 1.21.6-1","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-04-21T04:28:21.823375Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-78992","title":"CVE-2022-41725 affecting package golang 1.25.7-1","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-04-21T04:34:33.789435Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:10.017343Z"},{"id":"AZL-98943","title":"CVE-2022-41725 affecting package golang 1.27.1-1","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-09-16T06:39:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2022-41725","title":"CVE-2022-41725 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:54.113807Z","modified":"2026-01-26T09:46:26.770449Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-41725","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:10.12Z","modified":"2026-11-03T08:04:10.248825916Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"OESA-2023-1192","title":"golang security update","description":"The Go Programming Language.\r\n\r\n\r\n\r\nSecurity Fix(es):\r\n\r\nA maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)\r\n\r\nLarge handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth \u0026gt;= RequestClientCert).(CVE-2022-41724)\r\n\r\nA denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \u0026quot;up to maxMemory bytes +10MB (reserved for non-file parts) in memory\u0026quot;. File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type\u0026apos;s documentation states, \u0026quot;If stored on disk, the File\u0026apos;s underlying concrete type will be an *os.File.\u0026quot;. This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.(CVE-2022-41725)","status":"published","published":"2023-03-31T11:05:40Z","modified":"2026-08-18T01:17:38.784397316Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHBA-2023:2181","title":"Red Hat Bug Fix Advisory: delve, golang, and go-toolset bug fix and enhancement update","status":"published","published":"2024-10-02T00:14:10Z","modified":"2026-10-20T10:01:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2023:1325","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update","status":"published","published":"2024-10-02T00:13:13Z","modified":"2026-10-20T10:01:39Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:3083","title":"Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update","status":"published","published":"2024-10-21T18:21:41Z","modified":"2026-10-20T10:01:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:3445","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update","status":"published","published":"2024-10-02T00:15:13Z","modified":"2026-10-20T10:01:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:3450","title":"Red Hat Security Advisory: OpenShift Serverless Client kn 1.29.0 release","status":"published","published":"2024-10-02T00:14:52Z","modified":"2026-10-20T10:01:44Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:3612","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.4 packages and security update","status":"published","published":"2024-10-02T00:16:07Z","modified":"2026-10-20T10:01:44Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4003","title":"Red Hat Security Advisory: Red Hat Service Interconnect 1.4 Release security update","status":"published","published":"2024-10-02T00:15:19Z","modified":"2026-10-20T10:01:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4470","title":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update","status":"published","published":"2024-09-30T14:49:35Z","modified":"2026-10-16T10:02:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:5964","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update","status":"published","published":"2024-10-02T11:25:15Z","modified":"2026-10-20T10:01:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6346","title":"Red Hat Security Advisory: toolbox security and bug fix update","status":"published","published":"2024-10-02T00:18:14Z","modified":"2026-10-20T10:02:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6363","title":"Red Hat Security Advisory: skopeo security update","status":"published","published":"2024-10-02T00:17:54Z","modified":"2026-10-20T10:02:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6402","title":"Red Hat Security Advisory: containernetworking-plugins security and bug fix update","status":"published","published":"2024-10-02T00:18:04Z","modified":"2026-10-20T10:02:11Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6473","title":"Red Hat Security Advisory: buildah security update","status":"published","published":"2024-10-02T00:18:35Z","modified":"2026-10-20T10:02:11Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6474","title":"Red Hat Security Advisory: podman security, bug fix, and enhancement update","status":"published","published":"2024-10-02T00:18:24Z","modified":"2026-10-20T10:02:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6938","title":"Red Hat Security Advisory: container-tools:4.0 security and bug fix update","status":"published","published":"2024-10-21T18:35:42Z","modified":"2026-10-20T10:02:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6939","title":"Red Hat Security Advisory: container-tools:rhel8 security and bug fix update","status":"published","published":"2024-10-21T18:35:29Z","modified":"2026-10-20T10:02:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7672","title":"Red Hat Security Advisory: OpenShift Virtualization 4.14.1 RPMs security and bug fix update","status":"published","published":"2024-09-30T15:01:01Z","modified":"2026-10-16T10:03:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2023:6938","title":"Moderate: container-tools:4.0 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","status":"published","published":"2025-11-28T09:04:16.963841Z","modified":"2025-11-28T09:32:49.110886Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2023:6939","title":"Moderate: container-tools:rhel8 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n\n* containerd: Supplementary groups are not set up properly (CVE-2023-25173)\n\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.","status":"published","published":"2025-11-28T09:04:16.963841Z","modified":"2025-11-28T09:32:49.584987Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-41725","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T18:15:00Z","modified":"2026-05-20T16:08:16.64470921Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"ALSA-2023:3083","title":"Moderate: go-toolset:rhel8 security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nSecurity Fix(es):\n\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Backport fix for https://github.com/golang/go/issues/56891 (BZ#2167412)\n* Update Go to 1.19.6 (BZ#2174430)","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:15.233948065Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6346","title":"Moderate: toolbox security and bug fix update","description":"Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:30:57.902335062Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6363","title":"Moderate: skopeo security update","description":"The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. \n\nSecurity Fix(es):\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:30:09.061190242Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6402","title":"Moderate: containernetworking-plugins security and bug fix update","description":"The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. \n\nSecurity Fix(es):\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:33.475623297Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6473","title":"Moderate: buildah security update","description":"The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. \n\nSecurity Fix(es):\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* containerd: Supplementary groups are not set up properly (CVE-2023-25173)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:33.925276281Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6474","title":"Moderate: podman security, bug fix, and enhancement update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* containerd: Supplementary groups are not set up properly (CVE-2023-25173)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-10-29T11:31:32.066826293Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6938","title":"Moderate: container-tools:4.0 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:20.013744235Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:6939","title":"Moderate: container-tools:rhel8 security and bug fix update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)\n* golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)\n* net/http, golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding (CVE-2022-41723)\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n* golang.org/x/net/html: Cross site scripting (CVE-2023-3978)\n* golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)\n* golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption (CVE-2023-24536)\n* golang: go/parser: Infinite loop in parsing (CVE-2023-24537)\n* golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)\n* golang: html/template: improper sanitization of CSS values (CVE-2023-24539)\n* containerd: Supplementary groups are not set up properly (CVE-2023-25173)\n* runc: Rootless runc makes `/sys/fs/cgroup` writable (CVE-2023-25809)\n* runc: volume mount race condition (regression of CVE-2019-19921) (CVE-2023-27561)\n* runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration (CVE-2023-28642)\n* golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)\n* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:20.02956464Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"BIT-golang-2022-41725","title":"Excessive resource consumption in mime/multipart","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2024-03-06T10:57:26.992Z","modified":"2026-09-08T08:47:49.011183265Z","updated_at":"2026-11-02T15:28:30.70064Z"},{"id":"CLSA-2025-1762538558","title":"containernetworking-plugins: Fix of 13 CVEs","description":"- rebuild with newer golang to fix multiple security vulnerabilities:\n- CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service\n- CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service\n- CVE-2022-41725: fix HTTP/2 server connection handling causing premature closure\n- CVE-2022-41724: fix HTTP/2 server connection misuse causing resource exhaustion\n- CVE-2023-24538: fix HTTP/2 request handling causing denial of service\n- CVE-2023-39322: fix HTTP/2 connection resource exhaustion and denial of service\n- CVE-2023-24539: fix HTTP/2 request handling causing excessive memory consumption\n- CVE-2023-39321: fix HTTP/2 frame processing causing panic and denial of service\n- CVE-2024-24788: fix HTTP/2 connection handling causing denial of service\n- CVE-2022-41723: fix HTTP/2 server connection handling causing resource exhaustion\n- CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability\n- CVE-2024-34156: fix HTTP/2 connection resource exhaustion and denial of service\n- CVE-2023-24536: fix HTTP/2 request handling causing denial of service","status":"published","published":"2026-05-13T10:06:56Z","modified":"2026-10-21T10:45:40.349202819Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CVE-2022-41725","title":"Excessive resource consumption in mime/multipart","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-28T17:19:42.989Z","modified":"2026-10-28T02:31:01.333947987Z","updated_at":"2026-11-02T15:44:26.860704Z"},{"id":"GO-2023-1569","title":"Excessive resource consumption in mime/multipart","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart.\n\nMultipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue.\n\nReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files.\n\nWith fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous.\n\nIn addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct.\n\nUsers should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader.","status":"published","published":"2023-02-21T20:44:30Z","modified":"2026-02-04T03:22:48.161542Z","updated_at":"2026-11-02T15:47:01.185262Z"},{"id":"MGASA-2023-0109","title":"Updated golang packages fix security vulnerability","description":"A maliciously crafted HTTP/2 stream could cause excessive CPU consumption\nin the HPACK decoder, sufficient to cause a denial of service from a small\nnumber of small requests. (CVE-2022-41723)\nLarge handshake records may cause panics in crypto/tls. (CVE-2022-41724)\nDenial of service from excessive resource consumption in net/http and\nmime/multipart. (CVE-2022-41725)\nThe ScalarMult and ScalarBaseMult methods of the P256 Curve may return an\nincorrect result if called with some specific unreduced scalars\n(CVE-2023-24532)\n","status":"published","published":"2023-03-24T05:55:49Z","modified":"2026-04-16T04:41:48.608452667Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12707-1","title":"go1.19-1.19.6-1.1 on GA media","description":"These are all security issues fixed in the go1.19-1.19.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:31:16.821115Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12708-1","title":"go1.20-1.20.1-1.1 on GA media","description":"These are all security issues fixed in the go1.20-1.20.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:41.880384Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12798-1","title":"go1.18-1.18.10-1.1 on GA media","description":"These are all security issues fixed in the go1.18-1.18.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:30:10.435116Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"RLSA-2023:3083","title":"Moderate: go-toolset:Rocky Linux8 security and bug fix update","description":"Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. \n\nSecurity Fix(es):\n\n* golang: crypto/tls: large handshake records may cause panics (CVE-2022-41724)\n\n* golang: net/http, mime/multipart: denial of service from excessive resource consumption (CVE-2022-41725)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Backport fix for https://github.com/golang/go/issues/56891 (BZ#2167412)\n\n* Update Go to 1.19.6 (BZ#2174430)","status":"published","published":"2023-05-18T19:17:56.497129Z","modified":"2026-02-05T02:30:09.586897Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:0733-1","title":"Security update for go1.19","description":"This update for go1.19 fixes the following issues:\n\n- CVE-2022-41722: Fixed path traversal in filepath.Clean on Windows (bsc#1208269).\n- CVE-2022-41723: Fixed quadratic complexity in HPACK decoding (bsc#1208270).\n- CVE-2022-41724: Fixed panic with arge handshake records in crypto/tls (bsc#1208271).\n- CVE-2022-41725: Fixed denial of service from excessive resource consumption in net/http and mime/multipart (bsc#1208272).\n- CVE-2023-24532: Fixed incorrect P-256 ScalarMult and ScalarBaseMult results (bsc#1209030).\n\nUpdate to go1.19.7  \n* go#58441 runtime: some linkname signatures do not match\n* go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'\n* go#58535 runtime: long latency of sweep assists\n* go#58716 net: TestTCPSelfConnect failures due to unexpected connections\n* go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows\n* go#58810 crypto/x509: TestSystemVerify consistently failing\n\n\nUpdate to go1.19.6:\n* go#56154 net/http: bad handling of HEAD requests with a body\n* go#57635 crypto/x509: TestBoringAllowCert failures\n* go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396\n* go#58118 time: update zoneinfo_abbrs on Windows\n* go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections\n* go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing\n\nUpdate to go1.19.5 (bsc#1200441):\n* go#57706 Misc/cgo: backport needed for dlltool fix\n* go#57556 crypto/x509: re-allow duplicate attributes in CSRs\n* go#57444 cmd/link: need to handle new-style LoongArch relocs\n* go#57427 crypto/x509: Verify on macOS does not return typed errors\n* go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its 'old' argument.\n* go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices\n* go#57214 os: TestLstat failure on Linux Aarch64\n* go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length\n* go#57124 sync/atomic: allow linked lists of atomic.Pointer\n* go#57100 cmd/compile: non-retpoline-compatible errors\n* go#57058 cmd/go: remove test dependency on gopkg.in service\n* go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders\n* go#56983 runtime: failure in TestRaiseException on windows-amd64-2012\n* go#56834 cmd/link/internal/ppc64: too-far trampoline is reused\n* go#56770 cmd/compile: walkConvInterface produces broken IR\n* go#56744 cmd/compile: internal compiler error: missing typecheck\n* go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target\n* go#56154 net/http: bad handling of HEAD requests with a body\n","status":"published","published":"2023-03-14T17:07:14Z","modified":"2026-02-04T03:53:20.061871Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:0735-1","title":"Security update for go1.20","description":"This update for go1.20 fixes the following issues:\n\n- Improvements to go1.x packaging spec:\n\n  * On Tumbleweed bootstrap with current default gcc13 and gccgo118\n  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap\n    using go1.x package (%bcond_without gccgo). This is no longer\n    needed on current SLE-12:Update and removing will consolidate\n    the build configurations used.\n  * Change source URLs to go.dev as per Go upstream\n  * On x86_64 export GOAMD64=v1 as per the current baseline.\n    At this time forgo GOAMD64=v3 option for x86_64_v3 support.\n  * On x86_64 %define go_amd64=v1 as current instruction baseline\n  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to\n    grep correct TSAN version is checked out from LLVM with new\n    spelling for internal/amd64v1/race_linux.syso\n\ngo1.20.2 (released 2023-03-07) includes a security fix to the\ncrypto/elliptic package, as well as bug fixes to the compiler,\nthe covdata command, the linker, the runtime, and the\ncrypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages. (boo#1206346)\n\n* CVE-2023-24532: crypto/elliptic: Fixed that specific unreduced P-256 scalars produce incorrect results (boo#1209030)\n\n* cmd/covdata: short read on string table when merging coverage counters\n* runtime: some linkname signatures do not match\n* cmd/compile: inline static init cause compile time error\n* cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry\n* crypto/ecdh: ECDH method doesn't check curve\n* cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'\n* crypto/internal/bigmod: flag amd64 assembly as noescape\n* runtime: endless traceback when panic in generics funtion\n* runtime: long latency of sweep assists\n* syscall.Faccessat and os.LookPath regression in Go 1.20\n* os: cmd/go gets error 'copy_file_range: function not implemented'\n* net: TestTCPSelfConnect failures due to unexpected connections\n* syscall: Environ uses an invalid unsafe.Pointer conversion on Windows\n* cmd/compile: ICE on method value involving imported anonymous interface\n* crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey\n* crypto/x509: TestSystemVerify consistently failing\n\ngo1.20.1 (released 2023-02-14) includes security fixes to the\ncrypto/tls, mime/multipart, net/http, and path/filepath packages,\nas well as bug fixes to the compiler, the go command, the linker,\nthe runtime, and the time package. (bsc#1206346)\n\n- CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725\n\n  * bsc#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows\n  * bsc#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding\n  * bsc#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics\n  * bsc#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption\n  * time: update zoneinfo_abbrs on Windows\n  * cmd/link: .go.buildinfo is gc'ed by --gc-sections\n  * cmd/compile/internal/pgo: Detect sample value position instead of hard-coding\n  * cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)\n  * cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name\n  * cmd/compile: internal compiler error: Type.Elem UNION\n  * runtime: GOOS=ios fails Apple's app validation due to use of private API\n  * cmd/go/internal/test: stale flagdefs.go not detected by tests\n  * all: test failures with ETXTBSY\n  * cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing\n\n- go1.20 (released 2023-02-01) is a major release of Go.\n  go1.20.x minor releases will be provided through February 2024.\n  https://github.com/golang/go/wiki/Go-Release-Cycle\n  go1.20 arrives six months after go1.19. Most of its changes are\n  in the implementation of the toolchain, runtime, and libraries.\n  As always, the release maintains the Go 1 promise of\n  compatibility. We expect almost all Go programs to continue to\n  compile and run as before. ( bsc#1206346 jsc#PED-1962 )\n\n* Go 1.20 includes four changes to the language\n\n  * Language change: Go 1.17 added conversions from slice to an\n    array pointer. Go 1.20 extends this to allow conversions from a\n    slice to an array\n  * Language change: The unsafe package defines three new functions\n    SliceData, String, and StringData. Along with Go 1.17's Slice,\n    these functions now provide the complete ability to construct\n    and deconstruct slice and string values, without depending on\n    their exact representation.\n  * Language change: The specification now defines that struct\n    values are compared one field at a time, considering fields in\n    the order they appear in the struct type definition, and\n    stopping at the first mismatch. The specification could\n    previously have been read as if all fields needed to be\n    compared beyond the first mismatch. Similarly, the\n    specification now defines that array values are compared one\n    element at a time, in increasing index order. In both cases,\n    the difference affects whether certain comparisons must\n    panic. Existing programs are unchanged: the new spec wording\n    describes what the implementations have always done.\n  * Language change: Comparable types (such as ordinary interfaces)\n    may now satisfy comparable constraints, even if the type\n    arguments are not strictly comparable (comparison may panic at\n    runtime). This makes it possible to instantiate a type\n    parameter constrained by comparable (e.g., a type parameter for\n    a user-defined generic map key) with a non-strictly comparable\n    type argument such as an interface type, or a composite type\n    containing an interface type.\n  * go command: The directory $GOROOT/pkg no longer stores\n    pre-compiled package archives for the standard library: go\n    install no longer writes them, the go build no longer checks\n    for them, and the Go distribution no longer ships\n    them. Instead, packages in the standard library are built as\n    needed and cached in the build cache, just like packages\n    outside GOROOT. This change reduces the size of the Go\n    distribution and also avoids C toolchain skew for packages that\n    use cgo. Refs jsc#PED-1962\n  * go command: The implementation of go test -json has been\n    improved to make it more robust. Programs that run go test\n    -json do not need any updates. Programs that invoke go tool\n    test2json directly should now run the test binary with\n    -v=test2json (for example, go test -v=test2json or ./pkg.test\n    -test.v=test2json) instead of plain -v.\n  * go command: A related change to go test -json is the addition\n    of an event with Action set to start at the beginning of each\n    test program's execution. When running multiple tests using the\n    go command, these start events are guaranteed to be emitted in\n    the same order as the packages named on the command line.\n  * go command: The go command now defines architecture feature\n    build tags, such as amd64.v2, to allow selecting a package\n    implementation file based on the presence or absence of a\n    particular architecture feature. See go help buildconstraint\n    for details.\n  * go command: The go subcommands now accept -C \u003cdir\u003e to change\n    directory to \u003cdir\u003e before performing the command, which may be\n    useful for scripts that need to execute commands in multiple\n    different modules.\n  * go command: The go build and go test commands no longer accept\n    the -i flag, which has been deprecated since Go 1.16.\n  * go command: The go generate command now accepts -skip \u003cpattern\u003e\n    to skip //go:generate directives matching \u003cpattern\u003e.\n  * go command: The go test command now accepts -skip \u003cpattern\u003e to\n    skip tests, subtests, or examples matching \u003cpattern\u003e.\n  * go command: When the main module is located within GOPATH/src,\n    go install no longer installs libraries for non-main packages\n    to GOPATH/pkg, and go list no longer reports a Target field for\n    such packages. (In module mode, compiled packages are stored in\n    the build cache only, but a bug had caused the GOPATH install\n    targets to unexpectedly remain in effect.)\n  * go command: The go build, go install, and other build-related\n    commands now support a -pgo flag that enables profile-guided\n    optimization, which is described in more detail in the Compiler\n    section below. The -pgo flag specifies the file path of the\n    profile. Specifying -pgo=auto causes the go command to search\n    for a file named default.pgo in the main package's directory\n    and use it if present. This mode currently requires a single\n    main package to be specified on the command line, but we plan\n    to lift this restriction in a future release. Specifying\n    -pgo=off turns off profile-guided optimization.\n  * go command: The go build, go install, and other build-related\n    commands now support a -cover flag that builds the specified\n    target with code coverage instrumentation. This is described in\n    more detail in the Cover section below.\n  * go version: The go version -m command now supports reading more\n    types of Go binaries, most notably, Windows DLLs built with go\n    build -buildmode=c-shared and Linux binaries without execute\n    permission.\n  * Cgo: The go command now disables cgo by default on systems\n    without a C toolchain. More specifically, when the CGO_ENABLED\n    environment variable is unset, the CC environment variable is\n    unset, and the default C compiler (typically clang or gcc) is\n    not found in the path, CGO_ENABLED defaults to 0. As always,\n    you can override the default by setting CGO_ENABLED explicitly.\n    The most important effect of the default change is that when Go\n    is installed on a system without a C compiler, it will now use\n    pure Go builds for packages in the standard library that use\n    cgo, instead of using pre-distributed package archives (which\n    have been removed, as noted above) or attempting to use cgo and\n    failing. This makes Go work better in some minimal container\n    environments as well as on macOS, where pre-distributed package\n    archives have not been used for cgo-based packages since Go\n    1.16.\n    The packages in the standard library that use cgo are net,\n    os/user, and plugin. On macOS, the net and os/user packages\n    have been rewritten not to use cgo: the same code is now used\n    for cgo and non-cgo builds as well as cross-compiled builds. On\n    Windows, the net and os/user packages have never used cgo. On\n    other systems, builds with cgo disabled will use a pure Go\n    version of these packages.\n    On macOS, the race detector has been rewritten not to use cgo:\n    race-detector-enabled programs can be built and run without\n    Xcode. On Linux and other Unix systems, and on Windows, a host\n    C toolchain is required to use the race detector.\n  * go cover: Go 1.20 supports collecting code coverage profiles\n    for programs (applications and integration tests), as opposed\n    to just unit tests. To collect coverage data for a program,\n    build it with go build's -cover flag, then run the resulting\n    binary with the environment variable GOCOVERDIR set to an\n    output directory for coverage profiles. See the 'coverage for\n    integration tests' landing page for more on how to get\n    started. For details on the design and implementation, see the\n    proposal.\n  * go vet: Improved detection of loop variable capture by nested\n    functions. The vet tool now reports references to loop\n    variables following a call to T.Parallel() within subtest\n    function bodies. Such references may observe the value of the\n    variable from a different iteration (typically causing test\n    cases to be skipped) or an invalid state due to unsynchronized\n    concurrent access.\n  * go vet: The tool also detects reference mistakes in more\n    places. Previously it would only consider the last statement\n    of the loop body, but now it recursively inspects the last\n    statements within if, switch, and select statements.\n  * go vet: New diagnostic for incorrect time formats. The vet tool\n    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with\n    Time.Format and time.Parse. This format does not appear in\n    common date standards, but is frequently used by mistake when\n    attempting to use the ISO 8601 date format (yyyy-mm-dd).\n  * Runtime: Some of the garbage collector's internal data\n    structures were reorganized to be both more space and CPU\n    efficient. This change reduces memory overheads and improves\n    overall CPU performance by up to 2%.\n  * Runtime: The garbage collector behaves less erratically with\n    respect to goroutine assists in some circumstances.\n  * Runtime: Go 1.20 adds a new runtime/coverage package containing\n    APIs for writing coverage profile data at runtime from\n    long-running and/or server programs that do not terminate via\n    os.Exit().\n  * Compiler: Go 1.20 adds preview support for profile-guided\n    optimization (PGO). PGO enables the toolchain to perform\n    application- and workload-specific optimizations based on\n    run-time profile information. Currently, the compiler supports\n    pprof CPU profiles, which can be collected through usual means,\n    such as the runtime/pprof or net/http/pprof packages. To enable\n    PGO, pass the path of a pprof profile file via the -pgo flag to\n    go build, as mentioned above. Go 1.20 uses PGO to more\n    aggressively inline functions at hot call sites. Benchmarks for\n    a representative set of Go programs show enabling\n    profile-guided inlining optimization improves performance about\n    3–4%. See the PGO user guide for detailed documentation. We\n    plan to add more profile-guided optimizations in future\n    releases. Note that profile-guided optimization is a preview,\n    so please use it with appropriate caution.\n  * Compiler: The Go 1.20 compiler upgraded its front-end to use a\n    new way of handling the compiler's internal data, which fixes\n    several generic-types issues and enables type declarations\n    within generic functions and methods.\n  * Compiler: The compiler now rejects anonymous interface cycles\n    with a compiler error by default. These arise from tricky uses\n    of embedded interfaces and have always had subtle correctness\n    issues, yet we have no evidence that they're actually used in\n    practice. Assuming no reports from users adversely affected by\n    this change, we plan to update the language specification for\n    Go 1.22 to formally disallow them so tools authors can stop\n    supporting them too.\n  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,\n    largely due to the addition of support for generics and\n    follow-on work. Go 1.20 improves build speeds by up to 10%,\n    bringing it back in line with Go 1.17. Relative to Go 1.19,\n    generated code performance is also generally slightly improved.\n  * Linker: On Linux, the linker now selects the dynamic\n    interpreter for glibc or musl at link time.\n  * Linker: On Windows, the Go linker now supports modern\n    LLVM-based C toolchains.\n  * Linker: Go 1.20 uses go: and type: prefixes for\n    compiler-generated symbols rather than go. and type.. This\n    avoids confusion for user packages whose name starts with\n    go.. The debug/gosym package understands this new naming\n    convention for binaries built with Go 1.20 and newer.\n  * Bootstrap: When building a Go release from source and\n    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for\n    a Go 1.4 or later bootstrap toolchain in the directory\n    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\\go1.4 on Windows). Go 1.18\n    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17\n    before falling back to $HOME/go1.4, in anticipation of\n    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20\n    does require a Go 1.17 release for bootstrapping, but we\n    realized that we should adopt the latest point release of the\n    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks\n    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back\n    to $HOME/go1.4 (to support systems that hard-coded the path\n    $HOME/go1.4 but have installed a newer Go toolchain there). In\n    the future, we plan to move the bootstrap toolchain forward\n    approximately once a year, and in particular we expect that Go\n    1.22 will require the final point release of Go 1.20 for\n    bootstrap.\n  * Library: Go 1.20 adds a new crypto/ecdh package to provide\n    explicit support for Elliptic Curve Diffie-Hellman key\n    exchanges over NIST curves and Curve25519. Programs should use\n    crypto/ecdh instead of the lower-level functionality in\n    crypto/elliptic for ECDH, and third-party modules for more\n    advanced use cases.\n  * Error handling: Go 1.20 expands support for error wrapping to\n    permit an error to wrap multiple other errors.\n  * Error handling: An error e can wrap more than one error by\n    providing an Unwrap method that returns a []error.\n  * Error handling: The errors.Is and errors.As functions have been\n    updated to inspect multiply wrapped errors.\n  * Error handling: The fmt.Errorf function now supports multiple\n    occurrences of the %w format verb, which will cause it to\n    return an error that wraps all of those error operands.\n  * Error handling: The new function errors.Join returns an error\n    wrapping a list of errors.\n  * HTTP ResponseController: The new 'net/http'.ResponseController\n    type provides access to extended per-request functionality not\n    handled by the 'net/http'.ResponseWriter interface. The\n    ResponseController type provides a clearer, more discoverable\n    way to add per-handler controls. Two such controls also added\n    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which\n    allow setting per-request read and write deadlines.\n  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy\n    forwarding proxy includes a new Rewrite hook function,\n    superseding the previous Director hook.\n  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment\n    variable is set, Reader.Next method will now return the error\n    ErrInsecurePath for an entry with a file name that is an\n    absolute path, refers to a location outside the current\n    directory, contains invalid characters, or (on Windows) is a\n    reserved name such as NUL. A future version of Go may disable\n    insecure paths by default.\n  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment\n    variable is set, NewReader will now return the error\n    ErrInsecurePath when opening an archive which contains any file\n    name that is an absolute path, refers to a location outside the\n    current directory, contains invalid characters, or (on Windows)\n    is a reserved names such as NUL. A future version of Go may\n    disable insecure paths by default.\n  * archive/zip: Reading from a directory file that contains file\n    data will now return an error. The zip specification does not\n    permit directory files to contain file data, so this change\n    only affects reading from invalid archives.\n  * bytes: The new CutPrefix and CutSuffix functions are like\n    TrimPrefix and TrimSuffix but also report whether the string\n    was trimmed.\n  * bytes: The new Clone function allocates a copy of a byte slice.\n  * context: The new WithCancelCause function provides a way to\n    cancel a context with a given error. That error can be\n    retrieved by calling the new Cause function.\n  * crypto/ecdsa: When using supported curves, all operations are\n    now implemented in constant time. This led to an increase in\n    CPU time between 5% and 30%, mostly affecting P-384 and P-521.\n  * crypto/ecdsa: The new PrivateKey.ECDH method converts an\n    ecdsa.PrivateKey to an ecdh.PrivateKey.\n  * crypto/ed25519: The PrivateKey.Sign method and the\n    VerifyWithOptions function now support signing pre-hashed\n    messages with Ed25519ph, indicated by an Options.HashFunc that\n    returns crypto.SHA512. They also now support Ed25519ctx and\n    Ed25519ph with context, indicated by setting the new\n    Options.Context field.\n  * crypto/rsa: The new field OAEPOptions.MGFHash allows\n    configuring the MGF1 hash separately for OAEP decryption.\n  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time\n    backend. This causes a CPU runtime increase for decryption\n    operations between approximately 15% (RSA-2048 on amd64) and\n    45% (RSA-4096 on arm64), and more on 32-bit\n    architectures. Encryption operations are approximately 20x\n    slower than before (but still 5-10x faster than\n    decryption). Performance is expected to improve in future\n    releases. Programs must not modify or manually generate the\n    fields of PrecomputedValues.\n  * crypto/subtle: The new function XORBytes XORs two byte slices\n    together.\n  * crypto/tls: Parsed certificates are now shared across all\n    clients actively using that certificate. The memory savings can\n    be significant in programs that make many concurrent\n    connections to a server or collection of servers sharing any\n    part of their certificate chains.\n  * crypto/tls: For a handshake failure due to a certificate\n    verification failure, the TLS client and server now return an\n    error of the new type CertificateVerificationError, which\n    includes the presented certificates.\n  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey\n    now support keys of type *crypto/ecdh.PrivateKey.\n    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of\n    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still\n    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.\n    Use their new ECDH methods to convert to the crypto/ecdh types.\n  * crypto/x509: The new SetFallbackRoots function allows a program\n    to define a set of fallback root certificates in case an\n    operating system verifier or standard platform root bundle is\n    unavailable at runtime. It will most commonly be used with a\n    new package, golang.org/x/crypto/x509roots/fallback, which will\n    provide an up to date root bundle.\n  * debug/elf: Attempts to read from a SHT_NOBITS section using\n    Section.Data or the reader returned by Section.Open now return\n    an error.\n  * debug/elf: Additional R_LARCH_* constants are defined for use\n    with LoongArch systems.\n  * debug/elf: Additional R_PPC64_* constants are defined for use\n    with PPC64 ELFv2 relocations.\n  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is\n    corrected, from 61 to 62.\n  * debug/gosym: Due to a change of Go's symbol naming conventions,\n    tools that process Go binaries should use Go 1.20's debug/gosym\n    package to transparently handle both old and new binaries.\n  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are\n    defined for use with RISC-V systems.\n  * encoding/binary: The ReadVarint and ReadUvarint functions will\n    now return io.ErrUnexpectedEOF after reading a partial value,\n    rather than io.EOF.\n  * encoding/xml: The new Encoder.Close method can be used to check\n    for unclosed elements when finished encoding.\n  * encoding/xml: The decoder now rejects element and attribute\n    names with more than one colon, such as \u003ca:b:c\u003e, as well as\n    namespaces that resolve to an empty string, such as xmlns:a=''.\n  * encoding/xml: The decoder now rejects elements that use\n    different namespace prefixes in the opening and closing tag,\n    even if those prefixes both denote the same namespace.\n  * errors: The new Join function returns an error wrapping a list\n    of errors.\n  * fmt: The Errorf function supports multiple occurrences of the\n    %w format verb, returning an error that unwraps to the list of\n    all arguments to %w.\n  * fmt: The new FormatString function recovers the formatting\n    directive corresponding to a State, which can be useful in\n    Formatter. implementations.\n  * go/ast: The new RangeStmt.Range field records the position of\n    the range keyword in a range statement.\n  * go/ast: The new File.FileStart and File.FileEnd fields record\n    the position of the start and end of the entire source file.\n  * go/token: The new FileSet.RemoveFile method removes a file from\n    a FileSet. Long-running programs can use this to release memory\n    associated with files they no longer need.\n  * go/types: The new Satisfies function reports whether a type\n    satisfies a constraint. This change aligns with the new\n    language semantics that distinguish satisfying a constraint\n    from implementing an interface.\n  * io: The new OffsetWriter wraps an underlying WriterAt and\n    provides Seek, Write, and WriteAt methods that adjust their\n    effective file offset position by a fixed amount.\n  * io/fs: The new error SkipAll terminates a WalkDir immediately\n    but successfully.\n  * math/big: The math/big package's wide scope and input-dependent\n    timing make it ill-suited for implementing cryptography. The\n    cryptography packages in the standard library no longer call\n    non-trivial Int methods on attacker-controlled inputs. In the\n    future, the determination of whether a bug in math/big is\n    considered a security vulnerability will depend on its wider\n    impact on the standard library.\n  * math/rand: The math/rand package now automatically seeds the\n    global random number generator (used by top-level functions\n    like Float64 and Int) with a random value, and the top-level\n    Seed function has been deprecated. Programs that need a\n    reproducible sequence of random numbers should prefer to\n    allocate their own random source, using\n    rand.New(rand.NewSource(seed)).\n  * math/rand: Programs that need the earlier consistent global\n    seeding behavior can set GODEBUG=randautoseed=0 in their\n    environment.\n  * math/rand: The top-level Read function has been deprecated. In\n    almost all cases, crypto/rand.Read is more appropriate.\n  * mime: The ParseMediaType function now allows duplicate\n    parameter names, so long as the values of the names are the\n    same.\n  * mime/multipart: Methods of the Reader type now wrap errors\n    returned by the underlying io.Reader.\n  * net: The LookupCNAME function now consistently returns the\n    contents of a CNAME record when one exists. Previously on Unix\n    systems and when using the pure Go resolver, LookupCNAME would\n    return an error if a CNAME record referred to a name that with\n    no A, AAAA, or CNAME record. This change modifies LookupCNAME\n    to match the previous behavior on Windows, allowing LookupCNAME\n    to succeed whenever a CNAME exists.\n  * net: Interface.Flags now includes the new flag FlagRunning,\n    indicating an operationally active interface. An interface\n    which is administratively configured but not active (for\n    example, because the network cable is not connected) will have\n    FlagUp set but not FlagRunning.\n  * net: The new Dialer.ControlContext field contains a callback\n    function similar to the existing Dialer.Control hook, that\n    additionally accepts the dial context as a parameter. Control\n    is ignored when ControlContext is not nil.\n  * net: The Go DNS resolver recognizes the trust-ad resolver\n    option. When options trust-ad is set in resolv.conf, the Go\n    resolver will set the AD bit in DNS queries. The resolver does\n    not make use of the AD bit in responses.\n  * net: DNS resolution will detect changes to /etc/nsswitch.conf\n    and reload the file when it changes. Checks are made at most\n    once every five seconds, matching the previous handling of\n    /etc/hosts and /etc/resolv.conf.\n  * net/http: The ResponseWriter.WriteHeader function now supports\n    sending 1xx status codes.\n  * net/http: The new Server.DisableGeneralOptionsHandler\n    configuration setting allows disabling the default OPTIONS *\n    handler.\n  * net/http: The new Transport.OnProxyConnectResponse hook is\n    called when a Transport receives an HTTP response from a proxy\n    for a CONNECT request.\n  * net/http: The HTTP server now accepts HEAD requests containing\n    a body, rather than rejecting them as invalid.\n  * net/http: HTTP/2 stream errors returned by net/http functions\n    may be converted to a golang.org/x/net/http2.StreamError using\n    errors.As.\n  * net/http: Leading and trailing spaces are trimmed from cookie\n    names, rather than being rejected as invalid. For example, a\n    cookie setting of 'name =value' is now accepted as setting the\n    cookie 'name'.\n  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback\n    functions are the net/netip equivalents of net.IPv6loopback and\n    net.IPv6linklocalallrouters.\n  * os: On Windows, the name NUL is no longer treated as a special\n    case in Mkdir and Stat.\n  * os: On Windows, File.Stat now uses the file handle to retrieve\n    attributes when the file is a directory. Previously it would\n    use the path passed to Open, which may no longer be the file\n    represented by the file handle if the file has been moved or\n    replaced. This change modifies Open to open directories without\n    the FILE_SHARE_DELETE access, which match the behavior of\n    regular files.\n  * os: On Windows, File.Seek now supports seeking to the beginning\n    of a directory.\n  * os/exec: The new Cmd fields Cancel and WaitDelay specify the\n    behavior of the Cmd when its associated Context is canceled or\n    its process exits with I/O pipes still held open by a child\n    process.\n  * path/filepath: The new error SkipAll terminates a Walk\n    immediately but successfully.\n  * path/filepath: The new IsLocal function reports whether a path\n    is lexically local to a directory. For example, if IsLocal(p)\n    is true, then Open(p) will refer to a file that is lexically\n    within the subtree rooted at the current directory.\n  * reflect: The new Value.Comparable and Value.Equal methods can\n    be used to compare two Values for equality. Comparable reports\n    whether Equal is a valid operation for a given Value receiver.\n  * reflect: The new Value.Grow method extends a slice to guarantee\n    space for another n elements.\n  * reflect: The new Value.SetZero method sets a value to be the\n    zero value for its type.\n  * reflect: Go 1.18 introduced Value.SetIterKey and\n    Value.SetIterValue methods. These are optimizations:\n    v.SetIterKey(it) is meant to be equivalent to\n    v.Set(it.Key()). The implementations incorrectly omitted a\n    check for use of unexported fields that was present in the\n    unoptimized forms. Go 1.20 corrects these methods to include\n    the unexported field check.\n  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the\n    regular expression parser, making it reject very large\n    expressions that would consume too much memory. Because Go\n    patch releases do not introduce new API, the parser returned\n    syntax.ErrInternalError in this case. Go 1.20 adds a more\n    specific error, syntax.ErrLarge, which the parser now returns\n    instead.\n  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code\n    generated by cgo will use cgo.Incomplete to mark an incomplete\n    C type.\n  * runtime/metrics: Go 1.20 adds new supported metrics, including\n    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the\n    number of cgo calls executed (/cgo/go-to-c-calls:calls), total\n    mutex block time (/sync/mutex/wait/total:seconds), and various\n    measures of time spent in garbage collection.\n  * runtime/metrics: Time-based histogram metrics are now less\n    precise, but take up much less memory.\n  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing\n    an issue where old mutex profile samples would be scaled\n    incorrectly if the sampling rate changed during execution.\n  * runtime/pprof: Profiles collected on Windows now include memory\n    mapping information that fixes symbolization issues for\n    position-independent binaries.\n  * runtime/trace: The garbage collector's background sweeper now\n    yields less frequently, resulting in many fewer extraneous\n    events in execution traces.\n  * strings: The new CutPrefix and CutSuffix functions are like\n    TrimPrefix and TrimSuffix but also report whether the string\n    was trimmed.\n  * sync: The new Map methods Swap, CompareAndSwap, and\n    CompareAndDelete allow existing map entries to be updated\n    atomically.\n  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11\n    and earlier have been removed.\n  * syscall: On Linux, additional CLONE_* constants are defined for\n    use with the SysProcAttr.Cloneflags field.\n  * syscall: On Linux, the new SysProcAttr.CgroupFD and\n    SysProcAttr.UseCgroupFD fields provide a way to place a child\n    process into a specific cgroup.\n  * testing: The new method B.Elapsed reports the current elapsed\n    time of the benchmark, which may be useful for calculating\n    rates to report with ReportMetric.\n  * time: The new time layout constants DateTime, DateOnly, and\n    TimeOnly provide names for three of the most common layout\n    strings used in a survey of public Go source code.\n  * time: The new Time.Compare method compares two times.\n  * time: Parse now ignores sub-nanosecond precision in its input,\n    instead of reporting those digits as an error.\n  * time: The Time.MarshalJSON method is now more strict about\n    adherence to RFC 3339.\n  * unicode/utf16: The new AppendRune function appends the UTF-16\n    encoding of a given rune to a uint16 slice, analogous to\n    utf8.AppendRune.\n","status":"published","published":"2023-03-14T17:07:51Z","modified":"2026-02-04T03:33:31.243427Z","updated_at":"2026-11-02T15:53:52.350754Z"}]},"sources_more":{"osv":5}}