{"id":"CVE-2023-45287","aliases":["ALSA-2024:0748","ALSA-2024:2180","ALSA-2024:2193","ALSA-2024:2239","ALSA-2024:2245","ALSA-2024:2272","AZL-32100","AZL-32123","AZL-34764","AZL-37310","AZL-37380","AZL-79088","AZL-98769","BELL-CVE-2023-45287","BIT-golang-2023-45287","CLSA-2025-1746792031","CLSA-2025-1747251120","CLSA-2025-1762538558","CLSA-2025-1763489872","DEBIAN-CVE-2023-45287","EUVD-2023-49587","GHSA-33qr-2xwr-95pw","GO-2023-2375","RHSA-2023:7200","RHSA-2023:7201","RHSA-2024:0748","RHSA-2024:2180","RHSA-2024:2193","RHSA-2024:2239","RHSA-2024:2245","RHSA-2024:2272","RHSA-2024:2729","RHSA-2024:2730","RHSA-2024:2767","RHSA-2024:2988","RHSA-2024:4429","RLSA-2024:0748","RLSA-2024:2988","UBUNTU-CVE-2023-45287"],"status":"published","title":"Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0125,"percentile":0.69628,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2023-12-05T16:16:44Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"skopeo","fixed_in":["2:1.14.3-0.1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"skopeo-tests","fixed_in":["2:1.14.3-0.1.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"golang","fixed_in":["1.20.0-1","1.21.6-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"msft-golang","fixed_in":["1.20.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"golang","fixed_in":["1.20.0-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"go","fixed_in":["1.21.7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"go","fixed_in":["1.21.7-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"golang","fixed_in":["1.20.0"],"sources":["osv"]},{"ecosystem":"Go","package":"stdlib","fixed_in":["1.20.0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo","fixed_in":["2:1.14.3-0.1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debuginfo","fixed_in":["2:1.14.3-0.1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debugsource","fixed_in":["2:1.14.3-0.1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-tests","fixed_in":["2:1.14.3-0.1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"containernetworking-plugins","fixed_in":["1:1.2.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"containernetworking-plugins-debuginfo","fixed_in":["1:1.2.0-3.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"containernetworking-plugins-debugsource","fixed_in":["1:1.2.0-3.el9_2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module_el8.9.0+3687+dcd7ef8f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"46-1.module_el8.7.0+3344+5bcd850f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module_el8.9.0+3687+dcd7ef8f"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-6.module_el8.9.0+3711+04fcca5e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-1.module_el8.9.0+3683+33eb0feb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9-2.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+3137+d33c3efb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1.module_el8.6.0+2877+8e437bf5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-2.module_el8.8.0+3468+16b86c82"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+3137+d33c3efb"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15-3.module_el8.6.0+2877+8e437bf5"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-2.module_el8.9.0+3711+04fcca5e"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module_el8.9.0+3722+7fd8ab2b"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module_el8.9.0+3711+04fcca5e.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module_el8.9.0+3711+04fcca5e.alma.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.99.4-5.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.6-4.module_el8.9.0+3627+db8ec155"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.20.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"msft-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.18.0"},{"fixed":"1.21.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.26.10-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.7-r0"},{"fixed":"1.21.7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.7-r0"},{"fixed":"1.21.7-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"golang","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.20.0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.13-1.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.13-1.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.13-1.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.13-1.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"golang-race","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.13-1.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.13-1.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.13-1.el9_2.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.5-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.5-1.el9_2.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-1.el9.tuxcare.els2"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.4-1.el9_1.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"golang-1.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.19.10-1","1.19.10-2","1.19.11-1","1.19.12-1","1.19.12-2","1.19.12-2~bpo11+1","1.19.12-2~bpo12+1","1.19.13-1","1.19.13-1~bpo11+1","1.19.13-1~bpo12+1","1.19.8-2","1.19.9-1"]},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.20.0"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"microshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"microshift-greenboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"microshift-networking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"microshift-olm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"microshift-release-info","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"microshift-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402260721.p0.g799289b.assembly.4.15.0.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-1.1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-1.1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-1.1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402142009.p0.g6216ea1.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402070507.p0.g48dcf59.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402070507.p0.g48dcf59.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402142009.p0.g6216ea1.assembly.stream.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402142009.p0.g6216ea1.assembly.stream.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402070507.p0.g48dcf59.assembly.stream.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402070507.p0.g48dcf59.assembly.stream.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.0-202402142009.p0.g6216ea1.assembly.stream.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.0-1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.0-1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"butane-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.0-1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"butane-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.0-1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.3-14.rhaos4.15.git33aabd8.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.3-14.rhaos4.15.git33aabd8.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.3-14.rhaos4.15.git33aabd8.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.0-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.0-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.0-3.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.29.1-20.2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.3-14.rhaos4.15.git33aabd8.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.3-14.rhaos4.15.git33aabd8.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.3-14.rhaos4.15.git33aabd8.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.0-3.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.0-3.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.0-3.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.2-2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.2-2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.2-2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.2-2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.2-2.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.4.1-21.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.11.2-21.1.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-1.rhaos4.15.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-1.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-1.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.15::el9","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-1.rhaos4.15.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-6.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-6.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-6.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.7-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.1-38.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.0.2-26.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.4-5.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-4.module+el8.9.0+21242+944321bb"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:1.1.12-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.4-0.1.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"etcd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.26-8.el9ost"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"etcd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.26-8.el9ost"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"etcd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.26-8.el9ost"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"collectd-sensubility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-3.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el9","package":"collectd-sensubility-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-3.el9ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"collectd-sensubility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-3.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:openstack:17.1::el8","package":"collectd-sensubility-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.1-3.el8ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+21209+52deeb51"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"buildah-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.33.6-2.module+el8.10.0+21371+46937ece"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+21373+0d273fdf"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"conmon-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+21077+98b84d8a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+21196+3f0abbca"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+21366+f9cb49f8"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-81.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"criu-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"crun-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+21340+c6c7475a"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fuse-overlayfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+20412+95ee28e2"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libslirp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"oci-seccomp-bpf-hook-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+20565+a40ba0e5"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-gvproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+21196+3f0abbca"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18-4.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+21196+3f0abbca"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"skopeo-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.14.3-0.1.module+el8.10.0+21251+62b7388c"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slirp4netns-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+21306+6be40ce7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"toolbox-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+21341+ff0b5f89"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-20.module+el8.9.0+20326+387084d0"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"containernetworking-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"containernetworking-plugins-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.0-3.el9_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"buildah","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.24.6-7.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:46-1.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.1.4-2.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-38.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.205.0-3.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"criu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.15-3.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9-2.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.5-2.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.0-2.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"skopeo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.6.2-9.module+el8.9.0+1578+aa900b44"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-3.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"udica","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-4.module+el8.9.0+1445+07728297"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"aardvark-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.0-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"conmon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"cockpit-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:84.1-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containernetworking-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.0-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-81.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"containers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1-81.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"container-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"crun","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"fuse-overlayfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libslirp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-1.module+el8.9.0+1445+07728297"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"netavark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"oci-seccomp-bpf-hook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.0-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.12-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1815+5fe7415e"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1825+623b0c20"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1843+6892ab28"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1872+2e18eb19"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1874+ce489889"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1880+8e896d1b"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1896+b18fa106"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slirp4netns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.module+el8.10.0+1948+4b5cd4a9"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1825+623b0c20.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1829+9bb2696f.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1843+6892ab28.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1872+2e18eb19.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1874+ce489889.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1880+8e896d1b.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1896+b18fa106.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Rocky Linux:8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.99.5-2.module+el8.10.0+1948+4b5cd4a9.rocky.0.2"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-1.20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20.3-1ubuntu0.1~20.04","1.20.3-1ubuntu0.1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-1.20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20.3-1ubuntu0.1~22.04","1.20.3-1ubuntu0.1~22.04.1"]}],"products":[{"vendor":"go standard library","product":"crypto/tls"},{"vendor":"golang","product":"go"}],"references":[{"url":"https://go.dev/issue/20654","tags":["x_transferred","Issue Tracking","report"]},{"url":"https://go.dev/cl/326012/26","tags":["x_transferred","Issue Tracking","report","fix"]},{"url":"https://groups.google.com/g/golang-announce/c/QMK8IQALDvA","tags":["x_transferred","Mailing List","Release Notes","discussion","advisory","web","report"]},{"url":"https://people.redhat.com/~hkario/marvin/","tags":["x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2375","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240112-0005/","tags":["x_transferred","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45287","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-33qr-2xwr-95pw"},{"url":"https://access.redhat.com/errata/RHSA-2024:0748","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39326","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45287","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21626","tags":["report"]},{"url":"https://bugzilla.redhat.com/2253193","tags":["report"]},{"url":"https://bugzilla.redhat.com/2253330","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258725","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0748.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30630","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30631","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30632","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107342","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107371","tags":["report"]},{"url":"https://bugzilla.redhat.com/2107386","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2180.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2193","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2193.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2239","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2239.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2245","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2245.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2272","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2272.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-45287","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1746792031.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1747251120.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762538558.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763489872.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-45287","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7200","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253330","tags":["report"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-18548","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19288","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19363","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19384","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19422","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19433","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19457","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19488","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19540","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19567","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19632","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-19719","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-20037","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-22322","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-22338","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-22685","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-22809","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-22854","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-22858","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-22936","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-25689","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-25851","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-25904","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-27398","tags":["article"]},{"url":"https://issues.redhat.com/browse/OCPBUGS-27855","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2023_7200.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39325","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39325","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-44487","tags":["article"]},{"url":"https://go.dev/issue/63417","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2102","tags":["advisory"]},{"url":"https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39326","tags":["advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2382","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45287","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7201","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258725","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2023_7201.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-48795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/7071748","tags":["article"]},{"url":"https://terrapin-attack.com/","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2024-001","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-15029","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-17145","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0748.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21626","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107386","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-25116","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2180.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30630","tags":["advisory"]},{"url":"https://go.dev/issue/53415","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30631","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30631","tags":["advisory"]},{"url":"https://go.dev/issue/53168","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30632","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30632","tags":["advisory"]},{"url":"https://go.dev/issue/53416","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-14922","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3091","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2193.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2239.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2245.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-3140","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2272.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2729","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279365","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2729.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45288","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45288","tags":["advisory"]},{"url":"https://nowotarski.info/http2-continuation-flood/","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2687","tags":["advisory"]},{"url":"https://www.kb.cert.org/vuls/id/421644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1394","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1394","tags":["advisory"]},{"url":"https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136","tags":["article"]},{"url":"https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6","tags":["article"]},{"url":"https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2660","tags":["advisory"]},{"url":"https://vuln.go.dev/ID/GO-2024-2660.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-4438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-4438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4438","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2730","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2730.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2767","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2767.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2988","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262272","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-18150","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-2598","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-26594","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3088","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3093","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-3146","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-9836","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2988.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25091","tags":["advisory"]},{"url":"https://security.snyk.io/vuln/SNYK-PYTHON-URLLIB3-5969479","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33198","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34558","tags":["advisory"]},{"url":"https://golang.org/doc/devel/release#go1.15.minor","tags":["article"]},{"url":"https://golang.org/doc/devel/release#go1.16.minor","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2879","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2879","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2879","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/54853","tags":["article"]},{"url":"https://github.com/vbatts/tar-split/releases/tag/v0.12.1","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2880","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2880","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2880","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/54663","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41715","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/55949","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-29409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-29409","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-29409","tags":["advisory"]},{"url":"https://go.dev/cl/515257","tags":["article"]},{"url":"https://go.dev/issue/61460","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1987","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39318","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39318","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39318","tags":["advisory"]},{"url":"https://go.dev/cl/526156","tags":["article"]},{"url":"https://go.dev/issue/62196","tags":["article"]},{"url":"https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ","tags":["article"]},{"url":"https://vuln.go.dev/ID/GO-2023-2041.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39319","tags":["advisory"]},{"url":"https://go.dev/cl/526157","tags":["article"]},{"url":"https://go.dev/issue/62197","tags":["article"]},{"url":"https://vuln.go.dev/ID/GO-2023-2043.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39321","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39321","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39321","tags":["advisory"]},{"url":"https://go.dev/cl/523039","tags":["article"]},{"url":"https://go.dev/issue/62266","tags":["article"]},{"url":"https://vuln.go.dev/ID/GO-2023-2044.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39322","tags":["advisory"]},{"url":"https://vuln.go.dev/ID/GO-2023-2045.json","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803","tags":["advisory"]},{"url":"https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9","tags":["article"]},{"url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110.html#name-get","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23650","tags":["advisory"]},{"url":"https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4429","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4429.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0748","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2988","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-45287","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-45287","title":"Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T16:18:06.104Z","modified":"2025-02-13T17:14:00.588Z","updated_at":"2026-11-02T14:35:22.640346Z"}],"euvd":[{"id":"EUVD-2023-49587","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T16:18:06Z","modified":"2025-02-13T17:14:00Z","updated_at":"2026-11-03T00:03:48.562419Z"}],"ghsa":[{"id":"GHSA-33qr-2xwr-95pw","title":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant...","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T18:30:23Z","modified":"2024-01-12T15:30:25Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:55:24.514817Z"}],"nvd":[{"id":"CVE-2023-45287","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08.57Z","modified":"2026-06-17T06:28:35.46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:08:54.010507Z"}],"osv":[{"id":"AZL-32100","title":"CVE-2023-45287 affecting package golang for versions less than 1.20.0-1","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08Z","modified":"2026-04-21T04:26:39.623239Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-32123","title":"CVE-2023-45287 affecting package msft-golang for versions less than 1.20.0-1","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08Z","modified":"2026-04-21T04:26:40.920886Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-34764","title":"CVE-2023-45287 affecting package golang for versions less than 1.20.0-1","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08Z","modified":"2026-04-21T04:32:34.398858Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-37310","title":"CVE-2023-45287 affecting package golang for versions less than 1.21.6-1","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08Z","modified":"2026-04-21T04:28:15.664379Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-37380","title":"CVE-2023-45287 affecting package golang for versions less than 1.21.6-1","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08Z","modified":"2026-04-21T04:28:17.896153Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-79088","title":"CVE-2023-45287 affecting package golang 1.26.10-1","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"AZL-98769","title":"CVE-2023-45287 affecting package golang 1.27.1-1","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08Z","modified":"2026-09-16T06:39:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2023-45287","status":"published","published":"2023-12-05T17:15:00Z","modified":"2026-01-26T09:35:33.033529Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-45287","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08.57Z","modified":"2026-03-15T22:47:31.193764Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DEBIAN-CVE-2023-45287","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:08.57Z","modified":"2026-10-26T18:02:49.332244535Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"RHSA-2023:7200","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.z security update","status":"published","published":"2024-10-01T23:30:12Z","modified":"2026-10-20T10:02:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:7201","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update","status":"published","published":"2024-10-01T23:30:26Z","modified":"2026-10-20T10:02:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:0748","title":"Red Hat Security Advisory: container-tools:4.0 security update","status":"published","published":"2024-10-21T18:42:15Z","modified":"2026-10-18T10:02:15Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:2180","title":"Red Hat Security Advisory: runc security update","status":"published","published":"2024-09-30T15:52:29Z","modified":"2026-10-20T10:02:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2193","title":"Red Hat Security Advisory: podman security update","status":"published","published":"2024-09-30T15:52:39Z","modified":"2026-10-18T10:02:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2239","title":"Red Hat Security Advisory: skopeo security update","status":"published","published":"2024-09-30T15:52:48Z","modified":"2026-10-16T10:04:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2245","title":"Red Hat Security Advisory: buildah security update","status":"published","published":"2024-09-30T15:52:57Z","modified":"2026-10-18T10:02:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2272","title":"Red Hat Security Advisory: containernetworking-plugins security update","status":"published","published":"2024-09-30T15:51:58Z","modified":"2026-10-18T10:02:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2729","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update","status":"published","published":"2024-09-30T15:52:29Z","modified":"2026-10-18T10:02:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2730","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (collectd-sensubility) security update","status":"published","published":"2024-09-30T15:52:20Z","modified":"2026-10-18T10:02:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2767","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (collectd-sensubility) security update","status":"published","published":"2024-09-30T15:52:39Z","modified":"2026-10-18T10:02:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2988","title":"Red Hat Security Advisory: container-tools:rhel8 security update","status":"published","published":"2024-10-21T18:50:41Z","modified":"2026-10-20T10:02:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:4429","title":"Red Hat Security Advisory: containernetworking-plugins security update","status":"published","published":"2024-09-30T15:54:08Z","modified":"2026-10-16T10:04:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2024:0748","title":"Important: container-tools:4.0 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* runc: file descriptor leak (\"Leaky Vessels\") (CVE-2024-21626)\n\nA Rocky Enterprise Software Foundation Security Bulletin which addresses further details about the Leaky Vessels flaw is available in the References section.\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T19:38:06.03838Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:2988","title":"Moderate: container-tools:rhel8 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect (CVE-2018-25091)\n\n* golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents (CVE-2021-33198)\n\n* golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)\n\n* golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)\n\n* golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)\n\n* golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)\n\n* golang: crypto/tls: slow verification of certificate chains containing large RSA keys (CVE-2023-29409)\n\n* golang: html/template: improper handling of HTML-like comments within script contexts (CVE-2023-39318)\n\n* golang: html/template: improper handling of special tags within script contexts (CVE-2023-39319)\n\n* golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)\n\n* golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\n* urllib3: Request body not stripped after redirect from 303 status changes request method to GET (CVE-2023-45803)\n\n* ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)\n\n* moby/buildkit: Possible race condition with accessing subpaths from cache mounts (CVE-2024-23650)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T20:08:43.004434Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-45287","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T17:15:00Z","modified":"2025-10-24T05:02:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:0748","title":"Important: container-tools:4.0 security update","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* runc: file descriptor leak (\"Leaky Vessels\") (CVE-2024-21626)\n\nA AlmaLinux Security Bulletin which addresses further details about the Leaky Vessels flaw is available in the References section.\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-02-08T00:00:00Z","modified":"2026-10-29T11:02:13.302196525Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2024:2180","title":"Moderate: runc security update","description":"The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides container runtime.\n\nSecurity Fix(es):\n\n* golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)\n* golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)\n* golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:41.988706256Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2193","title":"Moderate: podman security update","description":"The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:42.963473883Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2239","title":"Moderate: skopeo security update","description":"The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. \n\nSecurity Fix(es):\n\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:08.008439996Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2245","title":"Moderate: buildah security update","description":"The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. \n\nSecurity Fix(es):\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:08.718625606Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2272","title":"Moderate: containernetworking-plugins security update","description":"The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. \n\nSecurity Fix(es):\n\n* golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)\n* golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. (CVE-2023-45287)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:07.089804856Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"BIT-golang-2023-45287","title":"Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2024-03-06T10:52:27.963Z","modified":"2026-09-08T08:47:49.863966339Z","updated_at":"2026-11-02T15:28:31.02759Z"},{"id":"CLSA-2025-1746792031","title":"golang: Fix of 2 CVEs","description":"- CVE-2024-34156: prevent prevents stack exhaustion when attempting to\n  decode a message that contains an extremely deeply nested struct\n- CVE-2023-45287: replace big.Int for encryption and decryption","status":"published","published":"2025-05-09T12:00:37Z","modified":"2026-10-21T10:45:28.499142264Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1747251120","title":"buildah: Fix of 2 CVEs","description":"- Rebuild with new golang version to address the following CVEs:\n- CVE-2023-45287: Timing Side Channel attack in RSA based TLS key exchanges\n- CVE-2024-34156: panic due to stack exhaustion for Decoder.Decode","status":"published","published":"2025-05-14T19:32:04Z","modified":"2026-06-01T00:30:44.286890589Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1762538558","title":"containernetworking-plugins: Fix of 13 CVEs","description":"- rebuild with newer golang to fix multiple security vulnerabilities:\n- CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service\n- CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service\n- CVE-2022-41725: fix HTTP/2 server connection handling causing premature closure\n- CVE-2022-41724: fix HTTP/2 server connection misuse causing resource exhaustion\n- CVE-2023-24538: fix HTTP/2 request handling causing denial of service\n- CVE-2023-39322: fix HTTP/2 connection resource exhaustion and denial of service\n- CVE-2023-24539: fix HTTP/2 request handling causing excessive memory consumption\n- CVE-2023-39321: fix HTTP/2 frame processing causing panic and denial of service\n- CVE-2024-24788: fix HTTP/2 connection handling causing denial of service\n- CVE-2022-41723: fix HTTP/2 server connection handling causing resource exhaustion\n- CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability\n- CVE-2024-34156: fix HTTP/2 connection resource exhaustion and denial of service\n- CVE-2023-24536: fix HTTP/2 request handling causing denial of service","status":"published","published":"2026-05-13T10:06:56Z","modified":"2026-10-21T10:45:40.349202819Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1763489872","title":"runc: Fix of 3 CVEs","description":"- rebuild with newer golang to fix security vulnerabilities:\n- CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability\n- CVE-2024-24788: fix DNS resolver infinite loop causing denial of service\n- CVE-2023-39321: fix QUIC post-handshake message processing causing panic\n  and denial of service","status":"published","published":"2025-11-18T18:17:56Z","modified":"2026-10-21T10:46:07.593680267Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"GO-2023-2375","title":"Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits.\n\nIn Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels.","status":"published","published":"2023-12-05T16:16:44Z","modified":"2026-02-04T03:57:11.083315Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}