{"id":"CVE-2023-49568","aliases":["ALPINE-CVE-2023-49568","AZL-33892","AZL-35095","AZL-39595","DEBIAN-CVE-2023-49568","EUVD-2023-3251","GHSA-mw99-9chc-xw7r","GO-2024-2466","RHSA-2024:0880","RHSA-2024:3925","UBUNTU-CVE-2023-49568","USN-8088-1"],"status":"published","title":"Maliciously crafted Git server replies can cause DoS on go-git clients","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00698,"percentile":0.53578,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2023-12-27T15:06:52Z","modified":"2026-11-03T06:32:59Z","fixes":[{"ecosystem":"Go","package":"github.com/go-git/go-git/v5","fixed_in":["5.11.0"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.20","package":"nfpm","fixed_in":["2.35.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nfpm","fixed_in":["2.35.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nfpm","fixed_in":["2.35.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nfpm","fixed_in":["2.35.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nfpm","fixed_in":["2.35.2-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"packer","fixed_in":["1.9.5-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"packer","fixed_in":["1.9.5-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cri-o","fixed_in":["1.22.3-12"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"golang-github-go-git-go-git","fixed_in":["5.11.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-github-go-git-go-git","fixed_in":["5.11.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-github-go-git-go-git","fixed_in":["5.4.2-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"golang-github-go-git-go-git","fixed_in":["5.4.2-4ubuntu0.24.04.3+esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/go-git/go-git/v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0"}]}]},{"source":"ghsa","ecosystem":"Go","package":"gopkg.in/src-d/go-git.v4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.1"},{"last_affected":"4.13.1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nfpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nfpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nfpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nfpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nfpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.3-12"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1","5.11.0-2","5.11.0-3","5.11.0-4","5.12.0-1","5.13.2-1","5.14.0-1","5.16.2-1","5.17.0-1","5.17.1-1","5.19.1-1","5.19.2-1","5.19.2-2","5.4.2-3","5.4.2-4"]},{"source":"osv","ecosystem":"Debian:13","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.0-1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/go-git/go-git/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.11.0"}]}]},{"source":"osv","ecosystem":"Go","package":"gopkg.in/src-d/go-git.v4","ranges":[{"type":"SEMVER","events":[{"introduced":"4.7.1"},{"last_affected":"4.13.1"}]}]},{"source":"osv","ecosystem":"Go","package":"gopkg.in/src-d/go-git.v4","ranges":[{"type":"SEMVER","events":[{"introduced":"4.7.1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/go-git/go-git/v5","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.11.0"}]}]},{"source":"osv","ecosystem":"Red Hat:serverless:1.0::el8","package":"openshift-serverless-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-6.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-194.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"gperftools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7-9.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"gperftools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7-9.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"gperftools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7-9.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"gperftools-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7-9.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"liboath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"liboath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libpskc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libunwind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libunwind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libunwind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oath-toolkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oath-toolkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oath-toolkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"oathtool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"pam_oath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"pskctool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-thrift-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.0-2.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"thrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.0-2.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"thrift-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.0-2.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"thrift-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.0-2.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"thrift-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.0-2.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"thrift-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.0-2.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"thrift-qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.0-2.el8cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephadm-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.0-1.el9cp"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu0.1~esm1"}]}],"versions":["5.4.2-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-4ubuntu0.24.04.3+esm2"}]}],"versions":["5.4.2-3build1","5.4.2-4","5.4.2-4ubuntu0.24.04.1","5.4.2-4ubuntu0.24.04.2","5.4.2-4ubuntu0.24.04.2+esm1","5.4.2-4ubuntu0.24.04.3","5.4.2-4ubuntu0.24.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-3ubuntu0.1~esm1"}]}],"versions":["5.4.2-3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"golang-github-go-git-go-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.2-4ubuntu0.24.04.3+esm2"}]}],"versions":["5.4.2-3build1","5.4.2-4","5.4.2-4ubuntu0.24.04.1","5.4.2-4ubuntu0.24.04.2","5.4.2-4ubuntu0.24.04.2+esm1","5.4.2-4ubuntu0.24.04.3","5.4.2-4ubuntu0.24.04.3+esm1"],"bundled":5}],"products":[{"vendor":"go-git","product":"go-git"},{"vendor":"go-git_project","product":"go-git"}],"references":[{"url":"https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r","tags":["x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49568","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mw99-9chc-xw7r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-49568","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49568.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-49568","tags":["advisory"]},{"url":"https://github.com/go-git/go-git","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0880","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_openshift_serverless/1.31","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258165","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0880.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39326","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39326","tags":["advisory"]},{"url":"https://pkg.go.dev/vuln/GO-2023-2382","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-48795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-48795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/7071748","tags":["article"]},{"url":"https://terrapin-attack.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49568","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49568","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49569","tags":["advisory"]},{"url":"https://github.com/go-git/go-git/security/advisories/GHSA-449p-3h89-pw88","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3925","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3128","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2079897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2089167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2112325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2176297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2190366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249518","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258940","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2265994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2277947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2278778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2280954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2281465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2281471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2283630","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3925.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3128","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3128","tags":["advisory"]},{"url":"https://grafana.com/blog/2023/06/22/grafana-security-release-for-cve-2023-3128/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4822","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4822","tags":["advisory"]},{"url":"https://grafana.com/blog/2023/10/13/grafana-security-release-new-versions-of-grafana-with-a-medium-severity-security-fix-for-cve-2023-4822/","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2023-49568","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8088-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-49569","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21613","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-21614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-25934","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-49568","title":"Maliciously crafted Git server replies can cause DoS on go-git clients","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T10:36:12.727Z","modified":"2025-06-17T21:09:18.035Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:12.998024Z"}],"euvd":[{"id":"EUVD-2023-3251","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T10:36:12Z","modified":"2025-06-17T21:09:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:21.531807Z"}],"ghsa":[{"id":"GHSA-mw99-9chc-xw7r","title":"Maliciously crafted Git server replies can cause DoS on go-git clients","description":"### Impact\nA denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.11`. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in `go-git` clients. \n\nApplications using only the in-memory filesystem supported by `go-git` are not affected by this vulnerability.\nThis is a `go-git` implementation issue and does not affect the upstream `git` cli.\n\n### Patches\nUsers running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.11` in order to mitigate this vulnerability.\n\n### Workarounds\nIn cases where a bump to the latest version of `go-git` is not possible, we recommend limiting its use to only trust-worthy Git servers.\n\n## Credit\nThanks to Ionut Lalu for responsibly disclosing this vulnerability to us.\n\n### References\n- [GHSA-mw99-9chc-xw7r](https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r)\n","status":"published","published":"2023-12-27T15:06:52Z","modified":"2025-01-06T15:20:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:38:26.167657Z"}],"nvd":[{"id":"CVE-2023-49568","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T11:15:12.68Z","modified":"2026-06-17T06:36:10.43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:09:00.788714Z"}],"osv":[{"id":"ALPINE-CVE-2023-49568","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T11:15:12.68Z","modified":"2026-11-03T06:32:59.506437245Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"AZL-33892","title":"CVE-2023-49568 affecting package packer for versions less than 1.9.5-3","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T11:15:12Z","modified":"2026-04-21T04:26:58.083607Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-35095","title":"CVE-2023-49568 affecting package packer for versions less than 1.9.5-1","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T11:15:12Z","modified":"2026-04-21T04:47:56.990306Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-39595","title":"CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T11:15:12Z","modified":"2026-04-21T04:28:46.25517Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"CVE-2023-49568","title":"Maliciously crafted Git server replies can cause DoS on go-git clients","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.\n\nApplications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.\nThis is a go-git implementation issue and does not affect the upstream git cli.\n\n\n","status":"published","published":"2024-01-12T10:36:12.727Z","modified":"2026-10-28T02:30:27.00687876Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:34.72355Z"},{"id":"DEBIAN-CVE-2023-49568","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.  Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.","status":"published","published":"2024-01-12T11:15:12.68Z","modified":"2026-10-26T18:02:35.848932307Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"GHSA-mw99-9chc-xw7r","title":"Maliciously crafted Git server replies can cause DoS on go-git clients","description":"### Impact\nA denial of service (DoS) vulnerability was discovered in go-git versions prior to `v5.11`. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in `go-git` clients. \n\nApplications using only the in-memory filesystem supported by `go-git` are not affected by this vulnerability.\nThis is a `go-git` implementation issue and does not affect the upstream `git` cli.\n\n### Patches\nUsers running versions of `go-git` from `v4` and above are recommended to upgrade to `v5.11` in order to mitigate this vulnerability.\n\n### Workarounds\nIn cases where a bump to the latest version of `go-git` is not possible, we recommend limiting its use to only trust-worthy Git servers.\n\n## Credit\nThanks to Ionut Lalu for responsibly disclosing this vulnerability to us.\n\n### References\n- [GHSA-mw99-9chc-xw7r](https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r)\n","status":"published","published":"2023-12-27T15:06:52Z","modified":"2026-09-10T03:49:59.65775188Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:46:52.534897Z"},{"id":"RHSA-2024:0880","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.31.1 security update","status":"published","published":"2024-10-01T23:37:43Z","modified":"2026-10-18T10:02:15Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:3925","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, enhancements, and bug fix update","status":"published","published":"2024-09-30T15:53:31Z","modified":"2026-10-15T10:08:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-49568","description":"A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.","status":"published","published":"2024-01-12T11:15:00Z","modified":"2026-03-14T08:54:34.497612Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"GO-2024-2466","title":"Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4","description":"Denial of service in github.com/go-git/go-git/v5 and gopkg.in/src-d/go-git.v4","status":"published","published":"2024-01-23T18:00:21Z","modified":"2026-02-04T04:24:24.529631Z","updated_at":"2026-11-02T15:47:01.185262Z"},{"id":"USN-8088-1","title":"golang-github-go-git-go-git vulnerabilities","description":"Ionut Lalu discovered that go-git incorrectly handled certain specially\ncrafted Git server responses. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2023-49568, CVE-2025-21614)\n\nIonut Lalu discovered that go-git incorrectly handled file system paths\nwhen using the ChrootOS implementation. A remote attacker could possibly\nuse this issue to perform a path traversal and create or modify arbitrary\nfiles, leading to remote code execution. (CVE-2023-49569)\n\nIt was discovered that go-git did not properly sanitize arguments when\ninvoking git-upload-pack using the file transport protocol. An attacker\ncould possibly use this issue to inject arbitrary flag values when\ninteracting with local Git repositories. (CVE-2025-21613)\n\nIt was discovered that go-git did not properly verify integrity checks for\npack and index files. An attacker could possibly use this issue to cause\ngo-git to process corrupted repository data, resulting in unexpected errors\nor an incorrect repository state. (CVE-2026-25934)","status":"published","published":"2026-03-12T15:53:02Z","modified":"2026-04-27T18:41:29.619775Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}