Bug 2077689 (CVE-2022-28327) - CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar
Summary: CVE-2022-28327 golang: crypto/elliptic: panic caused by oversized scalar
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2022-28327
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2081538 Red Hat2083382 Red Hat2084354 Red Hat2084355 2084853 2084855 2084856 2084857 2084858 2084859 2084860 2084861 2084862 2084863 2084864 2084866 2084867 2084868 2084869 2084870 2084872 2084873 2084875 2084877 Red Hat2102786 Red Hat2105178 Red Hat2105179 Red Hat2105180 Red Hat2105181 Red Hat2105182 Red Hat2079726 Red Hat2079727 Red Hat2079728 Red Hat2079729 Red Hat2079730 Red Hat2079731 Red Hat2079732 Red Hat2079733 Red Hat2079734 Red Hat2079736 Red Hat2079737 Red Hat2079738 Red Hat2079821 Red Hat2079822 Red Hat2079823 Red Hat2079824 2079825 2079826 Red Hat2081498 Red Hat2081499 Red Hat2081500 Red Hat2081501 Red Hat2081502 Red Hat2081503 Red Hat2081505 Red Hat2081506 Red Hat2081508 Red Hat2081509 Red Hat2081510 Red Hat2081511 Red Hat2081512 Red Hat2081513 Red Hat2081514 Red Hat2083276 Red Hat2083277 Red Hat2083278 Red Hat2083279 Red Hat2083280 Red Hat2083281 Red Hat2083282 Red Hat2083283 Red Hat2083284 Red Hat2083285 Red Hat2083286 Red Hat2083287 Red Hat2083288 Red Hat2083289 Red Hat2083290 Red Hat2083291 Red Hat2083292 Red Hat2083381 Red Hat2083801 Red Hat2083802 Red Hat2083803 Red Hat2083804 Red Hat2083805 Red Hat2083806 Red Hat2083807 Red Hat2083808 Red Hat2083809 Red Hat2083810 Red Hat2083811 Red Hat2083812 Red Hat2083815 Red Hat2083816 Red Hat2083817 Red Hat2083818 Red Hat2083819 Red Hat2083820 Red Hat2083821 Red Hat2083822 Red Hat2083823 Red Hat2083824 Red Hat2083825 Red Hat2083826 Red Hat2083827 Red Hat2083828 Red Hat2083829 Red Hat2083830 Red Hat2083831 Red Hat2083832 Red Hat2083834 Red Hat2083835 Red Hat2083836 Red Hat2083837 Red Hat2083838 Red Hat2084277 Red Hat2084278 Red Hat2084346 Red Hat2084347 Red Hat2084348 Red Hat2084349 Red Hat2084350 Red Hat2084351 Red Hat2084352 Red Hat2084353 2084854 2084865 2084871 2084874 2084876 Engineering2096608 Engineering2096609 Engineering2096610 Engineering2096611 Engineering2096612 Engineering2096613 Engineering2096614 Engineering2096615 Engineering2096625 Engineering2096626 Engineering2096627 Engineering2096628 Engineering2096629 Engineering2096630 Engineering2096631 Engineering2096632 Engineering2096633 Engineering2096634 Engineering2096635 Engineering2096636 Engineering2096637 Engineering2096639 Engineering2096640 Engineering2096641 Engineering2096642 Engineering2096643 Engineering2096644 Engineering2096645 Engineering2096646 Engineering2096647 Engineering2096648 Engineering2096649 Engineering2096650 Engineering2096651 Engineering2096652 Engineering2096653 Engineering2096654 Engineering2096655 Engineering2096656 Engineering2096657 Engineering2096658 Engineering2096659 Engineering2096660 Engineering2096661 Engineering2096662 Engineering2096663 Engineering2096664 Engineering2096665 Engineering2096666 Engineering2096667 Engineering2096668 Engineering2096669 Engineering2096670 Engineering2096671 Engineering2096672 Engineering2096673 Engineering2096674 Engineering2096675 Engineering2096676 Engineering2096677 Engineering2096678 Engineering2096679 Engineering2096680 Engineering2096681 Engineering2096682 Engineering2096683 Engineering2096684 Engineering2096685 Engineering2096686 Engineering2096687 Engineering2096688 Red Hat2102785 Red Hat2127299 Red Hat2127300 Red Hat2168805
Blocks: Embargoed2077686
TreeView+ depends on / blocked
 
Reported: 2022-04-21 22:35 UTC by Nick Tait
Modified: 2023-03-30 00:43 UTC (History)
273 users (show)

Fixed In Version: go 1.17.9, go 1.18.1
Doc Type: If docs needed, set a value
Doc Text:
An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256().ScalarMult or P256().ScalarBaseMult to panic, leading to a loss of availability.
Clone Of:
Environment:
Last Closed: 2022-12-09 12:33:13 UTC

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2022:5006 0 None None None 2022-06-13 12:44:35 UTC
Red Hat Product Errata RHSA-2022:5068 0 None None None 2022-08-10 10:09:34 UTC
Red Hat Product Errata RHSA-2022:5337 0 None None None 2022-06-28 15:16:47 UTC
Red Hat Product Errata RHSA-2022:5415 0 None None None 2022-06-28 19:26:30 UTC
Red Hat Product Errata RHSA-2022:5840 0 None None None 2022-08-02 07:45:08 UTC
Red Hat Product Errata RHSA-2022:5875 0 None None None 2022-08-09 02:35:56 UTC
Red Hat Product Errata RHSA-2022:6040 0 None None None 2022-08-10 13:15:21 UTC
Red Hat Product Errata RHSA-2022:6042 0 None None None 2022-08-10 11:37:00 UTC
Red Hat Product Errata RHSA-2022:6094 0 None None None 2022-08-23 18:12:23 UTC
Red Hat Product Errata RHSA-2022:6152 0 None None None 2022-09-01 05:40:54 UTC
Red Hat Product Errata RHSA-2022:6155 0 None None None 2022-08-24 13:41:33 UTC
Red Hat Product Errata RHSA-2022:6156 0 None None None 2022-08-24 13:47:52 UTC
Red Hat Product Errata RHSA-2022:6187 0 None None None 2022-08-25 10:09:10 UTC
Red Hat Product Errata RHSA-2022:6277 0 None None None 2022-08-31 16:56:05 UTC
Red Hat Product Errata RHSA-2022:6290 0 None None None 2022-09-01 01:24:49 UTC
Red Hat Product Errata RHSA-2022:6526 0 None None None 2022-09-14 19:28:12 UTC
Red Hat Product Errata RHSA-2022:6714 0 None None None 2022-09-26 15:26:59 UTC
Red Hat Product Errata RHSA-2022:8750 0 None None None 2022-12-01 21:10:06 UTC
Red Hat Product Errata RHSA-2023:1042 0 None None None 2023-03-06 18:39:06 UTC
Red Hat Product Errata RHSA-2023:1529 0 None None None 2023-03-30 00:43:05 UTC

Description Nick Tait 2022-04-21 22:35:45 UTC 
crypto/elliptic: tolerate all oversized scalars in generic P-256

A crafted scalar input longer than 32 bytes can cause P256().ScalarMult or P256().ScalarBaseMult to panic. Indirect uses through crypto/ecdsa and crypto/tls are unaffected. amd64, arm64, ppc64le, and s390x are unaffected.

This was discovered thanks to a Project Wycheproof test vector.

This is CVE-2022-28327 and https://go.dev/issue/52075.
Comment 1 Nick Tait 2022-04-21 22:53:38 UTC 
patch is here: https://go-review.googlesource.com/c/go/+/397135/
Comment 5 TEJ RATHI 2022-04-28 10:21:21 UTC 
Created golang tracking bugs for this issue:

Affects: epel-all [bug 2079825]
Affects: fedora-all [bug 2079826]
Comment 10 Anten Skrabec 2022-05-03 22:32:57 UTC 
Created golang tracking bugs for this issue:

Affects: openstack-rdo [bug 2081538]
Comment 17 Sage McTaggart 2022-05-12 16:51:58 UTC 
Created aerc tracking bugs for this issue:

Affects: fedora-34 [bug 2084878]


Created age tracking bugs for this issue:

Affects: fedora-34 [bug 2084879]


Created apache-cloudstack-cloudmonkey tracking bugs for this issue:

Affects: fedora-34 [bug 2084880]


Created bettercap tracking bugs for this issue:

Affects: fedora-34 [bug 2084881]


Created buildah tracking bugs for this issue:

Affects: fedora-34 [bug 2084882]


Created butane tracking bugs for this issue:

Affects: fedora-34 [bug 2084883]


Created caddy tracking bugs for this issue:

Affects: fedora-34 [bug 2084884]


Created cadvisor tracking bugs for this issue:

Affects: fedora-34 [bug 2084885]


Created chaos-client tracking bugs for this issue:

Affects: fedora-34 [bug 2084886]


Created chisel tracking bugs for this issue:

Affects: fedora-34 [bug 2084887]


Created clash tracking bugs for this issue:

Affects: fedora-34 [bug 2084888]


Created conmon tracking bugs for this issue:

Affects: fedora-34 [bug 2084889]


Created containerd tracking bugs for this issue:

Affects: fedora-34 [bug 2084890]


Created containernetworking-plugins tracking bugs for this issue:

Affects: fedora-34 [bug 2084891]


Created cri-o:1.17/cri-o tracking bugs for this issue:

Affects: fedora-34 [bug 2084892]


Created cri-o:1.20/cri-tools tracking bugs for this issue:

Affects: fedora-34 [bug 2084893]


Created crlfuzz tracking bugs for this issue:

Affects: fedora-34 [bug 2084894]


Created direnv tracking bugs for this issue:

Affects: fedora-34 [bug 2084895]


Created dnscrypt-proxy tracking bugs for this issue:

Affects: epel-8 [bug 2084862]
Affects: fedora-34 [bug 2084896]


Created dnscrypt-proxy2 tracking bugs for this issue:

Affects: epel-7 [bug 2084853]


Created dnsprobe tracking bugs for this issue:

Affects: fedora-34 [bug 2084897]


Created doctl tracking bugs for this issue:

Affects: fedora-34 [bug 2084898]


Created etcd tracking bugs for this issue:

Affects: fedora-34 [bug 2084899]


Created exercism tracking bugs for this issue:

Affects: fedora-34 [bug 2084900]


Created fedora-coreos-config-transpiler tracking bugs for this issue:

Affects: fedora-34 [bug 2084901]


Created ffuf tracking bugs for this issue:

Affects: fedora-34 [bug 2084902]


Created geoipupdate tracking bugs for this issue:

Affects: fedora-34 [bug 2084903]


Created gh tracking bugs for this issue:

Affects: fedora-34 [bug 2084904]


Created git-lfs tracking bugs for this issue:

Affects: epel-7 [bug 2084854]
Affects: fedora-34 [bug 2084905]


Created gitjacker tracking bugs for this issue:

Affects: fedora-34 [bug 2084906]


Created golang-github-prometheus tracking bugs for this issue:

Affects: epel-7 [bug 2084855]
Affects: epel-8 [bug 2084863]


Created golang-github-prometheus-alertmanager tracking bugs for this issue:

Affects: epel-8 [bug 2084864]


Created golang-github-prometheus-node-exporter tracking bugs for this issue:

Affects: epel-7 [bug 2084856]
Affects: epel-8 [bug 2084865]


Created golang-googlecode-go-crypto tracking bugs for this issue:

Affects: epel-7 [bug 2084857]


Created golang-x-crypto tracking bugs for this issue:

Affects: epel-8 [bug 2084866]


Created golang-x-net tracking bugs for this issue:

Affects: epel-8 [bug 2084867]


Created golang-x-text tracking bugs for this issue:

Affects: epel-8 [bug 2084868]


Created golie tracking bugs for this issue:

Affects: epel-7 [bug 2084858]
Affects: epel-8 [bug 2084869]


Created micro tracking bugs for this issue:

Affects: epel-8 [bug 2084870]


Created pack tracking bugs for this issue:

Affects: epel-8 [bug 2084871]


Created rclone tracking bugs for this issue:

Affects: epel-7 [bug 2084859]
Affects: epel-8 [bug 2084872]


Created reg tracking bugs for this issue:

Affects: epel-7 [bug 2084860]
Affects: epel-8 [bug 2084873]


Created restic tracking bugs for this issue:

Affects: epel-8 [bug 2084874]


Created snapd tracking bugs for this issue:

Affects: epel-7 [bug 2084861]
Affects: epel-8 [bug 2084875]


Created syncthing tracking bugs for this issue:

Affects: epel-8 [bug 2084876]


Created yubihsm-connector tracking bugs for this issue:

Affects: epel-8 [bug 2084877]
Comment 18 Sage McTaggart 2022-05-12 20:14:32 UTC 
Created gobuster tracking bugs for this issue:

Affects: fedora-34 [bug 2085131]


Created golang tracking bugs for this issue:

Affects: fedora-34 [bug 2085132]


Created golang-ariga-atlas tracking bugs for this issue:

Affects: fedora-34 [bug 2085133]


Created golang-bazil-fuse tracking bugs for this issue:

Affects: fedora-34 [bug 2085134]


Created golang-cloud-google tracking bugs for this issue:

Affects: fedora-34 [bug 2085135]


Created golang-contrib-opencensus-exporter-ocagent tracking bugs for this issue:

Affects: fedora-34 [bug 2085136]


Created golang-contrib-opencensus-exporter-stackdriver tracking bugs for this issue:

Affects: fedora-34 [bug 2085137]


Created golang-github-acme-lego tracking bugs for this issue:

Affects: fedora-34 [bug 2085138]


Created golang-github-acme-lego-3 tracking bugs for this issue:

Affects: fedora-34 [bug 2085139]


Created golang-github-ajstarks-deck tracking bugs for this issue:

Affects: fedora-34 [bug 2085140]


Created golang-github-akamai-akamaiopen-edgegrid tracking bugs for this issue:

Affects: fedora-34 [bug 2085142]


Created golang-github-akihirosuda-containerd-fuse-overlayfs tracking bugs for this issue:

Affects: fedora-34 [bug 2085143]


Created golang-github-alicebob-miniredis tracking bugs for this issue:

Affects: fedora-34 [bug 2085144]


Created golang-github-aliyun-alibaba-cloud-sdk tracking bugs for this issue:

Affects: fedora-34 [bug 2085145]


Created golang-github-aliyun-cli tracking bugs for this issue:

Affects: fedora-34 [bug 2085146]


Created golang-github-anacrolix-dms tracking bugs for this issue:

Affects: fedora-34 [bug 2085147]


Created golang-github-anacrolix-envpprof tracking bugs for this issue:

Affects: fedora-34 [bug 2085148]


Created golang-github-anacrolix-log tracking bugs for this issue:

Affects: fedora-34 [bug 2085149]


Created golang-github-anacrolix-missinggo tracking bugs for this issue:

Affects: fedora-34 [bug 2085150]


Created golang-github-anacrolix-stm tracking bugs for this issue:

Affects: fedora-34 [bug 2085151]


Created golang-github-anacrolix-tagflag tracking bugs for this issue:

Affects: fedora-34 [bug 2085152]


Created golang-github-anaskhan96-soup tracking bugs for this issue:

Affects: fedora-34 [bug 2085153]


Created golang-github-andybalholm-brotli tracking bugs for this issue:

Affects: fedora-34 [bug 2085154]


Created golang-github-andygrunwald-gerrit tracking bugs for this issue:

Affects: fedora-34 [bug 2085155]


Created golang-github-antchfx-htmlquery tracking bugs for this issue:

Affects: fedora-34 [bug 2085156]


Created golang-github-antchfx-jsonquery tracking bugs for this issue:

Affects: fedora-34 [bug 2085158]


Created golang-github-antchfx-xmlquery tracking bugs for this issue:

Affects: fedora-34 [bug 2085159]


Created golang-github-apex-log tracking bugs for this issue:

Affects: fedora-34 [bug 2085160]


Created golang-github-apex-logs tracking bugs for this issue:

Affects: fedora-34 [bug 2085161]


Created golang-github-aquarapid-vaultlib tracking bugs for this issue:

Affects: fedora-34 [bug 2085162]


Created golang-github-aquasecurity-dep-parser tracking bugs for this issue:

Affects: fedora-34 [bug 2085163]


Created golang-github-armon-metrics tracking bugs for this issue:

Affects: fedora-34 [bug 2085164]


Created golang-github-asaskevich-govalidator tracking bugs for this issue:

Affects: fedora-34 [bug 2085166]


Created golang-github-auth0-jwt-middleware tracking bugs for this issue:

Affects: fedora-34 [bug 2085167]


Created golang-github-aws-lambda tracking bugs for this issue:

Affects: fedora-34 [bug 2085168]


Created golang-github-aws-sdk tracking bugs for this issue:

Affects: fedora-34 [bug 2085169]


Created golang-github-aws-sdk-2 tracking bugs for this issue:

Affects: fedora-34 [bug 2085170]


Created golang-github-aws-smithy tracking bugs for this issue:

Affects: fedora-34 [bug 2085171]


Created golang-github-azure-amqp tracking bugs for this issue:

Affects: fedora-34 [bug 2085172]


Created golang-github-azure-amqp-common tracking bugs for this issue:

Affects: fedora-34 [bug 2085173]


Created golang-github-azure-pipeline tracking bugs for this issue:

Affects: fedora-34 [bug 2085174]


Created golang-github-azure-service-bus tracking bugs for this issue:

Affects: fedora-34 [bug 2085175]


Created golang-github-azure-storage-blob tracking bugs for this issue:

Affects: fedora-34 [bug 2085176]


Created golang-github-badoux-checkmail tracking bugs for this issue:

Affects: fedora-34 [bug 2085177]


Created golang-github-couchbase-gomemcached tracking bugs for this issue:

Affects: fedora-34 [bug 2085178]


Created yubihsm-connector tracking bugs for this issue:

Affects: fedora-35 [bug 2085179]
Comment 19 Sage McTaggart 2022-05-12 20:46:38 UTC 
Created golang-github-bketelsen-crypt tracking bugs for this issue:

Affects: fedora-34 [bug 2085190]


Created golang-github-bobesa-domain-util tracking bugs for this issue:

Affects: fedora-34 [bug 2085191]


Created golang-github-bsphere-le tracking bugs for this issue:

Affects: fedora-34 [bug 2085192]


Created golang-github-btcsuite-btcutil-base58 tracking bugs for this issue:

Affects: fedora-34 [bug 2085193]


Created golang-github-certifi-gocertifi tracking bugs for this issue:

Affects: fedora-34 [bug 2085194]


Created golang-github-cheekybits-genny tracking bugs for this issue:

Affects: fedora-34 [bug 2085195]


Created golang-github-chi tracking bugs for this issue:

Affects: fedora-34 [bug 2085196]


Created golang-github-chi-cors tracking bugs for this issue:

Affects: fedora-34 [bug 2085197]


Created golang-github-chromedp tracking bugs for this issue:

Affects: fedora-34 [bug 2085198]


Created golang-github-chromedp-cdproto tracking bugs for this issue:

Affects: fedora-34 [bug 2085199]


Created golang-github-circonus-labs-apiclient tracking bugs for this issue:

Affects: fedora-34 [bug 2085200]


Created golang-github-circonus-labs-gometrics tracking bugs for this issue:

Affects: fedora-34 [bug 2085201]


Created golang-github-cli-oauth tracking bugs for this issue:

Affects: fedora-34 [bug 2085202]


Created golang-github-cli-shurcool-graphql tracking bugs for this issue:

Affects: fedora-34 [bug 2085203]


Created golang-github-clickhouse tracking bugs for this issue:

Affects: fedora-34 [bug 2085204]


Created golang-github-cloudflare tracking bugs for this issue:

Affects: fedora-34 [bug 2085205]


Created golang-github-cloudflare-cfssl tracking bugs for this issue:

Affects: fedora-34 [bug 2085206]


Created golang-github-cockroachdb-cockroach-go tracking bugs for this issue:

Affects: fedora-34 [bug 2085207]


Created golang-github-cockroachdb-datadriven tracking bugs for this issue:

Affects: fedora-34 [bug 2085208]


Created golang-github-cockroachdb-errors tracking bugs for this issue:

Affects: fedora-34 [bug 2085209]


Created golang-github-cockroachdb-pebble tracking bugs for this issue:

Affects: fedora-34 [bug 2085210]


Created golang-github-cockroachdb-sentry tracking bugs for this issue:

Affects: fedora-34 [bug 2085211]


Created golang-github-colinmarc-hdfs-2 tracking bugs for this issue:

Affects: fedora-34 [bug 2085212]


Created golang-github-container-storage-interface-spec tracking bugs for this issue:

Affects: fedora-34 [bug 2085213]


Created golang-github-containerd-aufs tracking bugs for this issue:

Affects: fedora-34 [bug 2085214]
Comment 20 Sage McTaggart 2022-05-12 21:20:48 UTC 
Created golang-github-containerd-fuse-overlayfs-snapshotter tracking bugs for this issue:

Affects: fedora-34 [bug 2085247]


Created golang-github-containerd-imgcrypt tracking bugs for this issue:

Affects: fedora-34 [bug 2085248]


Created golang-github-containerd-nri tracking bugs for this issue:

Affects: fedora-34 [bug 2085249]


Created golang-github-containerd-zfs tracking bugs for this issue:

Affects: fedora-34 [bug 2085250]


Created golang-github-containers-ocicrypt tracking bugs for this issue:

Affects: fedora-34 [bug 2085251]


Created golang-github-coocood-freecache tracking bugs for this issue:

Affects: fedora-34 [bug 2085252]


Created golang-github-coreos-oidc tracking bugs for this issue:

Affects: fedora-34 [bug 2085253]


Created golang-github-coreos-systemd tracking bugs for this issue:

Affects: fedora-34 [bug 2085254]


Created golang-github-cosmos72-gomacro tracking bugs for this issue:

Affects: fedora-34 [bug 2085255]


Created golang-github-couchbase tracking bugs for this issue:

Affects: fedora-34 [bug 2085256]


Created golang-github-cpu-goacmedns tracking bugs for this issue:

Affects: fedora-34 [bug 2085257]


Created golang-github-crewjam-httperr tracking bugs for this issue:

Affects: fedora-34 [bug 2085258]


Created golang-github-crewjam-saml tracking bugs for this issue:

Affects: fedora-34 [bug 2085259]


Created golang-github-cucumber-godog tracking bugs for this issue:

Affects: fedora-34 [bug 2085260]


Created golang-github-data-dog-sqlmock tracking bugs for this issue:

Affects: fedora-34 [bug 2085261]


Created golang-github-decker502-dnspod tracking bugs for this issue:

Affects: fedora-34 [bug 2085262]


Created golang-github-deepmap-oapi-codegen tracking bugs for this issue:

Affects: fedora-34 [bug 2085263]


Created golang-github-deislabs-oras tracking bugs for this issue:

Affects: fedora-34 [bug 2085264]
Comment 21 Sage McTaggart 2022-05-13 15:44:54 UTC 
Created golang-github-denisenkom-mssqldb tracking bugs for this issue:

Affects: fedora-34 [bug 2085554]


Created golang-github-dghubble-oauth1 tracking bugs for this issue:

Affects: fedora-34 [bug 2085556]


Created golang-github-dghubble-sessions tracking bugs for this issue:

Affects: fedora-34 [bug 2085557]


Created golang-github-dghubble-sling tracking bugs for this issue:

Affects: fedora-34 [bug 2085558]


Created golang-github-dghubble-twitter tracking bugs for this issue:

Affects: fedora-34 [bug 2085559]


Created golang-github-digitalocean-godo tracking bugs for this issue:

Affects: fedora-34 [bug 2085560]


Created golang-github-distribution-3 tracking bugs for this issue:

Affects: fedora-34 [bug 2085561]


Created golang-github-dnaeon-vcr tracking bugs for this issue:

Affects: fedora-34 [bug 2085563]


Created golang-github-dnsimple tracking bugs for this issue:

Affects: fedora-34 [bug 2085564]


Created golang-github-docker-distribution tracking bugs for this issue:

Affects: fedora-34 [bug 2085565]


Created golang-github-docker-metrics tracking bugs for this issue:

Affects: fedora-34 [bug 2085566]


Created golang-github-docker-slim tracking bugs for this issue:

Affects: fedora-34 [bug 2085567]


Created golang-github-doug-martin-goqu-8 tracking bugs for this issue:

Affects: fedora-34 [bug 2085568]


Created golang-github-dpotapov-spnego tracking bugs for this issue:

Affects: fedora-34 [bug 2085569]


Created golang-github-dravenk-webthing tracking bugs for this issue:

Affects: fedora-34 [bug 2085570]


Created golang-github-duosecurity-duo-api tracking bugs for this issue:

Affects: fedora-34 [bug 2085571]
Comment 22 Sage McTaggart 2022-05-13 17:18:14 UTC 
Created golang-github-dvsekhvalnov-jose2go tracking bugs for this issue:

Affects: fedora-34 [bug 2085648]


Created golang-github-eclipse-paho-mqtt tracking bugs for this issue:

Affects: fedora-34 [bug 2085649]


Created golang-github-elastic-elasticsearch-6 tracking bugs for this issue:

Affects: fedora-34 [bug 2085650]


Created golang-github-elazarl-goproxy tracking bugs for this issue:

Affects: fedora-34 [bug 2085651]


Created golang-github-elves-elvish tracking bugs for this issue:

Affects: fedora-34 [bug 2085652]


Created golang-github-emersion-imap tracking bugs for this issue:

Affects: fedora-34 [bug 2085653]


Created golang-github-emersion-imap-idle tracking bugs for this issue:

Affects: fedora-34 [bug 2085654]


Created golang-github-emersion-imap-sortthread tracking bugs for this issue:

Affects: fedora-34 [bug 2085655]


Created golang-github-emersion-pgpmail tracking bugs for this issue:

Affects: fedora-34 [bug 2085656]


Created golang-github-emersion-smtp tracking bugs for this issue:

Affects: fedora-34 [bug 2085657]


Created golang-github-emicklei-restful tracking bugs for this issue:

Affects: fedora-34 [bug 2085658]


Created golang-github-enescakir-emoji tracking bugs for this issue:

Affects: fedora-34 [bug 2085659]


Created golang-github-envoyproxy-control-plane tracking bugs for this issue:

Affects: fedora-34 [bug 2085660]


Created golang-github-envoyproxy-protoc-gen-validate tracking bugs for this issue:

Affects: fedora-34 [bug 2085661]


Created golang-github-evanw-esbuild tracking bugs for this issue:

Affects: fedora-34 [bug 2085662]


Created golang-github-facebook-ent tracking bugs for this issue:

Affects: fedora-34 [bug 2085663]


Created golang-github-facebookincubator-go2chef tracking bugs for this issue:

Affects: fedora-34 [bug 2085664]


Created golang-github-facebookincubator-ntp tracking bugs for this issue:

Affects: fedora-34 [bug 2085665]


Created golang-github-facebookincubator-ptp tracking bugs for this issue:

Affects: fedora-34 [bug 2085666]


Created golang-github-felixge-httpsnoop tracking bugs for this issue:

Affects: fedora-34 [bug 2085667]


Created golang-github-fnproject-fdk tracking bugs for this issue:

Affects: fedora-34 [bug 2085668]


Created golang-github-francoispqt-gojay tracking bugs for this issue:

Affects: fedora-34 [bug 2085669]


Created golang-github-fsouza-dockerclient tracking bugs for this issue:

Affects: fedora-34 [bug 2085670]


Created golang-github-gddo tracking bugs for this issue:

Affects: fedora-34 [bug 2085671]


Created golang-github-geertjohan-rice tracking bugs for this issue:

Affects: fedora-34 [bug 2085672]


Created golang-github-getkin-kin-openapi tracking bugs for this issue:

Affects: fedora-34 [bug 2085673]


Created golang-github-gin-contrib-cors tracking bugs for this issue:

Affects: fedora-34 [bug 2085674]


Created golang-github-gin-contrib-sse tracking bugs for this issue:

Affects: fedora-34 [bug 2085675]


Created golang-github-gin-gonic tracking bugs for this issue:

Affects: fedora-34 [bug 2085676]


Created golang-github-gin-gonic-autotls tracking bugs for this issue:

Affects: fedora-34 [bug 2085677]
Comment 23 Sage McTaggart 2022-05-13 17:30:08 UTC 
Created golang-github-gin-contrib-static tracking bugs for this issue:

Affects: fedora-34 [bug 2085681]


Created golang-github-gobuffalo-packd tracking bugs for this issue:

Affects: fedora-34 [bug 2085682]


Created golang-github-gobuffalo-packr tracking bugs for this issue:

Affects: fedora-34 [bug 2085683]


Created golang-github-gocolly-colly-2 tracking bugs for this issue:

Affects: fedora-34 [bug 2085684]


Created golang-github-gocql tracking bugs for this issue:

Affects: fedora-34 [bug 2085685]


Created golang-github-gomodule-redigo tracking bugs for this issue:

Affects: fedora-34 [bug 2085686]


Created golang-github-google-cel tracking bugs for this issue:

Affects: fedora-34 [bug 2085687]


Created golang-github-google-certificate-transparency tracking bugs for this issue:

Affects: fedora-34 [bug 2085688]


Created golang-github-google-containerregistry tracking bugs for this issue:

Affects: fedora-34 [bug 2085689]


Created golang-github-google-go-github tracking bugs for this issue:

Affects: fedora-34 [bug 2085690]


Created golang-github-google-gopacket tracking bugs for this issue:

Affects: fedora-34 [bug 2085691]


Created golang-github-google-gousb tracking bugs for this issue:

Affects: fedora-34 [bug 2085692]


Created golang-github-google-martian tracking bugs for this issue:

Affects: fedora-34 [bug 2085693]


Created golang-github-google-monologue tracking bugs for this issue:

Affects: fedora-34 [bug 2085694]


Created golang-github-google-pprof tracking bugs for this issue:

Affects: fedora-34 [bug 2085695]


Created golang-github-google-trillian tracking bugs for this issue:

Affects: fedora-34 [bug 2085696]


Created golang-github-google-tspi tracking bugs for this issue:

Affects: fedora-34 [bug 2085697]


Created golang-github-googleapis-gax tracking bugs for this issue:

Affects: fedora-34 [bug 2085698]


Created golang-github-googleapis-gnostic tracking bugs for this issue:

Affects: fedora-34 [bug 2085699]


Created golang-github-googlecloudplatform-cloudsql-proxy tracking bugs for this issue:

Affects: fedora-34 [bug 2085700]


Created golang-github-googlecloudplatform-k8s-cloud-provider tracking bugs for this issue:

Affects: fedora-34 [bug 2085701]


Created golang-github-gophercloud tracking bugs for this issue:

Affects: fedora-34 [bug 2085702]


Created golang-github-gophercloud-utils tracking bugs for this issue:

Affects: fedora-34 [bug 2085703]


Created golang-github-gorilla-csrf tracking bugs for this issue:

Affects: fedora-34 [bug 2085704]


Created golang-github-gorilla-handlers tracking bugs for this issue:

Affects: fedora-34 [bug 2085705]


Created golang-github-gorilla-mux tracking bugs for this issue:

Affects: fedora-34 [bug 2085706]


Created golang-github-gorilla-sessions tracking bugs for this issue:

Affects: fedora-34 [bug 2085707]


Created golang-github-gorilla-websocket tracking bugs for this issue:

Affects: fedora-34 [bug 2085708]


Created golang-github-gosidekick-goconfig tracking bugs for this issue:

Affects: fedora-34 [bug 2085709]


Created golang-github-graph-gophers-graphql tracking bugs for this issue:

Affects: fedora-34 [bug 2085710]


Created golang-github-graphql tracking bugs for this issue:

Affects: fedora-34 [bug 2085711]


Created golang-github-grpc-ecosystem-gateway tracking bugs for this issue:

Affects: fedora-34 [bug 2085712]


Created golang-github-grpc-ecosystem-middleware tracking bugs for this issue:

Affects: fedora-34 [bug 2085713]


Created golang-github-grpc-ecosystem-prometheus tracking bugs for this issue:

Affects: fedora-34 [bug 2085714]


Created golang-github-haproxytech-client-native tracking bugs for this issue:

Affects: fedora-34 [bug 2085715]


Created golang-github-haproxytech-dataplaneapi tracking bugs for this issue:

Affects: fedora-34 [bug 2085716]


Created golang-github-haproxytech-models tracking bugs for this issue:

Affects: fedora-34 [bug 2085717]


Created golang-github-hashicorp-checkpoint tracking bugs for this issue:

Affects: fedora-34 [bug 2085718]


Created golang-github-hashicorp-cleanhttp tracking bugs for this issue:

Affects: fedora-34 [bug 2085719]


Created golang-github-hashicorp-consul-sdk tracking bugs for this issue:

Affects: fedora-34 [bug 2085720]
Comment 24 Sage McTaggart 2022-05-16 13:46:53 UTC 
Created golang-github-openapi-validate tracking bugs for this issue:

Affects: fedora-34 [bug 2086709]


Created golang-github-opencontainers-image-spec tracking bugs for this issue:

Affects: fedora-34 [bug 2086710]


Created golang-github-openshift-online-ocm-sdk tracking bugs for this issue:

Affects: fedora-34 [bug 2086711]


Created golang-github-opentracing tracking bugs for this issue:

Affects: fedora-34 [bug 2086712]


Created golang-github-opentracing-basictracer tracking bugs for this issue:

Affects: fedora-34 [bug 2086713]


Created golang-github-opentracing-contrib-grpc tracking bugs for this issue:

Affects: fedora-34 [bug 2086714]


Created golang-github-opentracing-contrib-stdlib tracking bugs for this issue:

Affects: fedora-34 [bug 2086715]


Created golang-github-openzipkin-contrib-zipkin-opentracing tracking bugs for this issue:

Affects: fedora-34 [bug 2086716]


Created golang-github-openzipkin-zipkin tracking bugs for this issue:

Affects: fedora-34 [bug 2086717]
Comment 25 Sage McTaggart 2022-05-17 20:06:20 UTC 
Created golang-github-stretchr-testify tracking bugs for this issue:

Affects: fedora-34 [bug 2087381]


Created golang-github-syndtr-goleveldb tracking bugs for this issue:

Affects: fedora-34 [bug 2087382]


Created golang-github-t3rm1n4l-mega tracking bugs for this issue:

Affects: fedora-34 [bug 2087383]


Created golang-github-tdewolff-minify tracking bugs for this issue:

Affects: fedora-34 [bug 2087384]


Created golang-github-temoto-robotstxt tracking bugs for this issue:

Affects: fedora-34 [bug 2087385]


Created golang-github-theoapp-theo-agent tracking bugs for this issue:

Affects: fedora-34 [bug 2087386]


Created golang-github-theupdateframework-notary tracking bugs for this issue:

Affects: fedora-34 [bug 2087387]


Created golang-github-tj-assert tracking bugs for this issue:

Affects: fedora-34 [bug 2087388]


Created golang-github-tonistiigi-actions-cache tracking bugs for this issue:

Affects: fedora-34 [bug 2087389]


Created golang-github-tonistiigi-vt100 tracking bugs for this issue:

Affects: fedora-34 [bug 2087390]


Created golang-github-transip-gotransip tracking bugs for this issue:

Affects: fedora-34 [bug 2087391]


Created golang-github-tv42-httpunix tracking bugs for this issue:

Affects: fedora-34 [bug 2087392]


Created golang-github-twpayne-geom tracking bugs for this issue:

Affects: fedora-34 [bug 2087393]


Created golang-github-twpayne-kml tracking bugs for this issue:

Affects: fedora-34 [bug 2087394]


Created golang-github-unknwon-com tracking bugs for this issue:

Affects: fedora-34 [bug 2087395]


Created golang-github-urfave-cli tracking bugs for this issue:

Affects: fedora-34 [bug 2087396]


Created golang-github-urfave-negroni tracking bugs for this issue:

Affects: fedora-34 [bug 2087397]


Created golang-github-valyala-fasthttp tracking bugs for this issue:

Affects: fedora-34 [bug 2087398]


Created golang-github-vinyldns tracking bugs for this issue:

Affects: fedora-34 [bug 2087399]


Created golang-github-vmware-govmomi tracking bugs for this issue:

Affects: fedora-34 [bug 2087400]


Created golang-github-vultr-govultr tracking bugs for this issue:

Affects: fedora-34 [bug 2087401]


Created golang-github-xanzy-cloudstack tracking bugs for this issue:

Affects: fedora-34 [bug 2087402]


Created golang-github-xanzy-ssh-agent tracking bugs for this issue:

Affects: fedora-34 [bug 2087403]


Created golang-github-xeipuuv-gojsonschema tracking bugs for this issue:

Affects: fedora-34 [bug 2087405]


Created golang-github-yujunz-getter tracking bugs for this issue:

Affects: fedora-34 [bug 2087406]


Created golang-github-yunify-qingstor-sdk tracking bugs for this issue:

Affects: fedora-34 [bug 2087407]


Created golang-github-zmap-zcertificate tracking bugs for this issue:

Affects: fedora-34 [bug 2087408]


Created golang-github-zmap-zcrypto tracking bugs for this issue:

Affects: fedora-34 [bug 2087409]


Created golang-github-zmap-zlint tracking bugs for this issue:

Affects: fedora-34 [bug 2087410]


Created golang-go4 tracking bugs for this issue:

Affects: fedora-34 [bug 2087411]


Created golang-gocloud tracking bugs for this issue:

Affects: fedora-34 [bug 2087412]


Created golang-goftp-server tracking bugs for this issue:

Affects: fedora-34 [bug 2087413]


Created golang-google-api tracking bugs for this issue:

Affects: fedora-34 [bug 2087414]


Created golang-google-appengine tracking bugs for this issue:

Affects: fedora-34 [bug 2087415]


Created golang-google-genproto tracking bugs for this issue:

Affects: fedora-34 [bug 2087416]


Created golang-google-grpc tracking bugs for this issue:

Affects: fedora-34 [bug 2087417]


Created golang-gopkg-macaron-1 tracking bugs for this issue:

Affects: fedora-34 [bug 2087418]


Created golang-gopkg-ns1-2 tracking bugs for this issue:

Affects: fedora-34 [bug 2087419]


Created golang-gopkg-olivere-elastic-5 tracking bugs for this issue:

Affects: fedora-34 [bug 2087420]


Created golang-gopkg-rethinkdb-6 tracking bugs for this issue:

Affects: fedora-34 [bug 2087421]


Created golang-gopkg-src-d-git-4 tracking bugs for this issue:

Affects: fedora-34 [bug 2087422]


Created golang-gvisor tracking bugs for this issue:

Affects: fedora-34 [bug 2087423]


Created golang-hein-version tracking bugs for this issue:

Affects: fedora-34 [bug 2087424]


Created golang-honnef-tools tracking bugs for this issue:

Affects: fedora-34 [bug 2087425]


Created golang-istio-api tracking bugs for this issue:

Affects: fedora-34 [bug 2087426]


Created golang-istio-gogo-genproto tracking bugs for this issue:

Affects: fedora-34 [bug 2087427]


Created golang-istio-pkg tracking bugs for this issue:

Affects: fedora-34 [bug 2087428]


Created golang-k8s-api tracking bugs for this issue:

Affects: fedora-34 [bug 2087429]


Created golang-k8s-apiextensions-apiserver tracking bugs for this issue:

Affects: fedora-34 [bug 2087430]


Created golang-k8s-apimachinery tracking bugs for this issue:

Affects: fedora-34 [bug 2087431]


Created golang-k8s-apiserver tracking bugs for this issue:

Affects: fedora-34 [bug 2087432]


Created golang-k8s-cli-runtime tracking bugs for this issue:

Affects: fedora-34 [bug 2087433]


Created golang-k8s-client tracking bugs for this issue:

Affects: fedora-34 [bug 2087434]


Created golang-k8s-cloud-provider tracking bugs for this issue:

Affects: fedora-34 [bug 2087435]


Created golang-k8s-cluster-bootstrap tracking bugs for this issue:

Affects: fedora-34 [bug 2087436]


Created golang-k8s-code-generator tracking bugs for this issue:

Affects: fedora-34 [bug 2087437]
Comment 26 errata-xmlrpc 2022-06-13 12:44:23 UTC 
This issue has been addressed in the following products:

  OpenShift Service Mesh 2.1

Via RHSA-2022:5006 https://access.redhat.com/errata/RHSA-2022:5006
Comment 30 errata-xmlrpc 2022-06-28 15:16:36 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:5337 https://access.redhat.com/errata/RHSA-2022:5337
Comment 31 errata-xmlrpc 2022-06-28 19:26:21 UTC 
This issue has been addressed in the following products:

  Red Hat Developer Tools

Via RHSA-2022:5415 https://access.redhat.com/errata/RHSA-2022:5415
Comment 43 errata-xmlrpc 2022-08-02 07:44:59 UTC 
This issue has been addressed in the following products:

  Red Hat Migration Toolkit for Containers 1.7

Via RHSA-2022:5840 https://access.redhat.com/errata/RHSA-2022:5840
Comment 46 errata-xmlrpc 2022-08-09 02:35:45 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.10

Via RHSA-2022:5875 https://access.redhat.com/errata/RHSA-2022:5875
Comment 47 errata-xmlrpc 2022-08-10 10:09:25 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.11
  Ironic content for Red Hat OpenShift Container Platform 4.11

Via RHSA-2022:5068 https://access.redhat.com/errata/RHSA-2022:5068
Comment 48 errata-xmlrpc 2022-08-10 11:36:49 UTC 
This issue has been addressed in the following products:

  Openshift Serverless 1 on RHEL 8

Via RHSA-2022:6042 https://access.redhat.com/errata/RHSA-2022:6042
Comment 49 errata-xmlrpc 2022-08-10 13:15:09 UTC 
This issue has been addressed in the following products:

  Openshift Serveless 1.24

Via RHSA-2022:6040 https://access.redhat.com/errata/RHSA-2022:6040
Comment 58 errata-xmlrpc 2022-08-23 18:12:10 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.10

Via RHSA-2022:6094 https://access.redhat.com/errata/RHSA-2022:6094
Comment 59 errata-xmlrpc 2022-08-24 13:41:25 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Data Foundation 4.11 on RHEL8

Via RHSA-2022:6155 https://access.redhat.com/errata/RHSA-2022:6155
Comment 60 errata-xmlrpc 2022-08-24 13:47:40 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Data Foundation 4.11 on RHEL8

Via RHSA-2022:6156 https://access.redhat.com/errata/RHSA-2022:6156
Comment 61 errata-xmlrpc 2022-08-25 10:08:57 UTC 
This issue has been addressed in the following products:

  Node Healthcheck Operator 0.3 for RHEL 8

Via RHSA-2022:6187 https://access.redhat.com/errata/RHSA-2022:6187
Comment 62 errata-xmlrpc 2022-08-31 16:55:50 UTC 
This issue has been addressed in the following products:

  OpenShift Service Mesh 2.1

Via RHSA-2022:6277 https://access.redhat.com/errata/RHSA-2022:6277
Comment 63 errata-xmlrpc 2022-09-01 01:24:36 UTC 
This issue has been addressed in the following products:

  OADP-1.1-RHEL-8

Via RHSA-2022:6290 https://access.redhat.com/errata/RHSA-2022:6290
Comment 64 errata-xmlrpc 2022-09-01 05:40:46 UTC 
This issue has been addressed in the following products:

  OSSO-1.1-RHEL-8

Via RHSA-2022:6152 https://access.redhat.com/errata/RHSA-2022:6152
Comment 66 errata-xmlrpc 2022-09-14 19:28:00 UTC 
This issue has been addressed in the following products:

  RHEL-8-CNV-4.11

Via RHSA-2022:6526 https://access.redhat.com/errata/RHSA-2022:6526
Comment 70 errata-xmlrpc 2022-09-26 15:26:46 UTC 
This issue has been addressed in the following products:

  RHACS-3.72-RHEL-8

Via RHSA-2022:6714 https://access.redhat.com/errata/RHSA-2022:6714
Comment 78 errata-xmlrpc 2022-12-01 21:09:54 UTC 
This issue has been addressed in the following products:

  RHEL-8-CNV-4.11

Via RHSA-2022:8750 https://access.redhat.com/errata/RHSA-2022:8750
Comment 79 Product Security DevOps Team 2022-12-09 12:33:03 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-28327
Comment 80 errata-xmlrpc 2023-03-06 18:38:56 UTC 
This issue has been addressed in the following products:

  OpenShift Custom Metrics Autoscaler 2

Via RHSA-2023:1042 https://access.redhat.com/errata/RHSA-2023:1042
Comment 82 errata-xmlrpc 2023-03-30 00:42:55 UTC 
This issue has been addressed in the following products:

  STF-1.5-RHEL-8

Via RHSA-2023:1529 https://access.redhat.com/errata/RHSA-2023:1529
Note You need to log in before you can comment on or make changes to this bug.