ghcr.io/drakkan/sftpgo:v2.4.2-alpine-slim (alpine 3.16.3) - Trivy Report - 2026-02-28 03:18:14.933635729 +0000 UTC m=+4.022579052
alpine
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
busybox
CVE-2023-42366
MEDIUM
1.35.0-r17
1.35.0-r18
https://access.redhat.com/security/cve/CVE-2023-42366
https://bugs.busybox.net/show_bug.cgi?id=15874
https://nvd.nist.gov/vuln/detail/CVE-2023-42366
https://security.netapp.com/advisory/ntap-20241206-0007/
https://www.cve.org/CVERecord?id=CVE-2023-42366
libcrypto1.1
CVE-2022-4450
HIGH
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2023:2932
https://access.redhat.com/security/cve/CVE-2022-4450
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2023-2932.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b
https://linux.oracle.com/cve/CVE-2022-4450.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4450
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0010.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4450
https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1
CVE-2023-0215
HIGH
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2023:2932
https://access.redhat.com/security/cve/CVE-2023-0215
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2023-2932.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344
https://linux.oracle.com/cve/CVE-2023-0215.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0215
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0009.html
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230427-0007
https://security.netapp.com/advisory/ntap-20230427-0007/
https://security.netapp.com/advisory/ntap-20230427-0009
https://security.netapp.com/advisory/ntap-20230427-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0215
https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1
CVE-2023-0286
HIGH
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2025:7895
https://access.redhat.com/security/cve/CVE-2023-0286
https://access.redhat.com/security/cve/cve-2023-0286
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2025-7895.html
https://errata.rockylinux.org/RLSA-2023:0946
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
https://github.com/pyca/cryptography
https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5
https://linux.oracle.com/cve/CVE-2023-0286.html
https://linux.oracle.com/errata/ELSA-2025-7937.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0286
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0006.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0286
https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1
CVE-2023-0464
HIGH
1.1.1s-r0
1.1.1t-r1
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0464
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1
https://linux.oracle.com/cve/CVE-2023-0464.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0464
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230406-0006/
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.couchbase.com/alerts/
https://www.cve.org/CVERecord?id=CVE-2023-0464
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230322.txt
libcrypto1.1
CVE-2022-4304
MEDIUM
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2023:2932
https://access.redhat.com/security/cve/CVE-2022-4304
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2023-2932.html
https://errata.rockylinux.org/RLSA-2023:0946
https://linux.oracle.com/cve/CVE-2022-4304.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4304
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0007.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4304
https://www.openssl.org/news/secadv/20230207.txt
libcrypto1.1
CVE-2023-0465
MEDIUM
1.1.1s-r0
1.1.1t-r2
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0465
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c
https://linux.oracle.com/cve/CVE-2023-0465.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0465
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230414-0001/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0465
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230328.txt
libcrypto1.1
CVE-2023-2650
MEDIUM
1.1.1s-r0
1.1.1u-r0
http://www.openwall.com/lists/oss-security/2023/05/30/1
https://access.redhat.com/errata/RHSA-2023:6330
https://access.redhat.com/security/cve/CVE-2023-2650
https://bugzilla.redhat.com/1858038
https://bugzilla.redhat.com/2207947
https://errata.almalinux.org/9/ALSA-2023-6330.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a
https://linux.oracle.com/cve/CVE-2023-2650.html
https://linux.oracle.com/errata/ELSA-2023-6330.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-2650
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230703-0001/
https://security.netapp.com/advisory/ntap-20231027-0009/
https://ubuntu.com/security/notices/USN-6119-1
https://ubuntu.com/security/notices/USN-6188-1
https://ubuntu.com/security/notices/USN-6672-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-2650
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230530.txt
libcrypto1.1
CVE-2023-3446
MEDIUM
1.1.1s-r0
1.1.1u-r2
http://www.openwall.com/lists/oss-security/2023/07/19/4
http://www.openwall.com/lists/oss-security/2023/07/19/5
http://www.openwall.com/lists/oss-security/2023/07/19/6
http://www.openwall.com/lists/oss-security/2023/07/31/1
http://www.openwall.com/lists/oss-security/2024/05/16/1
https://access.redhat.com/errata/RHSA-2024:0888
https://access.redhat.com/security/cve/CVE-2023-3446
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2257582
https://bugzilla.redhat.com/show_bug.cgi?id=2257583
https://bugzilla.redhat.com/show_bug.cgi?id=2258677
https://bugzilla.redhat.com/show_bug.cgi?id=2258688
https://bugzilla.redhat.com/show_bug.cgi?id=2258691
https://bugzilla.redhat.com/show_bug.cgi?id=2258694
https://bugzilla.redhat.com/show_bug.cgi?id=2258700
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235
https://errata.almalinux.org/8/ALSA-2024-0888.html
https://errata.rockylinux.org/RLSA-2024:2264
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23
https://linux.oracle.com/cve/CVE-2023-3446.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
https://nvd.nist.gov/vuln/detail/CVE-2023-3446
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230803-0011/
https://ubuntu.com/security/notices/USN-6435-1
https://ubuntu.com/security/notices/USN-6435-2
https://ubuntu.com/security/notices/USN-6450-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7018-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-3446
https://www.openssl.org/news/secadv/20230719.txt
libcrypto1.1
CVE-2023-3817
MEDIUM
1.1.1s-r0
1.1.1v-r0
http://seclists.org/fulldisclosure/2023/Jul/43
http://www.openwall.com/lists/oss-security/2023/07/31/1
http://www.openwall.com/lists/oss-security/2023/09/22/11
http://www.openwall.com/lists/oss-security/2023/09/22/9
http://www.openwall.com/lists/oss-security/2023/11/06/2
https://access.redhat.com/errata/RHSA-2023:7877
https://access.redhat.com/security/cve/CVE-2023-3817
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/2227852
https://bugzilla.redhat.com/2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2227852
https://bugzilla.redhat.com/show_bug.cgi?id=2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2270358
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408
https://errata.almalinux.org/8/ALSA-2023-7877.html
https://errata.rockylinux.org/RLSA-2023:7877
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5
https://linux.oracle.com/cve/CVE-2023-3817.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
https://nvd.nist.gov/vuln/detail/CVE-2023-3817
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230818-0014/
https://security.netapp.com/advisory/ntap-20231027-0008/
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-6435-1
https://ubuntu.com/security/notices/USN-6435-2
https://ubuntu.com/security/notices/USN-6450-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-3817
https://www.openssl.org/news/secadv/20230731.txt
libcrypto1.1
CVE-2023-5678
MEDIUM
1.1.1s-r0
1.1.1w-r1
http://www.openwall.com/lists/oss-security/2024/03/11/1
https://access.redhat.com/errata/RHSA-2023:7877
https://access.redhat.com/security/cve/CVE-2023-5678
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/2227852
https://bugzilla.redhat.com/2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2227852
https://bugzilla.redhat.com/show_bug.cgi?id=2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2270358
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408
https://errata.almalinux.org/8/ALSA-2023-7877.html
https://errata.rockylinux.org/RLSA-2023:7877
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
https://linux.oracle.com/cve/CVE-2023-5678.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html
https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2023-5678
https://security.netapp.com/advisory/ntap-20231130-0010/
https://ubuntu.com/security/notices/USN-6622-1
https://ubuntu.com/security/notices/USN-6632-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-5678
https://www.openssl.org/news/secadv/20231106.txt
libssl1.1
CVE-2022-4450
HIGH
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2023:2932
https://access.redhat.com/security/cve/CVE-2022-4450
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2023-2932.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b
https://linux.oracle.com/cve/CVE-2022-4450.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4450
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0010.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4450
https://www.openssl.org/news/secadv/20230207.txt
libssl1.1
CVE-2023-0215
HIGH
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2023:2932
https://access.redhat.com/security/cve/CVE-2023-0215
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2023-2932.html
https://errata.rockylinux.org/RLSA-2023:0946
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344
https://linux.oracle.com/cve/CVE-2023-0215.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0215
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0009.html
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230427-0007
https://security.netapp.com/advisory/ntap-20230427-0007/
https://security.netapp.com/advisory/ntap-20230427-0009
https://security.netapp.com/advisory/ntap-20230427-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0215
https://www.openssl.org/news/secadv/20230207.txt
libssl1.1
CVE-2023-0286
HIGH
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2025:7895
https://access.redhat.com/security/cve/CVE-2023-0286
https://access.redhat.com/security/cve/cve-2023-0286
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2025-7895.html
https://errata.rockylinux.org/RLSA-2023:0946
https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
https://github.com/pyca/cryptography
https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5
https://linux.oracle.com/cve/CVE-2023-0286.html
https://linux.oracle.com/errata/ELSA-2025-7937.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0286
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0006.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-5845-1
https://ubuntu.com/security/notices/USN-5845-2
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0286
https://www.openssl.org/news/secadv/20230207.txt
libssl1.1
CVE-2023-0464
HIGH
1.1.1s-r0
1.1.1t-r1
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0464
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1
https://linux.oracle.com/cve/CVE-2023-0464.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0464
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230406-0006/
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.couchbase.com/alerts/
https://www.cve.org/CVERecord?id=CVE-2023-0464
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230322.txt
libssl1.1
CVE-2022-4304
MEDIUM
1.1.1s-r0
1.1.1t-r0
https://access.redhat.com/errata/RHSA-2023:2932
https://access.redhat.com/security/cve/CVE-2022-4304
https://bugzilla.redhat.com/2164440
https://bugzilla.redhat.com/2164487
https://bugzilla.redhat.com/2164492
https://bugzilla.redhat.com/2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2144000
https://bugzilla.redhat.com/show_bug.cgi?id=2144003
https://bugzilla.redhat.com/show_bug.cgi?id=2144006
https://bugzilla.redhat.com/show_bug.cgi?id=2144008
https://bugzilla.redhat.com/show_bug.cgi?id=2144010
https://bugzilla.redhat.com/show_bug.cgi?id=2144012
https://bugzilla.redhat.com/show_bug.cgi?id=2144015
https://bugzilla.redhat.com/show_bug.cgi?id=2144017
https://bugzilla.redhat.com/show_bug.cgi?id=2144019
https://bugzilla.redhat.com/show_bug.cgi?id=2145170
https://bugzilla.redhat.com/show_bug.cgi?id=2158412
https://bugzilla.redhat.com/show_bug.cgi?id=2164440
https://bugzilla.redhat.com/show_bug.cgi?id=2164487
https://bugzilla.redhat.com/show_bug.cgi?id=2164488
https://bugzilla.redhat.com/show_bug.cgi?id=2164492
https://bugzilla.redhat.com/show_bug.cgi?id=2164494
https://bugzilla.redhat.com/show_bug.cgi?id=2164497
https://bugzilla.redhat.com/show_bug.cgi?id=2164499
https://bugzilla.redhat.com/show_bug.cgi?id=2164500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
https://errata.almalinux.org/8/ALSA-2023-2932.html
https://errata.rockylinux.org/RLSA-2023:0946
https://linux.oracle.com/cve/CVE-2022-4304.html
https://linux.oracle.com/errata/ELSA-2023-32791.html
https://nvd.nist.gov/vuln/detail/CVE-2022-4304
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
https://rustsec.org/advisories/RUSTSEC-2023-0007.html
https://security.gentoo.org/glsa/202402-08
https://ubuntu.com/security/notices/USN-5844-1
https://ubuntu.com/security/notices/USN-6564-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2022-4304
https://www.openssl.org/news/secadv/20230207.txt
libssl1.1
CVE-2023-0465
MEDIUM
1.1.1s-r0
1.1.1t-r2
https://access.redhat.com/errata/RHSA-2023:3722
https://access.redhat.com/security/cve/CVE-2023-0465
https://bugzilla.redhat.com/2181082
https://bugzilla.redhat.com/2182561
https://bugzilla.redhat.com/2182565
https://bugzilla.redhat.com/2188461
https://bugzilla.redhat.com/2207947
https://errata.almalinux.org/9/ALSA-2023-3722.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c
https://linux.oracle.com/cve/CVE-2023-0465.html
https://linux.oracle.com/errata/ELSA-2023-3722.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-0465
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230414-0001/
https://ubuntu.com/security/notices/USN-6039-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-0465
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230328.txt
libssl1.1
CVE-2023-2650
MEDIUM
1.1.1s-r0
1.1.1u-r0
http://www.openwall.com/lists/oss-security/2023/05/30/1
https://access.redhat.com/errata/RHSA-2023:6330
https://access.redhat.com/security/cve/CVE-2023-2650
https://bugzilla.redhat.com/1858038
https://bugzilla.redhat.com/2207947
https://errata.almalinux.org/9/ALSA-2023-6330.html
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a
https://linux.oracle.com/cve/CVE-2023-2650.html
https://linux.oracle.com/errata/ELSA-2023-6330.html
https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2023-2650
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230703-0001/
https://security.netapp.com/advisory/ntap-20231027-0009/
https://ubuntu.com/security/notices/USN-6119-1
https://ubuntu.com/security/notices/USN-6188-1
https://ubuntu.com/security/notices/USN-6672-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-2650
https://www.debian.org/security/2023/dsa-5417
https://www.openssl.org/news/secadv/20230530.txt
libssl1.1
CVE-2023-3446
MEDIUM
1.1.1s-r0
1.1.1u-r2
http://www.openwall.com/lists/oss-security/2023/07/19/4
http://www.openwall.com/lists/oss-security/2023/07/19/5
http://www.openwall.com/lists/oss-security/2023/07/19/6
http://www.openwall.com/lists/oss-security/2023/07/31/1
http://www.openwall.com/lists/oss-security/2024/05/16/1
https://access.redhat.com/errata/RHSA-2024:0888
https://access.redhat.com/security/cve/CVE-2023-3446
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2257582
https://bugzilla.redhat.com/show_bug.cgi?id=2257583
https://bugzilla.redhat.com/show_bug.cgi?id=2258677
https://bugzilla.redhat.com/show_bug.cgi?id=2258688
https://bugzilla.redhat.com/show_bug.cgi?id=2258691
https://bugzilla.redhat.com/show_bug.cgi?id=2258694
https://bugzilla.redhat.com/show_bug.cgi?id=2258700
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36763
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36764
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45231
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45232
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45233
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45235
https://errata.almalinux.org/8/ALSA-2024-0888.html
https://errata.rockylinux.org/RLSA-2024:2264
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23
https://linux.oracle.com/cve/CVE-2023-3446.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
https://nvd.nist.gov/vuln/detail/CVE-2023-3446
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230803-0011/
https://ubuntu.com/security/notices/USN-6435-1
https://ubuntu.com/security/notices/USN-6435-2
https://ubuntu.com/security/notices/USN-6450-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7018-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-3446
https://www.openssl.org/news/secadv/20230719.txt
libssl1.1
CVE-2023-3817
MEDIUM
1.1.1s-r0
1.1.1v-r0
http://seclists.org/fulldisclosure/2023/Jul/43
http://www.openwall.com/lists/oss-security/2023/07/31/1
http://www.openwall.com/lists/oss-security/2023/09/22/11
http://www.openwall.com/lists/oss-security/2023/09/22/9
http://www.openwall.com/lists/oss-security/2023/11/06/2
https://access.redhat.com/errata/RHSA-2023:7877
https://access.redhat.com/security/cve/CVE-2023-3817
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/2227852
https://bugzilla.redhat.com/2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2227852
https://bugzilla.redhat.com/show_bug.cgi?id=2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2270358
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408
https://errata.almalinux.org/8/ALSA-2023-7877.html
https://errata.rockylinux.org/RLSA-2023:7877
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5
https://linux.oracle.com/cve/CVE-2023-3817.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html
https://nvd.nist.gov/vuln/detail/CVE-2023-3817
https://security.gentoo.org/glsa/202402-08
https://security.netapp.com/advisory/ntap-20230818-0014/
https://security.netapp.com/advisory/ntap-20231027-0008/
https://security.netapp.com/advisory/ntap-20240621-0006/
https://ubuntu.com/security/notices/USN-6435-1
https://ubuntu.com/security/notices/USN-6435-2
https://ubuntu.com/security/notices/USN-6450-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-3817
https://www.openssl.org/news/secadv/20230731.txt
libssl1.1
CVE-2023-5678
MEDIUM
1.1.1s-r0
1.1.1w-r1
http://www.openwall.com/lists/oss-security/2024/03/11/1
https://access.redhat.com/errata/RHSA-2023:7877
https://access.redhat.com/security/cve/CVE-2023-5678
https://bugzilla.redhat.com/2224962
https://bugzilla.redhat.com/2227852
https://bugzilla.redhat.com/2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2224962
https://bugzilla.redhat.com/show_bug.cgi?id=2227852
https://bugzilla.redhat.com/show_bug.cgi?id=2248616
https://bugzilla.redhat.com/show_bug.cgi?id=2270358
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2408
https://errata.almalinux.org/8/ALSA-2023-7877.html
https://errata.rockylinux.org/RLSA-2023:7877
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
https://linux.oracle.com/cve/CVE-2023-5678.html
https://linux.oracle.com/errata/ELSA-2024-2447.html
https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html
https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2023-5678
https://security.netapp.com/advisory/ntap-20231130-0010/
https://ubuntu.com/security/notices/USN-6622-1
https://ubuntu.com/security/notices/USN-6632-1
https://ubuntu.com/security/notices/USN-6709-1
https://ubuntu.com/security/notices/USN-7894-1
https://www.cve.org/CVERecord?id=CVE-2023-5678
https://www.openssl.org/news/secadv/20231106.txt
musl
CVE-2025-26519
HIGH
1.2.3-r1
1.2.3-r4
http://www.openwall.com/lists/oss-security/2025/02/13/2
http://www.openwall.com/lists/oss-security/2025/02/13/3
http://www.openwall.com/lists/oss-security/2025/02/13/4
http://www.openwall.com/lists/oss-security/2025/02/13/5
http://www.openwall.com/lists/oss-security/2025/02/14/5
http://www.openwall.com/lists/oss-security/2025/02/14/6
https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da
https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659
https://www.openwall.com/lists/oss-security/2025/02/13/2
musl-utils
CVE-2025-26519
HIGH
1.2.3-r1
1.2.3-r4
http://www.openwall.com/lists/oss-security/2025/02/13/2
http://www.openwall.com/lists/oss-security/2025/02/13/3
http://www.openwall.com/lists/oss-security/2025/02/13/4
http://www.openwall.com/lists/oss-security/2025/02/13/5
http://www.openwall.com/lists/oss-security/2025/02/14/5
http://www.openwall.com/lists/oss-security/2025/02/14/6
https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da
https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659
https://www.openwall.com/lists/oss-security/2025/02/13/2
ssl_client
CVE-2023-42366
MEDIUM
1.35.0-r17
1.35.0-r18
https://access.redhat.com/security/cve/CVE-2023-42366
https://bugs.busybox.net/show_bug.cgi?id=15874
https://nvd.nist.gov/vuln/detail/CVE-2023-42366
https://security.netapp.com/advisory/ntap-20241206-0007/
https://www.cve.org/CVERecord?id=CVE-2023-42366
No Misconfigurations found
gobinary
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
github.com/go-acme/lego/v4
CVE-2025-54799
LOW
v4.9.0
4.25.2
https://access.redhat.com/security/cve/CVE-2025-54799
https://github.com/go-acme/lego
https://github.com/go-acme/lego/commit/238454b5f74f3cfcbb244ff0d0dc914a4ad44b96
https://github.com/go-acme/lego/security/advisories/GHSA-q82r-2j7m-9rv4
https://nvd.nist.gov/vuln/detail/CVE-2025-54799
https://www.cve.org/CVERecord?id=CVE-2025-54799
github.com/go-chi/chi/v5
GHSA-vrw8-fxc6-2r93
MEDIUM
v5.0.8-0.20221018120124-e5529d9db4d3
5.2.2
https://github.com/go-chi/chi
https://github.com/go-chi/chi/commit/1be7ad938cc9c5b39a9dea01a5c518848928ab65
https://github.com/go-chi/chi/security/advisories/GHSA-vrw8-fxc6-2r93
github.com/hashicorp/go-retryablehttp
CVE-2024-6104
MEDIUM
v0.7.1
0.7.7
https://access.redhat.com/errata/RHSA-2024:5258
https://access.redhat.com/security/cve/CVE-2024-6104
https://bugzilla.redhat.com/2262921
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268021
https://bugzilla.redhat.com/2274767
https://bugzilla.redhat.com/2292668
https://bugzilla.redhat.com/2294000
https://bugzilla.redhat.com/2295010
https://bugzilla.redhat.com/show_bug.cgi?id=2262921
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268021
https://bugzilla.redhat.com/show_bug.cgi?id=2274767
https://bugzilla.redhat.com/show_bug.cgi?id=2292668
https://bugzilla.redhat.com/show_bug.cgi?id=2294000
https://bugzilla.redhat.com/show_bug.cgi?id=2295010
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1394
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24784
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37298
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104
https://discuss.hashicorp.com/c/security
https://discuss.hashicorp.com/t/hcsec-2024-12-go-retryablehttp-can-leak-basic-auth-credentials-to-log-files/68027
https://errata.almalinux.org/8/ALSA-2024-5258.html
https://errata.rockylinux.org/RLSA-2024:5258
https://github.com/advisories/GHSA-v6v8-xj6m-xwqh
https://github.com/hashicorp/go-retryablehttp
https://github.com/hashicorp/go-retryablehttp/commit/a99f07beb3c5faaa0a283617e6eb6bcf25f5049a
https://github.com/hashicorp/go-retryablehttp/pull/158
https://linux.oracle.com/cve/CVE-2024-6104.html
https://linux.oracle.com/errata/ELSA-2024-9115.html
https://nvd.nist.gov/vuln/detail/CVE-2024-6104
https://www.cve.org/CVERecord?id=CVE-2024-6104
github.com/jackc/pgx/v5
CVE-2024-27304
HIGH
v5.1.1
5.5.4
https://access.redhat.com/security/cve/CVE-2024-27304
https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007
https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8
https://github.com/jackc/pgx
https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4
https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8
https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df
https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
https://nvd.nist.gov/vuln/detail/CVE-2024-27304
https://www.cve.org/CVERecord?id=CVE-2024-27304
https://www.youtube.com/watch?v=Tfg1B8u1yvE
github.com/jackc/pgx/v5
GHSA-fqpg-rq76-99pq
MEDIUM
v5.1.1
5.5.2
https://github.com/jackc/pgx/commit/dfd198003a03dbb96e4607b0d3a0bb9a7398ccb7
github.com/lestrrat-go/jwx/v2
CVE-2023-49290
MEDIUM
v2.0.8
2.0.18
https://access.redhat.com/security/cve/CVE-2023-49290
https://github.com/lestrrat-go/jwx
https://github.com/lestrrat-go/jwx/commit/64f2a229b8e18605f47361d292b526bdc4aee01c
https://github.com/lestrrat-go/jwx/security/advisories/GHSA-7f9x-gw85-8grf
https://nvd.nist.gov/vuln/detail/CVE-2023-49290
https://www.cve.org/CVERecord?id=CVE-2023-49290
github.com/lestrrat-go/jwx/v2
CVE-2024-21664
MEDIUM
v2.0.8
2.0.19
https://access.redhat.com/security/cve/CVE-2024-21664
https://github.com/lestrrat-go/jwx
https://github.com/lestrrat-go/jwx/commit/0e8802ce6842625845d651456493e7c87625601f
https://github.com/lestrrat-go/jwx/commit/8c53d0ae52d5ab1e2b37c5abb67def9e7958fd65
https://github.com/lestrrat-go/jwx/commit/d69a721931a5c48b9850a42404f18e143704adcd
https://github.com/lestrrat-go/jwx/security/advisories/GHSA-pvcr-v8j8-j5q3
https://nvd.nist.gov/vuln/detail/CVE-2024-21664
https://www.cve.org/CVERecord?id=CVE-2024-21664
github.com/lestrrat-go/jwx/v2
CVE-2024-28122
MEDIUM
v2.0.8
2.0.21
https://access.redhat.com/security/cve/CVE-2024-28122
https://github.com/lestrrat-go/jwx
https://github.com/lestrrat-go/jwx/commit/d01027d74c7376d66037a10f4f64af9af26a7e34
https://github.com/lestrrat-go/jwx/commit/d43f2ceb7f0c13714dfe8854d6439766e86faa76
https://github.com/lestrrat-go/jwx/releases/tag/v1.2.29
https://github.com/lestrrat-go/jwx/releases/tag/v2.0.21
https://github.com/lestrrat-go/jwx/security/advisories/GHSA-hj3v-m684-v259
https://nvd.nist.gov/vuln/detail/CVE-2024-28122
https://www.cve.org/CVERecord?id=CVE-2024-28122
github.com/lestrrat-go/jwx/v2
GHSA-rm8v-mxj3-5rmq
MEDIUM
v2.0.8
2.0.11
https://github.com/lestrrat-go/jwx
https://github.com/lestrrat-go/jwx/blob/796b2a9101cf7e7cb66455e4d97f3c158ee10904/jwe/internal/aescbc/aescbc.go#L33-L66
https://github.com/lestrrat-go/jwx/blob/8840ffd4afc5839f591ff0e9ba9034af52b1643e/jwe/internal/aescbc/aescbc.go#L210-L213
https://github.com/lestrrat-go/jwx/commit/6c41e3822485fc7e11dd70b4b0524b075d66b103
https://github.com/lestrrat-go/jwx/commit/d9ddbc8e5009cfdd8c28413390b67afa7f576dd6
https://github.com/lestrrat-go/jwx/security/advisories/GHSA-rm8v-mxj3-5rmq
golang.org/x/net
CVE-2022-41723
HIGH
v0.2.0
0.7.0
https://access.redhat.com/errata/RHSA-2023:6939
https://access.redhat.com/security/cve/CVE-2022-41723
https://bugzilla.redhat.com/2163037
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2175721
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2182883
https://bugzilla.redhat.com/2182884
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/8/ALSA-2023-6939.html
https://errata.rockylinux.org/RLSA-2023:6939
https://github.com/advisories/GHSA-vvpx-j8f3-3w6h
https://go.dev/cl/468135
https://go.dev/cl/468295
https://go.dev/issue/57855
https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E
https://linux.oracle.com/cve/CVE-2022-41723.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/
https://nvd.nist.gov/vuln/detail/CVE-2022-41723
https://pkg.go.dev/vuln/GO-2023-1571
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20230331-0010/
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://vuln.go.dev/ID/GO-2023-1571.json
https://www.couchbase.com/alerts
https://www.couchbase.com/alerts/
https://www.cve.org/CVERecord?id=CVE-2022-41723
golang.org/x/net
CVE-2023-39325
HIGH
v0.2.0
0.17.0
golang.org/x/net
https://access.redhat.com/errata/RHSA-2023:5863
https://access.redhat.com/security/cve/CVE-2023-39325
https://access.redhat.com/security/cve/CVE-2023-44487
https://bugzilla.redhat.com/2242803
https://bugzilla.redhat.com/2243296
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2243296
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39325
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
https://errata.almalinux.org/8/ALSA-2023-5863.html
https://errata.rockylinux.org/RLSA-2023:6077
https://github.com/golang/go/commit/24ae2d927285c697440fdde3ad7f26028354bcf3 [golang- 1.21]
https://github.com/golang/go/commit/e175f27f58aa7b9cd4d79607ae65d2cd5baaee68 [golang-1.20]
https://github.com/golang/go/issues/63417
https://go.dev/cl/534215
https://go.dev/cl/534235
https://go.dev/issue/63417
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://linux.oracle.com/cve/CVE-2023-39325.html
https://linux.oracle.com/errata/ELSA-2023-5867.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/
https://nvd.nist.gov/vuln/detail/CVE-2023-39325
https://pkg.go.dev/vuln/GO-2023-2102
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231110-0008
https://security.netapp.com/advisory/ntap-20231110-0008/
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-7061-1
https://ubuntu.com/security/notices/USN-7109-1
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-39325
golang.org/x/net
CVE-2022-41717
MEDIUM
v0.2.0
0.4.0
https://access.redhat.com/errata/RHSA-2023:2866
https://access.redhat.com/security/cve/CVE-2022-41717
https://bugzilla.redhat.com/2132868
https://bugzilla.redhat.com/2132872
https://bugzilla.redhat.com/2161274
https://bugzilla.redhat.com/show_bug.cgi?id=2107342
https://bugzilla.redhat.com/show_bug.cgi?id=2107371
https://bugzilla.redhat.com/show_bug.cgi?id=2107374
https://bugzilla.redhat.com/show_bug.cgi?id=2107376
https://bugzilla.redhat.com/show_bug.cgi?id=2107383
https://bugzilla.redhat.com/show_bug.cgi?id=2107386
https://bugzilla.redhat.com/show_bug.cgi?id=2107388
https://bugzilla.redhat.com/show_bug.cgi?id=2107390
https://bugzilla.redhat.com/show_bug.cgi?id=2107392
https://bugzilla.redhat.com/show_bug.cgi?id=2113814
https://bugzilla.redhat.com/show_bug.cgi?id=2121445
https://bugzilla.redhat.com/show_bug.cgi?id=2124669
https://bugzilla.redhat.com/show_bug.cgi?id=2161274
https://bugzilla.redhat.com/show_bug.cgi?id=2168256
https://cs.opensource.google/go/x/net
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1705
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1962
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27664
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28131
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30630
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30631
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30632
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30633
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30635
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32148
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32189
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41717
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0778
https://errata.almalinux.org/8/ALSA-2023-2866.html
https://errata.rockylinux.org/RLSA-2023:2802
https://github.com/golang/go/commit/618120c165669c00a1606505defea6ca755cdc27 (go1.19.4)
https://github.com/golang/go/commit/76cad4edc29d28432a7a0aa27e87385d3d7db7a1 (go1.18.9)
https://go.dev/cl/455635
https://go.dev/cl/455717
https://go.dev/issue/56350
https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU
https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ
https://linux.oracle.com/cve/CVE-2022-41717.html
https://linux.oracle.com/errata/ELSA-2023-6420.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/
https://nvd.nist.gov/vuln/detail/CVE-2022-41717
https://pkg.go.dev/vuln/GO-2022-1144
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20230120-0008/
https://ubuntu.com/security/notices/USN-6038-1
https://ubuntu.com/security/notices/USN-6038-2
https://www.cve.org/CVERecord?id=CVE-2022-41717
golang.org/x/net
CVE-2023-3978
MEDIUM
v0.2.0
0.13.0
https://access.redhat.com/errata/RHSA-2023:6939
https://access.redhat.com/security/cve/CVE-2023-3978
https://bugzilla.redhat.com/2163037
https://bugzilla.redhat.com/2174485
https://bugzilla.redhat.com/2175721
https://bugzilla.redhat.com/2178358
https://bugzilla.redhat.com/2178488
https://bugzilla.redhat.com/2178492
https://bugzilla.redhat.com/2182883
https://bugzilla.redhat.com/2182884
https://bugzilla.redhat.com/2184481
https://bugzilla.redhat.com/2184482
https://bugzilla.redhat.com/2184483
https://bugzilla.redhat.com/2184484
https://bugzilla.redhat.com/2196026
https://bugzilla.redhat.com/2196027
https://bugzilla.redhat.com/2196029
https://bugzilla.redhat.com/2222167
https://bugzilla.redhat.com/2228689
https://bugzilla.redhat.com/show_bug.cgi?id=2163037
https://bugzilla.redhat.com/show_bug.cgi?id=2174485
https://bugzilla.redhat.com/show_bug.cgi?id=2175721
https://bugzilla.redhat.com/show_bug.cgi?id=2178358
https://bugzilla.redhat.com/show_bug.cgi?id=2178488
https://bugzilla.redhat.com/show_bug.cgi?id=2178492
https://bugzilla.redhat.com/show_bug.cgi?id=2182883
https://bugzilla.redhat.com/show_bug.cgi?id=2182884
https://bugzilla.redhat.com/show_bug.cgi?id=2184481
https://bugzilla.redhat.com/show_bug.cgi?id=2184482
https://bugzilla.redhat.com/show_bug.cgi?id=2184483
https://bugzilla.redhat.com/show_bug.cgi?id=2184484
https://bugzilla.redhat.com/show_bug.cgi?id=2196026
https://bugzilla.redhat.com/show_bug.cgi?id=2196027
https://bugzilla.redhat.com/show_bug.cgi?id=2196029
https://bugzilla.redhat.com/show_bug.cgi?id=2222167
https://bugzilla.redhat.com/show_bug.cgi?id=2228689
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3064
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41723
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41724
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41725
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24534
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24536
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24537
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24538
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24539
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24540
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25173
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27561
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29400
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29406
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3978
https://errata.almalinux.org/8/ALSA-2023-6939.html
https://errata.rockylinux.org/RLSA-2023:6939
https://go.dev/cl/514896
https://go.dev/issue/61615
https://linux.oracle.com/cve/CVE-2023-3978.html
https://linux.oracle.com/errata/ELSA-2023-6939.html
https://nvd.nist.gov/vuln/detail/CVE-2023-3978
https://pkg.go.dev/vuln/GO-2023-1988
https://www.cve.org/CVERecord?id=CVE-2023-3978
golang.org/x/net
CVE-2023-44487
MEDIUM
v0.2.0
0.17.0
http://www.openwall.com/lists/oss-security/2023/10/10/6
http://www.openwall.com/lists/oss-security/2023/10/10/7
http://www.openwall.com/lists/oss-security/2023/10/13/4
http://www.openwall.com/lists/oss-security/2023/10/13/9
http://www.openwall.com/lists/oss-security/2023/10/18/4
http://www.openwall.com/lists/oss-security/2023/10/18/8
http://www.openwall.com/lists/oss-security/2023/10/19/6
http://www.openwall.com/lists/oss-security/2023/10/20/8
http://www.openwall.com/lists/oss-security/2025/08/13/6
https://access.redhat.com/errata/RHSA-2024:1444
https://access.redhat.com/security/cve/CVE-2023-44487
https://access.redhat.com/security/cve/cve-2023-44487
https://akka.io/security/akka-http-cve-2023-44487.html
https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size
https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
https://aws.amazon.com/security/security-bulletins/AWS-2023-011
https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty
https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released
https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
https://blog.vespa.ai/cve-2023-44487
https://blog.vespa.ai/cve-2023-44487/
https://bugzilla.proxmox.com/show_bug.cgi?id=4988
https://bugzilla.redhat.com/2242803
https://bugzilla.redhat.com/2264574
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.suse.com/show_bug.cgi?id=1216123
https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
https://chaos.social/@icing/111210915918780532
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
https://devblogs.microsoft.com/dotnet/october-2023-updates/
https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
https://errata.almalinux.org/8/ALSA-2024-1444.html
https://errata.rockylinux.org/RLSA-2023:5838
https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
https://github.com/Azure/AKS/issues/3947
https://github.com/Kong/kong/discussions/11741
https://github.com/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/advisories/GHSA-vx74-f528-fxqg
https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
https://github.com/akka/akka-http/issues/4323
https://github.com/akka/akka-http/pull/4324
https://github.com/akka/akka-http/pull/4325
https://github.com/alibaba/tengine/issues/1872
https://github.com/apache/apisix/issues/10320
https://github.com/apache/httpd-site/pull/10
https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628
https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
https://github.com/apache/trafficserver/pull/10564
https://github.com/apple/swift-nio-http2
https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
https://github.com/bcdannyboy/CVE-2023-44487
https://github.com/caddyserver/caddy/issues/5877
https://github.com/caddyserver/caddy/releases/tag/v2.7.5
https://github.com/dotnet/announcements/issues/277
https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
https://github.com/eclipse/jetty.project/issues/10679
https://github.com/envoyproxy/envoy/pull/30055
https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76
https://github.com/etcd-io/etcd/issues/16740
https://github.com/facebook/proxygen/pull/466
https://github.com/golang/go/issues/63417
https://github.com/grpc/grpc-go/pull/6703
https://github.com/grpc/grpc-go/releases
https://github.com/grpc/grpc/releases/tag/v1.59.2
https://github.com/h2o/h2o/pull/3291
https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
https://github.com/haproxy/haproxy/issues/2312
https://github.com/hyperium/hyper/issues/3337
https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
https://github.com/junkurihara/rust-rpxy/issues/97
https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
https://github.com/kazu-yamamoto/http2/issues/93
https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15
https://github.com/kubernetes/kubernetes/pull/121120
https://github.com/line/armeria/pull/5232
https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
https://github.com/micrictor/http2-rst-stream
https://github.com/microsoft/CBL-Mariner/pull/6381
https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
https://github.com/nghttp2/nghttp2/pull/1961
https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
https://github.com/ninenines/cowboy/issues/1615
https://github.com/nodejs/node/pull/50121
https://github.com/openresty/openresty/issues/930
https://github.com/opensearch-project/data-prepper/issues/3474
https://github.com/oqtane/oqtane.framework/discussions/3367
https://github.com/projectcontour/contour/pull/5826
https://github.com/tempesta-tech/tempesta/issues/1986
https://github.com/varnishcache/varnish-cache/issues/3996
https://go.dev/cl/534215
https://go.dev/cl/534235
https://go.dev/issue/63417
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://istio.io/latest/news/security/istio-security-2023-004
https://istio.io/latest/news/security/istio-security-2023-004/
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
https://linux.oracle.com/cve/CVE-2023-44487.html
https://linux.oracle.com/errata/ELSA-2024-1444.html
https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
https://mailman.powerdns.com/pipermail/dnsdist/2023-October/001409.html
https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2
https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
https://my.f5.com/manage/s/article/K000137106
https://netty.io/news/2023/10/10/4-1-100-Final.html
https://news.ycombinator.com/item?id=37830987
https://news.ycombinator.com/item?id=37830998
https://news.ycombinator.com/item?id=37831062
https://news.ycombinator.com/item?id=37837043
https://nodejs.org/en/blog/vulnerability/october-2023-security-releases
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response
https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
https://pkg.go.dev/vuln/GO-2023-2102
https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231016-0001
https://security.netapp.com/advisory/ntap-20231016-0001/
https://security.netapp.com/advisory/ntap-20240426-0007
https://security.netapp.com/advisory/ntap-20240426-0007/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://security.netapp.com/advisory/ntap-20240621-0007
https://security.netapp.com/advisory/ntap-20240621-0007/
https://security.paloaltonetworks.com/CVE-2023-44487
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81
https://ubuntu.com/security/CVE-2023-44487
https://ubuntu.com/security/notices/USN-6427-1
https://ubuntu.com/security/notices/USN-6427-2
https://ubuntu.com/security/notices/USN-6438-1
https://ubuntu.com/security/notices/USN-6505-1
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-6754-1
https://ubuntu.com/security/notices/USN-6994-1
https://ubuntu.com/security/notices/USN-7067-1
https://ubuntu.com/security/notices/USN-7410-1
https://ubuntu.com/security/notices/USN-7469-1
https://ubuntu.com/security/notices/USN-7469-2
https://ubuntu.com/security/notices/USN-7469-3
https://ubuntu.com/security/notices/USN-7469-4
https://ubuntu.com/security/notices/USN-7892-1
https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12
https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1
https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-44487
https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
https://www.debian.org/security/2023/dsa-5521
https://www.debian.org/security/2023/dsa-5522
https://www.debian.org/security/2023/dsa-5540
https://www.debian.org/security/2023/dsa-5549
https://www.debian.org/security/2023/dsa-5558
https://www.debian.org/security/2023/dsa-5570
https://www.eclipse.org/lists/jetty-announce/msg00181.html
https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
https://www.mail-archive.com/haproxy@formilux.org/msg44134.html
https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487
https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
https://www.openwall.com/lists/oss-security/2023/10/10/6
https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday
https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause
golang.org/x/net
CVE-2023-45288
MEDIUM
v0.2.0
0.23.0
http://www.openwall.com/lists/oss-security/2024/04/03/16
http://www.openwall.com/lists/oss-security/2024/04/05/4
https://access.redhat.com/errata/RHSA-2024:3346
https://access.redhat.com/security/cve/CVE-2023-45288
https://bugzilla.redhat.com/2268017
https://bugzilla.redhat.com/2268018
https://bugzilla.redhat.com/2268019
https://bugzilla.redhat.com/2268273
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268018
https://bugzilla.redhat.com/show_bug.cgi?id=2268019
https://bugzilla.redhat.com/show_bug.cgi?id=2268273
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24783
https://errata.almalinux.org/8/ALSA-2024-3346.html
https://errata.rockylinux.org/RLSA-2024:2724
https://go.dev/cl/576155
https://go.dev/issue/65051
https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M
https://kb.cert.org/vuls/id/421644
https://linux.oracle.com/cve/CVE-2023-45288.html
https://linux.oracle.com/errata/ELSA-2024-3346.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/
https://nowotarski.info/http2-continuation-flood-technical-details
https://nowotarski.info/http2-continuation-flood/
https://nvd.nist.gov/vuln/detail/CVE-2023-45288
https://pkg.go.dev/vuln/GO-2024-2687
https://security.netapp.com/advisory/ntap-20240419-0009
https://security.netapp.com/advisory/ntap-20240419-0009/
https://ubuntu.com/security/notices/USN-6886-1
https://ubuntu.com/security/notices/USN-7109-1
https://ubuntu.com/security/notices/USN-7111-1
https://www.cve.org/CVERecord?id=CVE-2023-45288
https://www.kb.cert.org/vuls/id/421644
golang.org/x/net
CVE-2025-22870
MEDIUM
v0.2.0
0.36.0
http://www.openwall.com/lists/oss-security/2025/03/07/2
https://access.redhat.com/security/cve/CVE-2025-22870
https://github.com/golang/go/issues/71984
https://go-review.googlesource.com/q/project:net
https://go.dev/cl/654697
https://go.dev/issue/71984
https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ
https://nvd.nist.gov/vuln/detail/CVE-2025-22870
https://pkg.go.dev/vuln/GO-2025-3503
https://security.netapp.com/advisory/ntap-20250509-0007
https://security.netapp.com/advisory/ntap-20250509-0007/
https://ubuntu.com/security/notices/USN-7574-1
https://www.cve.org/CVERecord?id=CVE-2025-22870
golang.org/x/net
CVE-2025-22872
MEDIUM
v0.2.0
0.38.0
https://access.redhat.com/security/cve/CVE-2025-22872
https://github.com/advisories/GHSA-vvgc-356p-c3xw
https://go.dev/cl/662715
https://go.dev/issue/73070
https://groups.google.com/g/golang-announce/c/ezSKR9vqbqA
https://nvd.nist.gov/vuln/detail/CVE-2025-22872
https://pkg.go.dev/vuln/GO-2025-3595
https://security.netapp.com/advisory/ntap-20250516-0007
https://security.netapp.com/advisory/ntap-20250516-0007/
https://www.cve.org/CVERecord?id=CVE-2025-22872
golang.org/x/oauth2
CVE-2025-22868
HIGH
v0.2.0
0.27.0
https://access.redhat.com/security/cve/CVE-2025-22868
https://bugzilla.redhat.com/show_bug.cgi?id=2347423
https://bugzilla.redhat.com/show_bug.cgi?id=2348366
https://bugzilla.redhat.com/show_bug.cgi?id=2352914
https://bugzilla.redhat.com/show_bug.cgi?id=2354195
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29786
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30204
https://errata.rockylinux.org/RLSA-2025:7479
https://go.dev/cl/652155
https://go.dev/issue/71490
https://nvd.nist.gov/vuln/detail/CVE-2025-22868
https://pkg.go.dev/vuln/GO-2025-3488
https://www.cve.org/CVERecord?id=CVE-2025-22868
google.golang.org/grpc
GHSA-m425-mq94-257g
HIGH
v1.51.0
1.56.3, 1.57.1, 1.58.3
https://github.com/grpc/grpc-go
https://github.com/grpc/grpc-go/commit/f2180b4d5403d2210b30b93098eb7da31c05c721
https://github.com/grpc/grpc-go/pull/6703
https://github.com/grpc/grpc-go/security/advisories/GHSA-m425-mq94-257g
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
google.golang.org/protobuf
CVE-2024-24786
MEDIUM
v1.28.1
1.33.0
http://www.openwall.com/lists/oss-security/2024/03/08/4
https://access.redhat.com/errata/RHSA-2024:4246
https://access.redhat.com/security/cve/CVE-2024-24786
https://bugzilla.redhat.com/2268046
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786
https://errata.almalinux.org/8/ALSA-2024-4246.html
https://errata.rockylinux.org/RLSA-2024:2550
https://github.com/protocolbuffers/protobuf-go
https://github.com/protocolbuffers/protobuf-go/commit/f01a588e5810b90996452eec4a28f22a0afae023
https://github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0
https://go-review.googlesource.com/c/protobuf/+/569356
https://go.dev/cl/569356
https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/
https://linux.oracle.com/cve/CVE-2024-24786.html
https://linux.oracle.com/errata/ELSA-2024-4246.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU/
https://nvd.nist.gov/vuln/detail/CVE-2024-24786
https://pkg.go.dev/vuln/GO-2024-2611
https://security.netapp.com/advisory/ntap-20240517-0002
https://security.netapp.com/advisory/ntap-20240517-0002/
https://ubuntu.com/security/notices/USN-6746-1
https://ubuntu.com/security/notices/USN-6746-2
https://www.cve.org/CVERecord?id=CVE-2024-24786
gopkg.in/square/go-jose.v2
CVE-2024-28180
MEDIUM
v2.6.0
https://access.redhat.com/errata/RHSA-2024:3968
https://access.redhat.com/security/cve/CVE-2024-28180
https://bugzilla.redhat.com/2268820
https://bugzilla.redhat.com/2268854
https://bugzilla.redhat.com/show_bug.cgi?id=2268017
https://bugzilla.redhat.com/show_bug.cgi?id=2268820
https://bugzilla.redhat.com/show_bug.cgi?id=2268854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45290
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28176
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180
https://errata.almalinux.org/8/ALSA-2024-3968.html
https://errata.rockylinux.org/RLSA-2024:3827
https://github.com/go-jose/go-jose
https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298
https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a
https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502
https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g
https://linux.oracle.com/cve/CVE-2024-28180.html
https://linux.oracle.com/errata/ELSA-2024-3968.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH/
https://nvd.nist.gov/vuln/detail/CVE-2024-28180
https://www.cve.org/CVERecord?id=CVE-2024-28180
No Misconfigurations found