csaf_suse - suse-su-2022:0724-1

suse-su-2022:0724-1

Vulnerability from csaf_suse

Published

2022-03-04 09:34

Modified

2022-03-04 09:34

Summary

Security update for go1.16

Notes

Title of the patch

Security update for go1.16

Description of the patch

This update for go1.16 fixes the following issues: - CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve (bsc#1195838). - CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (bsc#1195835). - CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834). The following non-security bugs were fixed: - go#50977 crypto/elliptic: IsOnCurve returns true for invalid field elements - go#50700 math/big: Rat.SetString may consume large amount of RAM and crash - go#50686 cmd/go: do not treat branches with semantic-version names as releases - go#50866 cmd/compile: incorrect use of CMN on arm64 - go#50832 runtime/race: NoRaceMutexPureHappensBefore failures - go#50811 cmd/go: remove bitbucket VCS probing - go#50780 runtime: incorrect frame information in traceback traversal may hang the process. - go#50721 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error - go#50682 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg - go#50645 testing: surprising interaction of subtests with TempDir - go#50585 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch - go#50245 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of 'plugin' Package

Patchnames

SUSE-2022-724,SUSE-SLE-Module-Development-Tools-15-SP3-2022-724,SUSE-SLE-Module-Development-Tools-15-SP4-2022-724,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-724,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-724,SUSE-SLE-Product-RT-15-SP2-2022-724,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-724,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-724,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-724,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-724,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-724,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-724,SUSE-Storage-7-2022-724

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for go1.16",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for go1.16 fixes the following issues:\n\n- CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve (bsc#1195838).\n- CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (bsc#1195835).\n- CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834).\n\nThe following non-security bugs were fixed:\n\n- go#50977 crypto/elliptic: IsOnCurve returns true for invalid field elements\n- go#50700 math/big: Rat.SetString may consume large amount of RAM and crash\n- go#50686 cmd/go: do not treat branches with semantic-version names as releases\n- go#50866 cmd/compile: incorrect use of CMN on arm64\n- go#50832 runtime/race: NoRaceMutexPureHappensBefore failures\n- go#50811 cmd/go: remove bitbucket VCS probing\n- go#50780 runtime: incorrect frame information in traceback traversal may hang the process.\n- go#50721 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error\n- go#50682 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg\n- go#50645 testing: surprising interaction of subtests with TempDir\n- go#50585 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch\n- go#50245 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of \u0027plugin\u0027 Package\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2022-724,SUSE-SLE-Module-Development-Tools-15-SP3-2022-724,SUSE-SLE-Module-Development-Tools-15-SP4-2022-724,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-724,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-724,SUSE-SLE-Product-RT-15-SP2-2022-724,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-724,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-724,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-724,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-724,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-724,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-724,SUSE-Storage-7-2022-724",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_0724-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2022:0724-1",
        "url": "https://www.suse.com/support/update/announcement/2022/suse-su-20220724-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2022:0724-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-March/010358.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1182345",
        "url": "https://bugzilla.suse.com/1182345"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1195834",
        "url": "https://bugzilla.suse.com/1195834"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1195835",
        "url": "https://bugzilla.suse.com/1195835"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1195838",
        "url": "https://bugzilla.suse.com/1195838"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23772 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23772/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23773 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23773/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-23806 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-23806/"
      }
    ],
    "title": "Security update for go1.16",
    "tracking": {
      "current_release_date": "2022-03-04T09:34:50Z",
      "generator": {
        "date": "2022-03-04T09:34:50Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2022:0724-1",
      "initial_release_date": "2022-03-04T09:34:50Z",
      "revision_history": [
        {
          "date": "2022-03-04T09:34:50Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.16-1.16.14-1.43.1.aarch64",
                "product": {
                  "name": "go1.16-1.16.14-1.43.1.aarch64",
                  "product_id": "go1.16-1.16.14-1.43.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.16-doc-1.16.14-1.43.1.aarch64",
                "product": {
                  "name": "go1.16-doc-1.16.14-1.43.1.aarch64",
                  "product_id": "go1.16-doc-1.16.14-1.43.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.16-race-1.16.14-1.43.1.aarch64",
                "product": {
                  "name": "go1.16-race-1.16.14-1.43.1.aarch64",
                  "product_id": "go1.16-race-1.16.14-1.43.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.16-1.16.14-1.43.1.i586",
                "product": {
                  "name": "go1.16-1.16.14-1.43.1.i586",
                  "product_id": "go1.16-1.16.14-1.43.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "go1.16-doc-1.16.14-1.43.1.i586",
                "product": {
                  "name": "go1.16-doc-1.16.14-1.43.1.i586",
                  "product_id": "go1.16-doc-1.16.14-1.43.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.16-1.16.14-1.43.1.ppc64le",
                "product": {
                  "name": "go1.16-1.16.14-1.43.1.ppc64le",
                  "product_id": "go1.16-1.16.14-1.43.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "go1.16-doc-1.16.14-1.43.1.ppc64le",
                "product": {
                  "name": "go1.16-doc-1.16.14-1.43.1.ppc64le",
                  "product_id": "go1.16-doc-1.16.14-1.43.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.16-1.16.14-1.43.1.s390x",
                "product": {
                  "name": "go1.16-1.16.14-1.43.1.s390x",
                  "product_id": "go1.16-1.16.14-1.43.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "go1.16-doc-1.16.14-1.43.1.s390x",
                "product": {
                  "name": "go1.16-doc-1.16.14-1.43.1.s390x",
                  "product_id": "go1.16-doc-1.16.14-1.43.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.16-1.16.14-1.43.1.x86_64",
                "product": {
                  "name": "go1.16-1.16.14-1.43.1.x86_64",
                  "product_id": "go1.16-1.16.14-1.43.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.16-doc-1.16.14-1.43.1.x86_64",
                "product": {
                  "name": "go1.16-doc-1.16.14-1.43.1.x86_64",
                  "product_id": "go1.16-doc-1.16.14-1.43.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.16-race-1.16.14-1.43.1.x86_64",
                "product": {
                  "name": "go1.16-race-1.16.14-1.43.1.x86_64",
                  "product_id": "go1.16-race-1.16.14-1.43.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Development Tools 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Development Tools 15 SP3",
                  "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-development-tools:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-espos:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Real Time 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Real Time 15 SP2",
                  "product_id": "SUSE Linux Enterprise Real Time 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_rt:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP2-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP2-BCL",
                  "product_id": "SUSE Linux Enterprise Server 15 SP2-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_bcl:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 4.1",
                "product": {
                  "name": "SUSE Manager Proxy 4.1",
                  "product_id": "SUSE Manager Proxy 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Retail Branch Server 4.1",
                "product": {
                  "name": "SUSE Manager Retail Branch Server 4.1",
                  "product_id": "SUSE Manager Retail Branch Server 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-retail-branch-server:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server 4.1",
                "product": {
                  "name": "SUSE Manager Server 4.1",
                  "product_id": "SUSE Manager Server 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7",
                "product": {
                  "name": "SUSE Enterprise Storage 7",
                  "product_id": "SUSE Enterprise Storage 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP3",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Real Time 15 SP2",
          "product_id": "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Real Time 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Real Time 15 SP2",
          "product_id": "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Real Time 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Real Time 15 SP2",
          "product_id": "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Real Time 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Manager Proxy 4.1",
          "product_id": "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Manager Proxy 4.1",
          "product_id": "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Manager Proxy 4.1",
          "product_id": "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Manager Retail Branch Server 4.1",
          "product_id": "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Manager Retail Branch Server 4.1",
          "product_id": "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Manager Retail Branch Server 4.1",
          "product_id": "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.ppc64le as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.s390x as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.ppc64le as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.s390x as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Manager Server 4.1",
          "product_id": "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.aarch64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-1.16.14-1.43.1.x86_64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.aarch64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-doc-1.16.14-1.43.1.x86_64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-doc-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.aarch64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.16-race-1.16.14-1.43.1.x86_64 as component of SUSE Enterprise Storage 7",
          "product_id": "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64"
        },
        "product_reference": "go1.16-race-1.16.14-1.43.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-23772",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23772"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23772",
          "url": "https://www.suse.com/security/cve/CVE-2022-23772"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195835 for CVE-2022-23772",
          "url": "https://bugzilla.suse.com/1195835"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-03-04T09:34:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23772"
    },
    {
      "cve": "CVE-2022-23773",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23773"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23773",
          "url": "https://www.suse.com/security/cve/CVE-2022-23773"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195834 for CVE-2022-23773",
          "url": "https://bugzilla.suse.com/1195834"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-03-04T09:34:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-23773"
    },
    {
      "cve": "CVE-2022-23806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-23806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
          "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
          "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
          "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-23806",
          "url": "https://www.suse.com/security/cve/CVE-2022-23806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1195838 for CVE-2022-23806",
          "url": "https://bugzilla.suse.com/1195838"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206559 for CVE-2022-23806",
          "url": "https://bugzilla.suse.com/1206559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1208723 for CVE-2022-23806",
          "url": "https://bugzilla.suse.com/1208723"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.ppc64le",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.s390x",
            "SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1.x86_64",
            "SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-03-04T09:34:50Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-23806"
    }
  ]
}

CVE-2022-23773 (GCVE-0-2022-23773)

Vulnerability from cvelistv5

Published

2022-02-11 00:16

Modified

2024-08-03 03:51

Severity ?

CWE

Summary

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

References

►

URL

Tags

	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC
	https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220225-0006/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202208-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:45.976Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
          },
          {
            "name": "GLSA-202208-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-02"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-04T15:12:04",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
        },
        {
          "name": "GLSA-202208-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-02"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-23773",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2022.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
            },
            {
              "name": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ",
              "refsource": "MISC",
              "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220225-0006/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
            },
            {
              "name": "GLSA-202208-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-02"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-23773",
    "datePublished": "2022-02-11T00:16:08",
    "dateReserved": "2022-01-20T00:00:00",
    "dateUpdated": "2024-08-03T03:51:45.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-23806 (GCVE-0-2022-23806)

Vulnerability from cvelistv5

Published

2022-02-11 00:00

Modified

2024-08-03 03:51

Severity ?

CWE

Summary

Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html	mailing-list
	https://www.oracle.com/security-alerts/cpujul2022.html
	https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
	https://security.netapp.com/advisory/ntap-20220225-0006/
	https://security.gentoo.org/glsa/202208-02	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:45.994Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2985-1] golang-1.7 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html"
          },
          {
            "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2986-1] golang-1.8 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
          },
          {
            "name": "GLSA-202208-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-02"
          },
          {
            "name": "[debian-lts-announce] 20230419 [SECURITY] [DLA 3395-1] golang-1.11 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-19T00:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2985-1] golang-1.7 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html"
        },
        {
          "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2986-1] golang-1.8 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
        },
        {
          "name": "GLSA-202208-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-02"
        },
        {
          "name": "[debian-lts-announce] 20230419 [SECURITY] [DLA 3395-1] golang-1.11 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-23806",
    "datePublished": "2022-02-11T00:00:00",
    "dateReserved": "2022-01-21T00:00:00",
    "dateUpdated": "2024-08-03T03:51:45.994Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-23772 (GCVE-0-2022-23772)

Vulnerability from cvelistv5

Published

2022-02-11 00:11

Modified

2024-08-03 03:51

Severity ?

CWE

Summary

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpujul2022.html	x_refsource_MISC
	https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220225-0006/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202208-02	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:51:46.050Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2985-1] golang-1.7 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html"
          },
          {
            "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2986-1] golang-1.8 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
          },
          {
            "name": "GLSA-202208-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-02"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-04T15:08:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2985-1] golang-1.7 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html"
        },
        {
          "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2986-1] golang-1.8 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
        },
        {
          "name": "GLSA-202208-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-02"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-23772",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2985-1] golang-1.7 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html"
            },
            {
              "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2986-1] golang-1.8 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2022.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
            },
            {
              "name": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ",
              "refsource": "MISC",
              "url": "https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220225-0006/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220225-0006/"
            },
            {
              "name": "GLSA-202208-02",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202208-02"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-23772",
    "datePublished": "2022-02-11T00:11:15",
    "dateReserved": "2022-01-20T00:00:00",
    "dateUpdated": "2024-08-03T03:51:46.050Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2022:0724-1

Vulnerability from csaf_suse

CVE-2022-23773 (GCVE-0-2022-23773)

Vulnerability from cvelistv5

CVE-2022-23806 (GCVE-0-2022-23806)

Vulnerability from cvelistv5

CVE-2022-23772 (GCVE-0-2022-23772)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature