Important: Red Hat Security Advisory: go-toolset and golang security and bug fix update

🗓️ 01 Aug 2022 16:07:42Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 99 Views

Update for go-toolset and golang to fix security issues and bug

Reporter	Title	Published	Views	Family All 2909
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to various issues due to go compiler ( CVE-2022-30630, CVE-2022-30635, CVE-2022-32148, CVE-2022-30631, CVE-2022-30632, CVE-2022-32189, CVE-2022-28131, CVE-2022-30633, CV )	19 Jul 202420:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-toolset and amicontained	29 Sep 202308:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go, PostgreSQL, jQuery, and Google Gson may affect IBM Spectrum Copy Data Management	17 Sep 202201:47	–	ibm
IBM Security Bulletins	Security Bulletin: Operations Dashboard is vulnerable to denial of service by Go vulnerability CVE-2022-28327	14 Jun 202215:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to uncontrolled recursion in Golang (CVE-2022-30631)	2 Feb 202403:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion HCI may be vulnerable to Denial of Service via use of golang.org/x/net, x/crypto, and x/text (CVE-2022-30633, CVE-2022-27664, CVE-2022-28131, CVE-2022-41721, CVE-2021-43565, CVE-2022-27191)	21 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable via use of insufficiently random values and via exposure of sensitive information to an unauthorized actor in Golang (CVE-2022-30629)	1 Nov 202319:56	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to a panic in Golang (CVE-2022-28327)	1 Nov 202319:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	29 Apr 202502:39	–	ibm

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

31 Jul 2026 20:46Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

CVSS 25

EPSS0.0995

SSVC

go programming language security fix bug fix stack exhaustion cve-2022-30631 cve-2022-1705 cve-2022-1962 cve-2022-28131 cve-2022-30630 cve-2022-30632 cve-2022-30633 cve-2022-30635 cve-2022-32148 version 1.17.12 dist-git patches