CVE-2022-29526
Fixed in a distro release EPSS 3%
Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.
Products: golang go, fedoraproject fedora, netapp beegfs_csi_driver
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | golang.org/x/sys | 0.0.0-20220412211240-33da011f77ad |
| Go | stdlib | 1.17.10 |
| Go | stdlib | 1.18.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | go-filesystem | 3.0.15-23.amzn2.0.2 |
| Amazon Linux 2 | go-rpm-macros | 3.0.15-23.amzn2.0.2 |
| Amazon Linux 2 | go-rpm-templates | 3.0.15-23.amzn2.0.2 |
| Amazon Linux 2 | go-srpm-macros | 3.0.15-23.amzn2.0.2 |
| Amazon Linux 2 | golang | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golang-bin | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golang-docs | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golang-github-godbus-dbus-devel | 0-0.1.gitcb98efb.amzn2.0.2 |
| Amazon Linux 2 | golang-github-gorilla-context-devel | 0-0.24.gitb06ed15.amzn2.0.4 |
| Amazon Linux 2 | golang-github-gorilla-mux-devel | 0-0.16.git136d54f.amzn2.0.2 |
| Amazon Linux 2 | golang-github-kr-pty-devel | 0-0.19.git98c7b80.amzn2.0.3 |
| Amazon Linux 2 | golang-github-syndtr-gocapability-devel | 0-0.5.git3454319.amzn2.0.3 |
| Amazon Linux 2 | golang-googlecode-net-devel | 0-0.12.hg84a4013f96e0.amzn2.0.2 |
| Amazon Linux 2 | golang-googlecode-sqlite-devel | 0-0.9.hg74691fb6f837.amzn2.0.4 |
| Amazon Linux 2 | golang-misc | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golang-race | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golang-shared | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golang-src | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golang-tests | 1.18.5-1.amzn2 |
| Amazon Linux 2 | golist | 0.10.1-10.amzn2.0.1 |
| Amazon Linux 2023 | compat-golang-github-cpuguy83-md2man-2-devel | 2.0.2-22.amzn2023.0.2 |
| Amazon Linux 2023 | golang | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golang-bin | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golang-docs | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golang-github-cpuguy83-md2man | 2.0.2-22.amzn2023.0.2 |
| Amazon Linux 2023 | golang-github-cpuguy83-md2man-devel | 2.0.2-22.amzn2023.0.2 |
| Amazon Linux 2023 | golang-misc | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golang-race | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golang-shared | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golang-src | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golang-tests | 1.19.3-2.amzn2023.0.2 |
| Amazon Linux 2023 | golist | 0.10.1-11.amzn2023.0.3 |
| Chainguard | ctop | 0.7.7-r13 |
| Chainguard | dex-k8s-authenticator | 0 |
| Chainguard | dynamic-localpv-provisioner | 3.4.1-r3 |
| Chainguard | dynamic-localpv-provisioner-fips | 3.5.0-r0 |
| Chainguard | grpcurl | 1.8.7-r7 |
| Chainguard | k3d | 5.6.0-r11 |
| Chainguard | k3d-proxy | 5.6.0-r11 |
| Chainguard | k3d-tools | 5.6.0-r11 |
| Chainguard | kind | 0.22.0-r1 |
| Chainguard | kubeflow | 1.10.0-r2 |
| Chainguard | kubeflow-access-management | 1.10.0-r2 |
| Chainguard | kubeflow-access-management-compat | 1.10.0-r2 |
| Chainguard | kubeflow-access-management-fips | 0 |
| Chainguard | kubeflow-access-management-fips-compat | 0 |
| Chainguard | kubeflow-admission-webhook | 1.10.0-r2 |
| Chainguard | kubeflow-admission-webhook-compat | 1.10.0-r2 |
| Chainguard | kubeflow-admission-webhook-fips | 0 |
| Chainguard | kubeflow-admission-webhook-fips-compat | 0 |
| Chainguard | kubeflow-fips | 0 |
| Chainguard | kubeflow-notebook-controller | 1.10.0-r2 |
| Chainguard | kubeflow-notebook-controller-compat | 1.10.0-r2 |
| Chainguard | kubeflow-notebook-controller-fips | 0 |
| Chainguard | kubeflow-notebook-controller-fips-compat | 0 |
| Chainguard | kubeflow-profile-controller | 1.10.0-r2 |
| Chainguard | kubeflow-profile-controller-compat | 1.10.0-r2 |
| Chainguard | kubeflow-profile-controller-fips | 0 |
| Chainguard | kubeflow-profile-controller-fips-compat | 0 |
| Chainguard | kubeflow-pvcviewer-controller | 1.10.0-r2 |
| Chainguard | kubeflow-pvcviewer-controller-compat | 1.10.0-r2 |
| Chainguard | kubeflow-pvcviewer-controller-fips | 0 |
| Chainguard | kubeflow-pvcviewer-controller-fips-compat | 0 |
| Chainguard | kubeflow-tensorboard-controller | 1.10.0-r2 |
| Chainguard | kubeflow-tensorboard-controller-compat | 1.10.0-r2 |
| Chainguard | kubeflow-tensorboard-controller-fips | 0 |
| Chainguard | kubeflow-tensorboard-controller-fips-compat | 0 |
| Chainguard | prometheus-postgres-exporter-0.10 | 0 |
| Chainguard | terraform-provider-sendgrid | 1.0.1-r1 |
| Chainguard | terraform-provider-sendgrid-fips | 1.0.1-r1 |
| Debian 11 | golang-1.15 | no fix |
| Red Hat Enterprise Linux 8 | delve | 0:1.7.2-1.module+el8.6.0+12972+ebab5911 |
| Red Hat Enterprise Linux 8 | delve-debuginfo | 0:1.7.2-1.module+el8.6.0+12972+ebab5911 |
| Red Hat Enterprise Linux 8 | delve-debugsource | 0:1.7.2-1.module+el8.6.0+12972+ebab5911 |
| Red Hat Enterprise Linux 8 | go-toolset | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 8 | golang | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 8 | golang-bin | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 8 | golang-docs | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 8 | golang-misc | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 8 | golang-race | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 8 | golang-src | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 8 | golang-tests | 0:1.17.10-1.module+el8.6.0+15486+6d4da7db |
| Red Hat Enterprise Linux 9 | go-toolset | 0:1.17.12-1.el9_0 |
| Red Hat Enterprise Linux 9 | golang | 0:1.17.12-1.el9_0 |
| Red Hat Enterprise Linux 9 | golang-bin | 0:1.17.12-1.el9_0 |
| Red Hat Enterprise Linux 9 | golang-docs | 0:1.17.12-1.el9_0 |
| Red Hat Enterprise Linux 9 | golang-misc | 0:1.17.12-1.el9_0 |
| Red Hat Enterprise Linux 9 | golang-race | 0:1.17.12-1.el9_0 |
| Red Hat Enterprise Linux 9 | golang-src | 0:1.17.12-1.el9_0 |
| Red Hat Enterprise Linux 9 | golang-tests | 0:1.17.12-1.el9_0 |
| Red Hat openshift 4.10 | atomic-openshift-service-idler | 0:4.10.0-202207192015.p0.g39cfc66.assembly.stream.el8 |
| Red Hat openshift 4.10 | cri-o | 0:1.23.3-11.rhaos4.10.gitddf4b1a.1.el8 |
| Red Hat openshift 4.10 | cri-o | 0:1.23.3-11.rhaos4.10.gitddf4b1a.1.el7 |
| Red Hat openshift 4.10 | cri-o-debuginfo | 0:1.23.3-11.rhaos4.10.gitddf4b1a.1.el8 |
| Red Hat openshift 4.10 | cri-o-debuginfo | 0:1.23.3-11.rhaos4.10.gitddf4b1a.1.el7 |
| Red Hat openshift 4.10 | cri-o-debugsource | 0:1.23.3-11.rhaos4.10.gitddf4b1a.1.el8 |
| Red Hat openshift 4.10 | cri-tools | 0:1.23.0-1.1.el7 |
| Red Hat openshift 4.10 | cri-tools | 0:1.23.0-1.1.el8 |
| Red Hat openshift 4.10 | cri-tools-debuginfo | 0:1.23.0-1.1.el8 |
| Red Hat openshift 4.10 | cri-tools-debuginfo | 0:1.23.0-1.1.el7 |
| Red Hat openshift 4.10 | cri-tools-debugsource | 0:1.23.0-1.1.el8 |
| Red Hat openshift 4.10 | openshift | 0:4.10.0-202207192015.p0.g012e945.assembly.stream.el8 |
| Red Hat openshift 4.10 | openshift | 0:4.10.0-202207192015.p0.g012e945.assembly.stream.el7 |
| Red Hat openshift 4.10 | openshift-clients | 0:4.10.0-202207192015.p0.g45460a5.assembly.stream.el7 |
| Red Hat openshift 4.10 | openshift-clients | 0:4.10.0-202207192015.p0.g45460a5.assembly.stream.el8 |
| Red Hat openshift 4.10 | openshift-clients-redistributable | 0:4.10.0-202207192015.p0.g45460a5.assembly.stream.el7 |
| Red Hat openshift 4.10 | openshift-clients-redistributable | 0:4.10.0-202207192015.p0.g45460a5.assembly.stream.el8 |
| Red Hat openshift 4.10 | openshift-hyperkube | 0:4.10.0-202207192015.p0.g012e945.assembly.stream.el7 |
| Red Hat openshift 4.10 | openshift-hyperkube | 0:4.10.0-202207192015.p0.g012e945.assembly.stream.el8 |
| Red Hat service mesh 2.1 | servicemesh | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-cni | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-operator | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-pilot-agent | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-pilot-discovery | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-prometheus | 0:2.23.0-9.el8 |
| Red Hat service mesh 2.1 | servicemesh-proxy | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-proxy-debuginfo | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-proxy-debugsource | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-proxy-wasm | 0:2.1.5-1.el8 |
| Red Hat service mesh 2.1 | servicemesh-ratelimit | 0:2.1.5-1.el8 |
| Rocky Linux 8 | delve | 0:1.7.2-1.module+el8.6.0+824+8e984c20 |
| Rocky Linux 8 | go-toolset | 0:1.17.10-1.module+el8.6.0+986+efe4cea4 |
| Rocky Linux 8 | golang | 0:1.17.10-1.module+el8.6.0+986+efe4cea4 |
| Rocky Linux 9 | go-toolset | 0:1.17.12-1.el9_0 |
| Rocky Linux 9 | golang | 0:1.17.12-1.el9_0 |
| SUSE Enterprise Storage 7.1 | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | go1.17 | 1.17.10-150000.1.34.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | go1.18 | 1.18.2-150000.1.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | go1.17 | 1.17.10-150000.1.34.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | go1.18 | 1.18.2-150000.1.17.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| SUSE Linux Enterprise Real Time 15 SP3 | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| Ubuntu 14.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.6 | no fix |
| Ubuntu 18.04 LTS | golang-1.10 | no fix |
| Ubuntu 18.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~18.04.4 |
| Ubuntu 18.04 LTS | golang-1.8 | no fix |
| Ubuntu 18.04 LTS | golang-1.9 | no fix |
| Ubuntu 20.04 LTS | golang-1.13 | 1.13.8-1ubuntu1.2 |
| Ubuntu 20.04 LTS | golang-1.14 | no fix |
| Ubuntu 20.04 LTS | golang-1.16 | 1.16.2-0ubuntu1~20.04.1 |
| Ubuntu 20.04 LTS | golang-1.18 | 1.18.1-1ubuntu1~20.04.2 |
| Ubuntu 22.04 LTS | golang-1.13 | 1.13.8-1ubuntu2.22.04.2 |
| Ubuntu 22.04 LTS | golang-1.17 | no fix |
| Ubuntu 22.04 LTS | golang-1.18 | 1.18.1-1ubuntu1.1 |
| Ubuntu Pro 16.04 LTS | golang-1.13 | 1.13.8-1ubuntu1~16.04.3+esm3 |
| Ubuntu Pro 18.04 LTS | golang-1.13 | 1.13.8-1ubuntu1~18.04.4+esm1 |
| Ubuntu Pro 18.04 LTS | golang-1.16 | 1.16.2-0ubuntu1~18.04.2+esm1 |
| Wolfi | ctop | 0.7.7-r13 |
| Wolfi | dynamic-localpv-provisioner | 3.4.1-r3 |
| Wolfi | grpcurl | 1.8.7-r7 |
| Wolfi | k3d | 5.6.0-r11 |
| Wolfi | k3d-proxy | 5.6.0-r11 |
| Wolfi | k3d-tools | 5.6.0-r11 |
| Wolfi | kind | 0.22.0-r1 |
| Wolfi | kubeflow | 1.10.0-r2 |
| Wolfi | kubeflow-access-management | 1.10.0-r2 |
| Wolfi | kubeflow-access-management-compat | 1.10.0-r2 |
| Wolfi | kubeflow-admission-webhook | 1.10.0-r2 |
| Wolfi | kubeflow-admission-webhook-compat | 1.10.0-r2 |
| Wolfi | kubeflow-notebook-controller | 1.10.0-r2 |
| Wolfi | kubeflow-notebook-controller-compat | 1.10.0-r2 |
| Wolfi | kubeflow-profile-controller | 1.10.0-r2 |
| Wolfi | kubeflow-profile-controller-compat | 1.10.0-r2 |
| Wolfi | kubeflow-pvcviewer-controller | 1.10.0-r2 |
| Wolfi | kubeflow-pvcviewer-controller-compat | 1.10.0-r2 |
| Wolfi | kubeflow-tensorboard-controller | 1.10.0-r2 |
| Wolfi | kubeflow-tensorboard-controller-compat | 1.10.0-r2 |
| Wolfi | terraform-provider-sendgrid | 1.0.1-r1 |
| openSUSE Leap 15.3 | go1.17 | 1.17.10-150000.1.34.1 |
| openSUSE Leap 15.3 | go1.18 | 1.18.2-150000.1.17.1 |
| openSUSE Leap 15.4 | go1.17 | 1.17.10-150000.1.34.1 |
| openSUSE Leap 15.4 | go1.18 | 1.18.2-150000.1.17.1 |
| openSUSE Leap 15.4 | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| openSUSE Leap 15.5 | go1.18-openssl | 1.18.10.1-150000.1.9.1 |
| openSUSE Tumbleweed | go1.17 | 1.17.10-1.1 |
| openSUSE Tumbleweed | go1.18 | 1.18.2-1.1 |