<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for go1.16</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:0724-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-03-04T09:34:50Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-03-04T09:34:50Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-03-04T09:34:50Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for go1.16</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for go1.16 fixes the following issues:

- CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve (bsc#1195838).
- CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption (bsc#1195835).
- CVE-2022-23773: Fixed incorrect access control in cmd/go (bsc#1195834).

The following non-security bugs were fixed:

- go#50977 crypto/elliptic: IsOnCurve returns true for invalid field elements
- go#50700 math/big: Rat.SetString may consume large amount of RAM and crash
- go#50686 cmd/go: do not treat branches with semantic-version names as releases
- go#50866 cmd/compile: incorrect use of CMN on arm64
- go#50832 runtime/race: NoRaceMutexPureHappensBefore failures
- go#50811 cmd/go: remove bitbucket VCS probing
- go#50780 runtime: incorrect frame information in traceback traversal may hang the process.
- go#50721 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
- go#50682 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
- go#50645 testing: surprising interaction of subtests with TempDir
- go#50585 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
- go#50245 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of 'plugin' Package
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Container bci/golang:1.16-2022-724,Container trento/trento-runner:latest-2022-724,SUSE-2022-724,SUSE-SLE-Module-Development-Tools-15-SP3-2022-724,SUSE-SLE-Module-Development-Tools-15-SP4-2022-724,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-724,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-724,SUSE-SLE-Product-RT-15-SP2-2022-724,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-724,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-724,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-724,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-724,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-724,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-724,SUSE-Storage-7-2022-724</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220724-1/</URL>
      <Description>Link for SUSE-SU-2022:0724-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-March/010358.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:0724-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1182345</URL>
      <Description>SUSE Bug 1182345</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195834</URL>
      <Description>SUSE Bug 1195834</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195835</URL>
      <Description>SUSE Bug 1195835</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195838</URL>
      <Description>SUSE Bug 1195838</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-23772/</URL>
      <Description>SUSE CVE CVE-2022-23772 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-23773/</URL>
      <Description>SUSE CVE CVE-2022-23773 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-23806/</URL>
      <Description>SUSE CVE CVE-2022-23806 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="Container bci/golang:1.16">
      <Branch Type="Product Name" Name="Container bci/golang:1.16">
        <FullProductName ProductID="Container bci/golang:1.16">Container bci/golang:1.16</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Container trento/trento-runner:latest">
      <Branch Type="Product Name" Name="Container trento/trento-runner:latest">
        <FullProductName ProductID="Container trento/trento-runner:latest">Container trento/trento-runner:latest</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 7">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 7">
        <FullProductName ProductID="SUSE Enterprise Storage 7" CPE="cpe:/o:suse:ses:7">SUSE Enterprise Storage 7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS" CPE="cpe:/o:suse:sle_hpc-espos:15:sp2">SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp2">SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Development Tools 15 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Development Tools 15 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15 SP3" CPE="cpe:/o:suse:sle-module-development-tools:15:sp3">SUSE Linux Enterprise Module for Development Tools 15 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Real Time 15 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Real Time 15 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Real Time 15 SP2" CPE="cpe:/o:suse:sle_rt:15:sp2">SUSE Linux Enterprise Real Time 15 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP2-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP2-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-BCL" CPE="cpe:/o:suse:sles_bcl:15:sp2">SUSE Linux Enterprise Server 15 SP2-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP2-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp2">SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2" CPE="cpe:/o:suse:sles_sap:15:sp2">SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Proxy 4.1">
      <Branch Type="Product Name" Name="SUSE Manager Proxy 4.1">
        <FullProductName ProductID="SUSE Manager Proxy 4.1" CPE="cpe:/o:suse:suse-manager-proxy:4.1">SUSE Manager Proxy 4.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Retail Branch Server 4.1">
      <Branch Type="Product Name" Name="SUSE Manager Retail Branch Server 4.1">
        <FullProductName ProductID="SUSE Manager Retail Branch Server 4.1" CPE="cpe:/o:suse:suse-manager-retail-branch-server:4.1">SUSE Manager Retail Branch Server 4.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Server 4.1">
      <Branch Type="Product Name" Name="SUSE Manager Server 4.1">
        <FullProductName ProductID="SUSE Manager Server 4.1" CPE="cpe:/o:suse:suse-manager-server:4.1">SUSE Manager Server 4.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="go1.16-1.16.14-1.43.1">
      <FullProductName ProductID="go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="go1.16-doc-1.16.14-1.43.1">
      <FullProductName ProductID="go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="go1.16-race-1.16.14-1.43.1">
      <FullProductName ProductID="go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1</FullProductName>
    </Branch>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="Container bci/golang:1.16">
      <FullProductName ProductID="Container bci/golang:1.16:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of Container bci/golang:1.16</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="Container trento/trento-runner:latest">
      <FullProductName ProductID="Container trento/trento-runner:latest:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of Container trento/trento-runner:latest</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7">
      <FullProductName ProductID="SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Enterprise Storage 7</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Development Tools 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Development Tools 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Development Tools 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Real Time 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Real Time 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Real Time 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Real Time 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Real Time 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Real Time 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.1">
      <FullProductName ProductID="SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Manager Proxy 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.1">
      <FullProductName ProductID="SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Manager Proxy 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Proxy 4.1">
      <FullProductName ProductID="SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Manager Proxy 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.1">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Manager Retail Branch Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.1">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Manager Retail Branch Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Retail Branch Server 4.1">
      <FullProductName ProductID="SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Manager Retail Branch Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.1">
      <FullProductName ProductID="SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1">go1.16-1.16.14-1.43.1 as a component of SUSE Manager Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-doc-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.1">
      <FullProductName ProductID="SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1">go1.16-doc-1.16.14-1.43.1 as a component of SUSE Manager Server 4.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="go1.16-race-1.16.14-1.43.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 4.1">
      <FullProductName ProductID="SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1">go1.16-race-1.16.14-1.43.1 as a component of SUSE Manager Server 4.1</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.</Note>
    </Notes>
    <CVE>CVE-2022-23772</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container bci/golang:1.16:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>Container trento/trento-runner:latest:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220724-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-23772.html</URL>
        <Description>CVE-2022-23772</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195835</URL>
        <Description>SUSE Bug 1195835</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.</Note>
    </Notes>
    <CVE>CVE-2022-23773</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container bci/golang:1.16:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>Container trento/trento-runner:latest:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220724-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-23773.html</URL>
        <Description>CVE-2022-23773</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195834</URL>
        <Description>SUSE Bug 1195834</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.</Note>
    </Notes>
    <CVE>CVE-2022-23806</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container bci/golang:1.16:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>Container trento/trento-runner:latest:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Development Tools 15 SP3:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Real Time 15 SP2:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-BCL:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Proxy 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Retail Branch Server 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-doc-1.16.14-1.43.1</ProductID>
        <ProductID>SUSE Manager Server 4.1:go1.16-race-1.16.14-1.43.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.4</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:N/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220724-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-23806.html</URL>
        <Description>CVE-2022-23806</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195838</URL>
        <Description>SUSE Bug 1195838</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206559</URL>
        <Description>SUSE Bug 1206559</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208723</URL>
        <Description>SUSE Bug 1208723</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
