CVE:CVE-2022-28327
CNNVD:CNNVD-202204-3890
Google Go是美国谷歌（Google）公司的一款静态强类型、编译型、并发型，并具有垃圾回收功能的编程语言。
Google Go 1.17.9之前版本和1.18.1之前版本存在安全漏洞，该漏洞源于crypto/elliptic中通用的P-256 功能允许长标量输入。
solution:Upgrade golang go to a higher version than 1.17.9,1.18.1,and avoid the version (,1.17.9),[1.18.0,1.18.1); Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36