{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - TUS 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat JBoss Middleware Text-Only Advisories for MIDDLEWARE 1 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le",
      "product": {
        "name": "Platform",
        "vendor": {
          "name": "SolarWinds",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Integration Text-Only Advisories x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.4 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.4 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Openshift Application Runtimes Text-Only Advisories x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.4 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Integration - Camel K 1 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64",
      "product": {
        "name": "Platform",
        "vendor": {
          "name": "SolarWinds",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Fuse 1 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x",
      "product": {
        "name": "Platform",
        "vendor": {
          "name": "SolarWinds",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat JBoss Data Grid Text-Only Advisories x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-27223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27223"
    },
    {
      "name": "CVE-2020-27218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27218"
    },
    {
      "name": "CVE-2021-21343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21343"
    },
    {
      "name": "CVE-2021-29425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29425"
    },
    {
      "name": "CVE-2021-21409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21409"
    },
    {
      "name": "CVE-2021-22118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22118"
    },
    {
      "name": "CVE-2020-2875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-2875"
    },
    {
      "name": "CVE-2021-3536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3536"
    },
    {
      "name": "CVE-2021-28169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28169"
    },
    {
      "name": "CVE-2021-21348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21348"
    },
    {
      "name": "CVE-2020-11988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11988"
    },
    {
      "name": "CVE-2020-35510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35510"
    },
    {
      "name": "CVE-2021-45606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45606"
    },
    {
      "name": "CVE-2020-2934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-2934"
    },
    {
      "name": "CVE-2021-21344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21344"
    },
    {
      "name": "CVE-2020-26259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26259"
    },
    {
      "name": "CVE-2021-3597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3597"
    },
    {
      "name": "CVE-2021-28170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28170"
    },
    {
      "name": "CVE-2021-21341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21341"
    },
    {
      "name": "CVE-2020-13949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13949"
    },
    {
      "name": "CVE-2021-4104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-4104"
    },
    {
      "name": "CVE-2021-3690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3690"
    },
    {
      "name": "CVE-2020-17521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-17521"
    },
    {
      "name": "CVE-2021-22696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22696"
    },
    {
      "name": "CVE-2021-28163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28163"
    },
    {
      "name": "CVE-2021-37137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37137"
    },
    {
      "name": "CVE-2020-9488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9488"
    },
    {
      "name": "CVE-2021-21347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21347"
    },
    {
      "name": "CVE-2021-27568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27568"
    },
    {
      "name": "CVE-2020-26217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26217"
    },
    {
      "name": "CVE-2021-37136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37136"
    },
    {
      "name": "CVE-2021-23926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23926"
    },
    {
      "name": "CVE-2019-10744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10744"
    },
    {
      "name": "CVE-2021-21295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21295"
    },
    {
      "name": "CVE-2021-21346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21346"
    },
    {
      "name": "CVE-2021-30468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30468"
    },
    {
      "name": "CVE-2021-21351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21351"
    },
    {
      "name": "CVE-2021-21345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21345"
    },
    {
      "name": "CVE-2020-28491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-28491"
    },
    {
      "name": "CVE-2021-45046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45046"
    },
    {
      "name": "CVE-2021-37714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37714"
    },
    {
      "name": "CVE-2019-12415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12415"
    },
    {
      "name": "CVE-2021-20218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20218"
    },
    {
      "name": "CVE-2020-27782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27782"
    },
    {
      "name": "CVE-2021-30129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30129"
    },
    {
      "name": "CVE-2020-17527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527"
    },
    {
      "name": "CVE-2021-21349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21349"
    },
    {
      "name": "CVE-2021-44228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
    },
    {
      "name": "CVE-2020-13943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943"
    },
    {
      "name": "CVE-2020-15522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15522"
    },
    {
      "name": "CVE-2021-28164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28164"
    },
    {
      "name": "CVE-2020-11987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11987"
    },
    {
      "name": "CVE-2021-21290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21290"
    },
    {
      "name": "CVE-2021-21342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21342"
    },
    {
      "name": "CVE-2021-3629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3629"
    },
    {
      "name": "CVE-2021-21350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21350"
    },
    {
      "name": "CVE-2021-34428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-34428"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5101 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHBA-2021:5101"
    }
  ],
  "reference": "CERTFR-2021-AVI-951",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-12-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de\nRedHat. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de RedHat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5130 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5130"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHBA-2021:5114 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHBA-2021:5114"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5138 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5138"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5132 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5132"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5126 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5126"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5134 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5134"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5133 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5133"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5108 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5108"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5093 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5093"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Server - AUS 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - TUS 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat JBoss Middleware Text-Only Advisories for MIDDLEWARE 1 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le",
      "product": {
        "name": "Platform",
        "vendor": {
          "name": "SolarWinds",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Integration Text-Only Advisories x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.4 ppc64le",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.4 aarch64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Openshift Application Runtimes Text-Only Advisories x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.4 x86_64",
      "product": {
        "name": "Red Hat CodeReady Linux Builder",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Integration - Camel K 1 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64",
      "product": {
        "name": "Platform",
        "vendor": {
          "name": "SolarWinds",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Fuse 1 x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x",
      "product": {
        "name": "Platform",
        "vendor": {
          "name": "SolarWinds",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4 x86_64",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat JBoss Data Grid Text-Only Advisories x86_64",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-27223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27223"
    },
    {
      "name": "CVE-2020-27218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27218"
    },
    {
      "name": "CVE-2021-21343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21343"
    },
    {
      "name": "CVE-2021-29425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29425"
    },
    {
      "name": "CVE-2021-21409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21409"
    },
    {
      "name": "CVE-2021-22118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22118"
    },
    {
      "name": "CVE-2020-2875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-2875"
    },
    {
      "name": "CVE-2021-3536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3536"
    },
    {
      "name": "CVE-2021-28169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28169"
    },
    {
      "name": "CVE-2021-21348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21348"
    },
    {
      "name": "CVE-2020-11988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11988"
    },
    {
      "name": "CVE-2020-35510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35510"
    },
    {
      "name": "CVE-2021-45606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45606"
    },
    {
      "name": "CVE-2020-2934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-2934"
    },
    {
      "name": "CVE-2021-21344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21344"
    },
    {
      "name": "CVE-2020-26259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26259"
    },
    {
      "name": "CVE-2021-3597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3597"
    },
    {
      "name": "CVE-2021-28170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28170"
    },
    {
      "name": "CVE-2021-21341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21341"
    },
    {
      "name": "CVE-2020-13949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13949"
    },
    {
      "name": "CVE-2021-4104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-4104"
    },
    {
      "name": "CVE-2021-3690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3690"
    },
    {
      "name": "CVE-2020-17521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-17521"
    },
    {
      "name": "CVE-2021-22696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22696"
    },
    {
      "name": "CVE-2021-28163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28163"
    },
    {
      "name": "CVE-2021-37137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37137"
    },
    {
      "name": "CVE-2020-9488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9488"
    },
    {
      "name": "CVE-2021-21347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21347"
    },
    {
      "name": "CVE-2021-27568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27568"
    },
    {
      "name": "CVE-2020-26217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26217"
    },
    {
      "name": "CVE-2021-37136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37136"
    },
    {
      "name": "CVE-2021-23926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23926"
    },
    {
      "name": "CVE-2019-10744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10744"
    },
    {
      "name": "CVE-2021-21295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21295"
    },
    {
      "name": "CVE-2021-21346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21346"
    },
    {
      "name": "CVE-2021-30468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30468"
    },
    {
      "name": "CVE-2021-21351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21351"
    },
    {
      "name": "CVE-2021-21345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21345"
    },
    {
      "name": "CVE-2020-28491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-28491"
    },
    {
      "name": "CVE-2021-45046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45046"
    },
    {
      "name": "CVE-2021-37714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37714"
    },
    {
      "name": "CVE-2019-12415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12415"
    },
    {
      "name": "CVE-2021-20218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-20218"
    },
    {
      "name": "CVE-2020-27782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27782"
    },
    {
      "name": "CVE-2021-30129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30129"
    },
    {
      "name": "CVE-2020-17527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527"
    },
    {
      "name": "CVE-2021-21349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21349"
    },
    {
      "name": "CVE-2021-44228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
    },
    {
      "name": "CVE-2020-13943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943"
    },
    {
      "name": "CVE-2020-15522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15522"
    },
    {
      "name": "CVE-2021-28164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28164"
    },
    {
      "name": "CVE-2020-11987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11987"
    },
    {
      "name": "CVE-2021-21290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21290"
    },
    {
      "name": "CVE-2021-21342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21342"
    },
    {
      "name": "CVE-2021-3629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3629"
    },
    {
      "name": "CVE-2021-21350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-21350"
    },
    {
      "name": "CVE-2021-34428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-34428"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5101 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHBA-2021:5101"
    }
  ],
  "reference": "CERTFR-2021-AVI-951",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-12-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de\nRedHat. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de RedHat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5130 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5130"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHBA-2021:5114 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHBA-2021:5114"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5138 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5138"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5132 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5132"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5126 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5126"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5134 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5134"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5133 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5133"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5108 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5108"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2021:5093 du 14 d\u00e9cembre 2021",
      "url": "https://access.redhat.com/errata/RHSA-2021:5093"
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "fabric8-kubernetes-client",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "kubernetes-client-4.2.0 and after"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "396A03F1-9514-4805-9AB5-6B31FD4B4413",
              "versionEndExcluding": "4.7.2",
              "versionStartIncluding": "4.2.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "15E80E40-DCBB-4043-B074-674D548FD0AA",
              "versionEndExcluding": "4.11.2",
              "versionStartIncluding": "4.8.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A777CC85-DC45-4E4B-B11C-E0CF9F06593D",
              "versionEndExcluding": "4.13.2",
              "versionStartIncluding": "4.12.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "70D40776-9CBC-4F2F-9702-525330082531",
              "versionEndExcluding": "5.0.2",
              "versionStartIncluding": "5.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:a-mq_online:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6C99D72-43AD-4A22-AE66-44E868323D4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:build_of_quarkus:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE29B9D6-63DC-4779-ACE8-4E51E6A0AF37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:codeready_studio:12.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BAF877F-B8D5-4313-AC5C-26BB82006B30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:descision_manager:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5863BBF-829E-44EF-ACE8-61D5037251F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B87C8AD3-8878-4546-86C2-BF411876648C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B40CCE4F-EA2C-453D-BB76-6388767E5C6D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F87326E-0B56-4356-A889-73D026DB1D4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "20A6B40D-F991-4712-8E30-5FE008505CB7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2"
    },
    {
      "lang": "es",
      "value": "Se encontr\u00f3 un fallo en fabric8 kubernetes-client en versi\u00f3n 4.2.0 y posteriores.\u0026#xa0;Este fallo permite a un pod/container malicioso causar que unas aplicaciones que usan el comando \"copy\" de fabric8 kubernetes-client extraigan archivos fuera de la ruta de trabajo.\u0026#xa0;La mayor amenaza de esta vulnerabilidad es la integridad y la disponibilidad del sistema.\u0026#xa0;Esto ha sido corregido en kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2"
    }
  ],
  "id": "CVE-2021-20218",
  "lastModified": "2026-06-17T03:33:29.460",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.4,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-03-16T21:15:10.930",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ],
      "source": "secalert@redhat.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 4.7.1"
      },
      "package": {
        "ecosystem": "Maven",
        "name": "io.fabric8:kubernetes-client"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.2.0"
            },
            {
              "fixed": "4.7.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 4.11.1"
      },
      "package": {
        "ecosystem": "Maven",
        "name": "io.fabric8:kubernetes-client"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.8.0"
            },
            {
              "fixed": "4.11.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 4.13.1"
      },
      "package": {
        "ecosystem": "Maven",
        "name": "io.fabric8:kubernetes-client"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.12.0"
            },
            {
              "fixed": "4.13.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 5.0.1"
      },
      "package": {
        "ecosystem": "Maven",
        "name": "io.fabric8:kubernetes-client"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2021-20218"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2022-06-22T18:50:29Z",
    "nvd_published_at": "2021-03-16T21:15:00Z",
    "severity": "HIGH"
  },
  "details": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2",
  "id": "GHSA-jwh2-ffg4-48xc",
  "modified": "2022-06-22T18:50:29Z",
  "published": "2022-05-24T17:44:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20218"
    },
    {
      "type": "WEB",
      "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client"
}

{
  "GSD": {
    "alias": "CVE-2021-20218",
    "description": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2",
    "id": "GSD-2021-20218",
    "references": [
      "https://access.redhat.com/errata/RHSA-2022:0297",
      "https://access.redhat.com/errata/RHSA-2022:0296",
      "https://access.redhat.com/errata/RHSA-2021:5134",
      "https://access.redhat.com/errata/RHSA-2021:3207",
      "https://access.redhat.com/errata/RHSA-2021:3205",
      "https://access.redhat.com/errata/RHSA-2021:1006",
      "https://access.redhat.com/errata/RHSA-2021:1004",
      "https://access.redhat.com/errata/RHSA-2021:0986"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-20218"
      ],
      "details": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2",
      "id": "GSD-2021-20218",
      "modified": "2023-12-13T01:23:12.672130Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2021-20218",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "fabric8-kubernetes-client",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "kubernetes-client-4.2.0 and after"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-22"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
          },
          {
            "name": "https://github.com/fabric8io/kubernetes-client/issues/2715",
            "refsource": "MISC",
            "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "[4.2.0,4.7.2),[4.8.0,4.11.2),[4.12.0,4.13.2),[5.0.0,5.0.2)",
          "affected_versions": "All versions starting from 4.2.0 before 4.7.2, all versions starting from 4.8.0 before 4.11.2, all versions starting from 4.12.0 before 4.13.2, all versions starting from 5.0.0 before 5.0.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-22",
            "CWE-937"
          ],
          "date": "2021-03-25",
          "description": "A flaw was found in the fabric8 kubernetes-client. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path.",
          "fixed_versions": [
            "4.7.2",
            "4.11.2",
            "4.13.2",
            "5.0.2"
          ],
          "identifier": "CVE-2021-20218",
          "identifiers": [
            "CVE-2021-20218"
          ],
          "not_impacted": "All versions before 4.2.0, all versions starting from 4.7.2 before 4.8.0, all versions starting from 4.11.2 before 4.12.0, all versions starting from 4.13.2 before 5.0.0, all versions starting from 5.0.2",
          "package_slug": "maven/io.fabric8/kubernetes-client",
          "pubdate": "2021-03-16",
          "solution": "Upgrade to versions 4.7.2, 4.11.2, 4.13.2, 5.0.2 or above.",
          "title": "Path Traversal",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-20218",
            "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
          ],
          "uuid": "83e65520-e01f-4191-b0f4-164d27f5a901"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.7.2",
                "versionStartIncluding": "4.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.11.2",
                "versionStartIncluding": "4.8.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.13.2",
                "versionStartIncluding": "4.12.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.0.2",
                "versionStartIncluding": "5.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:a-mq_online:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:build_of_quarkus:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:codeready_studio:12.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:descision_manager:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2021-20218"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-22"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/fabric8io/kubernetes-client/issues/2715",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Vendor Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 4.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 2.2,
          "impactScore": 5.2
        }
      },
      "lastModifiedDate": "2021-03-25T18:43Z",
      "publishedDate": "2021-03-16T21:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update of the Red Hat OpenShift Container Platform 3.11 and 4.6/4.7 container images is now available for Red Hat AMQ Online.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The release of Red Hat AMQ Online 1.7.0 serves as a replacement for earlier AMQ Online releases, and includes bug fixes and enhancements, which are documented in the Release Notes document linked in the References.\n\nSecurity Fix(es):\n\n* fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise (CVE-2021-20218)\n\n* netty: Information disclosure via the local system temporary directory (CVE-2021-21290)\n\n* netty: possible request smuggling in HTTP/2 due missing validation (CVE-2021-21295)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:0986",
        "url": "https://access.redhat.com/errata/RHSA-2021:0986"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "1923405",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
      },
      {
        "category": "external",
        "summary": "1927028",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1927028"
      },
      {
        "category": "external",
        "summary": "1937364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1937364"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0986.json"
      }
    ],
    "title": "Red Hat Security Advisory: AMQ Online 1.7.0 release and security update",
    "tracking": {
      "current_release_date": "2026-09-07T14:20:19+00:00",
      "generator": {
        "date": "2026-09-07T14:20:19+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2021:0986",
      "initial_release_date": "2021-03-25T09:43:52+00:00",
      "revision_history": [
        {
          "date": "2021-03-25T09:43:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-03-25T09:43:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-07T14:20:19+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AMQ Online 1.7.0 GA",
                "product": {
                  "name": "Red Hat AMQ Online 1.7.0 GA",
                  "product_id": "Red Hat AMQ Online 1.7.0 GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_online:1.7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss AMQ"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Ivan Bodrov"
          ]
        },
        {
          "names": [
            "Marc Nuri"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2021-20218",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2021-02-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1923405"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In OpenShift Container Platform 4 (OCP) there are no plans to maintain the ose-logging-elasticsearch5 container, therefore it has been marked wontfix at this time and maybe fixed in a future update.\n\nRed Hat CodeReady WorkSpaces 2.7.0 does not ship fabric8-kubernetes-client and is therefore not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ Online 1.7.0 GA"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "RHBZ#1923405",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-20218",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-20218",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "https://github.com/fabric8io/kubernetes-client/issues/2715",
          "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
        }
      ],
      "release_date": "2021-01-12T04:35:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-25T09:43:52+00:00",
          "details": "The Red Hat OpenShift Container Platform 3.11 and 4.6/4.7 container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available from https://access.redhat.com.\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.\n\nBefore applying this update, make sure all previously released errata relevant to your system have been applied.",
          "product_ids": [
            "Red Hat AMQ Online 1.7.0 GA"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:0986"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ Online 1.7.0 GA"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise"
    },
    {
      "cve": "CVE-2021-21290",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2021-02-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1927028"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Netty there is a vulnerability on Unix-like systems involving an insecure temp file. When netty\u0027s multipart decoders are used, a local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: Information disclosure via the local system temporary directory",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ Online 1.7.0 GA"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-21290"
        },
        {
          "category": "external",
          "summary": "RHBZ#1927028",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1927028"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-21290",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-21290"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-21290",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21290"
        }
      ],
      "release_date": "2021-02-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-25T09:43:52+00:00",
          "details": "The Red Hat OpenShift Container Platform 3.11 and 4.6/4.7 container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available from https://access.redhat.com.\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.\n\nBefore applying this update, make sure all previously released errata relevant to your system have been applied.",
          "product_ids": [
            "Red Hat AMQ Online 1.7.0 GA"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:0986"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ Online 1.7.0 GA"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "netty: Information disclosure via the local system temporary directory"
    },
    {
      "cve": "CVE-2021-21295",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2021-03-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1937364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel\u0027s pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: possible request smuggling in HTTP/2 due missing validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Important and Critical flaws.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ Online 1.7.0 GA"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-21295"
        },
        {
          "category": "external",
          "summary": "RHBZ#1937364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1937364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-21295",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-21295"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-21295",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21295"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj"
        }
      ],
      "release_date": "2021-03-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-25T09:43:52+00:00",
          "details": "The Red Hat OpenShift Container Platform 3.11 and 4.6/4.7 container images provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available from https://access.redhat.com.\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.\n\nBefore applying this update, make sure all previously released errata relevant to your system have been applied.",
          "product_ids": [
            "Red Hat AMQ Online 1.7.0 GA"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:0986"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ Online 1.7.0 GA"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "netty: possible request smuggling in HTTP/2 due missing validation"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat build of Quarkus.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat build of Quarkus 1.11.6 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section.\n\nSecurity Fix(es):\n\n* cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution (CVE-2020-26238)\n\n* resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client\u0027s WebApplicationException handling (CVE-2020-25633)\n\n* fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise (CVE-2021-20218)\n\n* resteasy: information disclosure via HTTP response reuse (CVE-2020-25724)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:1004",
        "url": "https://access.redhat.com/errata/RHSA-2021:1004"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=1.11.6",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus\u0026downloadType=distributions\u0026version=1.11.6"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_build_of_quarkus/1.11/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_build_of_quarkus/1.11/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/4966181",
        "url": "https://access.redhat.com/articles/4966181"
      },
      {
        "category": "external",
        "summary": "1879042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879042"
      },
      {
        "category": "external",
        "summary": "1899354",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1899354"
      },
      {
        "category": "external",
        "summary": "1901655",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901655"
      },
      {
        "category": "external",
        "summary": "1923405",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1004.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Quarkus 1.11.6 release and security update",
    "tracking": {
      "current_release_date": "2026-08-11T15:13:38+00:00",
      "generator": {
        "date": "2026-08-11T15:13:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.14"
        }
      },
      "id": "RHSA-2021:1004",
      "initial_release_date": "2021-03-29T11:12:46+00:00",
      "revision_history": [
        {
          "date": "2021-03-29T11:12:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-03-29T11:12:46+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-11T15:13:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Text-Only RHOAR",
                "product": {
                  "name": "Text-Only RHOAR",
                  "product_id": "Text-Only RHOAR",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_application_runtimes:1.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Quarkus"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-25633",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "discovery_date": "2020-09-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879042"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server\u0027s potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this vulnerability is to confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client\u0027s WebApplicationException handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-25633"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879042",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879042"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25633",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-25633"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25633",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25633"
        }
      ],
      "release_date": "2020-09-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-29T11:12:46+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1004"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client\u0027s WebApplicationException handling"
    },
    {
      "cve": "CVE-2020-25724",
      "cwe": {
        "id": "CWE-567",
        "name": "Unsynchronized Access to Shared Data in a Multithreaded Context"
      },
      "discovery_date": "2020-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1899354"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy: information disclosure via HTTP response reuse",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-25724"
        },
        {
          "category": "external",
          "summary": "RHBZ#1899354",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1899354"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25724",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-25724"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25724",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25724"
        }
      ],
      "release_date": "2020-11-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-29T11:12:46+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1004"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "resteasy: information disclosure via HTTP response reuse"
    },
    {
      "cve": "CVE-2020-26238",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2020-11-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1901655"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in cron-utils. End applications passing unsanitized user input which is subsequently parsed by the `@Cron` annotation can allow an attacker to execute arbitrary expressions using JavaEL which will be implicitly executed by the constraint validator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-26238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1901655",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901655"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-26238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-26238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-26238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26238"
        }
      ],
      "release_date": "2020-11-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-29T11:12:46+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1004"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ivan Bodrov"
          ]
        },
        {
          "names": [
            "Marc Nuri"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2021-20218",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2021-02-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1923405"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In OpenShift Container Platform 4 (OCP) there are no plans to maintain the ose-logging-elasticsearch5 container, therefore it has been marked wontfix at this time and maybe fixed in a future update.\n\nRed Hat CodeReady WorkSpaces 2.7.0 does not ship fabric8-kubernetes-client and is therefore not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only RHOAR"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "RHBZ#1923405",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-20218",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-20218",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "https://github.com/fabric8io/kubernetes-client/issues/2715",
          "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
        }
      ],
      "release_date": "2021-01-12T04:35:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-03-29T11:12:46+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only RHOAR"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1004"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Text-Only RHOAR"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Container Platform release 4.7.5 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container\nPlatform 4.7.5. See the following advisory for the container images for\nthis release:\n\nhttps://access.redhat.com/errata/RHSA-2021:1005\n\nAll OpenShift Container Platform 4.7 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift Console\nor the CLI oc command. Instructions for upgrading a cluster are available\nat\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-between-minor.html#understanding-upgrade-channels_updating-cluster-between-minor\n\nSecurity Fix(es):\n\n* gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation (CVE-2021-3121)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Placeholder bug for OCP 4.7.0 rpm release (BZ#1944016)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:1006",
        "url": "https://access.redhat.com/errata/RHSA-2021:1006"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "1921650",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1921650"
      },
      {
        "category": "external",
        "summary": "1944016",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1944016"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1006.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Container Platform 4.7.5 security and bug fix update",
    "tracking": {
      "current_release_date": "2026-08-19T17:11:59+00:00",
      "generator": {
        "date": "2026-08-19T17:11:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2021:1006",
      "initial_release_date": "2021-04-05T13:18:31+00:00",
      "revision_history": [
        {
          "date": "2021-04-05T13:18:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-04-05T13:18:31+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-19T17:11:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.7",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.7",
                  "product_id": "7Server-RH7-RHOSE-4.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.7::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat OpenShift Container Platform 4.7",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.7",
                  "product_id": "8Base-RHOSE-4.7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4.7::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
                "product": {
                  "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
                  "product_id": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o@1.20.2-4.rhaos4.7.gitd5a999a.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
                "product": {
                  "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
                  "product_id": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202103251046.p0.git.3957.c4da68b.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
                "product": {
                  "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
                  "product_id": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202103251046.p0.git.3957.c4da68b.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
                "product": {
                  "name": "openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
                  "product_id": "openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-kuryr@4.7.0-202103241948.p0.git.2504.add19d0.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
                "product": {
                  "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
                  "product_id": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
                "product": {
                  "name": "jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
                  "product_id": "jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jenkins-2-plugins@4.7.1616671397-1.el8?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
                "product": {
                  "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
                  "product_id": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o@1.20.2-4.rhaos4.7.gitd5a999a.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
                "product": {
                  "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
                  "product_id": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-4.rhaos4.7.gitd5a999a.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
                "product": {
                  "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
                  "product_id": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202103251046.p0.git.3957.c4da68b.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
                "product": {
                  "name": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
                  "product_id": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.7.0-202103251046.p0.git.3957.c4da68b.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
                "product": {
                  "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
                  "product_id": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202103251046.p0.git.3957.c4da68b.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
                "product": {
                  "name": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
                  "product_id": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.7.0-202103251046.p0.git.3957.c4da68b.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                "product": {
                  "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                  "product_id": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                "product": {
                  "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                  "product_id": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                "product": {
                  "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                  "product_id": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
                "product": {
                  "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
                  "product_id": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202103251046.p0.git.3957.c4da68b.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                "product": {
                  "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                  "product_id": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                "product": {
                  "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                  "product_id": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                "product": {
                  "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                  "product_id": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
                "product": {
                  "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
                  "product_id": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-clients@4.7.0-202103251046.p0.git.3957.c4da68b.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                "product": {
                  "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                  "product_id": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                "product": {
                  "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                  "product_id": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o-debugsource@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                "product": {
                  "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                  "product_id": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cri-o-debuginfo@1.20.2-4.rhaos4.7.gitd5a999a.el8?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                "product": {
                  "name": "openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_id": "openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-kuryr-cni@4.7.0-202103241948.p0.git.2504.add19d0.el8?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                "product": {
                  "name": "openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_id": "openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-kuryr-common@4.7.0-202103241948.p0.git.2504.add19d0.el8?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                "product": {
                  "name": "openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_id": "openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openshift-kuryr-controller@4.7.0-202103241948.p0.git.2504.add19d0.el8?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                "product": {
                  "name": "python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_id": "python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-kuryr-kubernetes@4.7.0-202103241948.p0.git.2504.add19d0.el8?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
                "product": {
                  "name": "jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
                  "product_id": "jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jenkins-2-plugins@4.7.1616671397-1.el8?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src"
        },
        "product_reference": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
        "relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64"
        },
        "product_reference": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
        "relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64"
        },
        "product_reference": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
        "relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src"
        },
        "product_reference": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
        "relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64"
        },
        "product_reference": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
        "relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64"
        },
        "product_reference": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
        "relates_to_product_reference": "7Server-RH7-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le"
        },
        "product_reference": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x"
        },
        "product_reference": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src"
        },
        "product_reference": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64"
        },
        "product_reference": "cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le"
        },
        "product_reference": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x"
        },
        "product_reference": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64"
        },
        "product_reference": "cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le"
        },
        "product_reference": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x"
        },
        "product_reference": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64"
        },
        "product_reference": "cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch"
        },
        "product_reference": "jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jenkins-2-plugins-0:4.7.1616671397-1.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src"
        },
        "product_reference": "jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le"
        },
        "product_reference": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x"
        },
        "product_reference": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src"
        },
        "product_reference": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64"
        },
        "product_reference": "openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64"
        },
        "product_reference": "openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src"
        },
        "product_reference": "openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
        },
        "product_reference": "openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
        },
        "product_reference": "openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
        },
        "product_reference": "openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch as a component of Red Hat OpenShift Container Platform 4.7",
          "product_id": "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
        },
        "product_reference": "python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
        "relates_to_product_reference": "8Base-RHOSE-4.7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-3114",
      "cwe": {
        "id": "CWE-682",
        "name": "Incorrect Calculation"
      },
      "discovery_date": "2021-01-21T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
            "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1918750"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw detected in golang: crypto/elliptic, in which P-224 keys as generated can return incorrect inputs, reducing the strength of the cryptography. The highest threat from this vulnerability is confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: crypto/elliptic: incorrect operations on the P-224 curve",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift ServiceMesh (OSSM) 1.1 is Out Of Support Scope (OOSS) for Moderate and Low impact vulnerabilities because it is now in the Maintenance Phase of the support.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
          "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
          "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64"
        ],
        "known_not_affected": [
          "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
          "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
          "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
          "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
          "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
          "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
          "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
          "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3114"
        },
        {
          "category": "external",
          "summary": "RHBZ#1918750",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918750"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3114",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3114"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3114",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3114"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/mperVMGa98w",
          "url": "https://groups.google.com/g/golang-announce/c/mperVMGa98w"
        }
      ],
      "release_date": "2021-01-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-04-05T13:18:31+00:00",
          "details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html.",
          "product_ids": [
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
            "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: crypto/elliptic: incorrect operations on the P-224 curve"
    },
    {
      "cve": "CVE-2021-3121",
      "cwe": {
        "id": "CWE-129",
        "name": "Improper Validation of Array Index"
      },
      "discovery_date": "2021-01-28T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
            "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
            "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1921650"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this vulnerability is to availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform (OCP), OpenShift ServiceMesh (OSSM) and Red Hat OpenShift Jaeger (RHOSJ) all include code generated by github.com/gogo/protobuf to parse protobuf messages. However, no component is known to accept protobuf messages from unauthenticated sources, hence this vulnerability is rated Moderate for OCP, OSSM and RHOSJ.\n\nOpenShift Virtualization includes code generated by github.com/gogo/protobuf to parse protobuf messages. However, no component of OpenShift Virtualization is known to accept protobuf messages from unauthenticated sources, hence this vulnerability is rated Moderate.\n\nRed Hat Advanced Cluster Management for Kubernetes (RHACM) includes code generated by github.com/gogo/protobuf to parse protobuf messages. However, no RHACM component is accepting  protobuf messages from unauthenticated sources and are used with a limited scope, hence this vulnerability is rated Moderate for RHACM.\n\nRed Hat Cluster Application Migration (CAM) includes code generated by github.com/gogo/protobuf to parse protobuf messages. However, no CAM component is known to accept protobuf messages from unauthenticated sources, hence this vulnerability is rated Moderate for CAM.\n\nCryostat-2 is affected as it does ship gogo/protobuf library with it\u0027s distribution but the only use for Protobuf would be the Kubernetes/OpenShift API server the operator communicates with and it should be authenticated hence it is affected with Moderate impact.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
          "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
          "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
          "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64"
        ],
        "known_not_affected": [
          "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
          "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
          "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
          "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
          "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
          "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3121"
        },
        {
          "category": "external",
          "summary": "RHBZ#1921650",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1921650"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3121"
        }
      ],
      "release_date": "2021-01-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-04-05T13:18:31+00:00",
          "details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html.",
          "product_ids": [
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
            "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ivan Bodrov"
          ]
        },
        {
          "names": [
            "Marc Nuri"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2021-20218",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2021-02-01T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
            "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1923405"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In OpenShift Container Platform 4 (OCP) there are no plans to maintain the ose-logging-elasticsearch5 container, therefore it has been marked wontfix at this time and maybe fixed in a future update.\n\nRed Hat CodeReady WorkSpaces 2.7.0 does not ship fabric8-kubernetes-client and is therefore not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
          "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src"
        ],
        "known_not_affected": [
          "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
          "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
          "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
          "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
          "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
          "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
          "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
          "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
          "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
          "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
          "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
          "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
          "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "RHBZ#1923405",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1923405"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-20218",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-20218",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20218"
        },
        {
          "category": "external",
          "summary": "https://github.com/fabric8io/kubernetes-client/issues/2715",
          "url": "https://github.com/fabric8io/kubernetes-client/issues/2715"
        }
      ],
      "release_date": "2021-01-12T04:35:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-04-05T13:18:31+00:00",
          "details": "For OpenShift Container Platform 4.7 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html.",
          "product_ids": [
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1006"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.src",
            "7Server-RH7-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.src",
            "7Server-RH7-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "7Server-RH7-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el7.x86_64",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.src",
            "8Base-RHOSE-4.7:cri-o-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debuginfo-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.ppc64le",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.s390x",
            "8Base-RHOSE-4.7:cri-o-debugsource-0:1.20.2-4.rhaos4.7.gitd5a999a.el8.x86_64",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.noarch",
            "8Base-RHOSE-4.7:jenkins-2-plugins-0:4.7.1616671397-1.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.ppc64le",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.s390x",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.src",
            "8Base-RHOSE-4.7:openshift-clients-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-clients-redistributable-0:4.7.0-202103251046.p0.git.3957.c4da68b.el8.x86_64",
            "8Base-RHOSE-4.7:openshift-kuryr-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.src",
            "8Base-RHOSE-4.7:openshift-kuryr-cni-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-common-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:openshift-kuryr-controller-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch",
            "8Base-RHOSE-4.7:python3-kuryr-kubernetes-0:4.7.0-202103241948.p0.git.2504.add19d0.el8.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise"
    }
  ]
}