{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for buildah is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. \n\nSecurity Fix(es):\n\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n\n* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9097",
        "url": "https://access.redhat.com/errata/RHSA-2024:9097"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2274767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
      },
      {
        "category": "external",
        "summary": "2295310",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
      },
      {
        "category": "external",
        "summary": "RHEL-29278",
        "url": "https://issues.redhat.com/browse/RHEL-29278"
      },
      {
        "category": "external",
        "summary": "RHEL-40808",
        "url": "https://issues.redhat.com/browse/RHEL-40808"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9097.json"
      }
    ],
    "title": "Red Hat Security Advisory: buildah security update",
    "tracking": {
      "current_release_date": "2026-06-04T00:11:36+00:00",
      "generator": {
        "date": "2026-06-04T00:11:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2024:9097",
      "initial_release_date": "2024-11-12T09:38:18+00:00",
      "revision_history": [
        {
          "date": "2024-11-12T09:38:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-12T09:38:18+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-04T00:11:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.5.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.37.2-1.el9.src",
                "product": {
                  "name": "buildah-2:1.37.2-1.el9.src",
                  "product_id": "buildah-2:1.37.2-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.37.2-1.el9?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.37.2-1.el9.aarch64",
                "product": {
                  "name": "buildah-2:1.37.2-1.el9.aarch64",
                  "product_id": "buildah-2:1.37.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.37.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.37.2-1.el9.aarch64",
                "product": {
                  "name": "buildah-tests-2:1.37.2-1.el9.aarch64",
                  "product_id": "buildah-tests-2:1.37.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.37.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.37.2-1.el9.aarch64",
                "product": {
                  "name": "buildah-debugsource-2:1.37.2-1.el9.aarch64",
                  "product_id": "buildah-debugsource-2:1.37.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.37.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.37.2-1.el9.aarch64",
                "product": {
                  "name": "buildah-debuginfo-2:1.37.2-1.el9.aarch64",
                  "product_id": "buildah-debuginfo-2:1.37.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.37.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
                  "product_id": "buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.37.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.37.2-1.el9.ppc64le",
                "product": {
                  "name": "buildah-2:1.37.2-1.el9.ppc64le",
                  "product_id": "buildah-2:1.37.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.37.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.37.2-1.el9.ppc64le",
                "product": {
                  "name": "buildah-tests-2:1.37.2-1.el9.ppc64le",
                  "product_id": "buildah-tests-2:1.37.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.37.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.37.2-1.el9.ppc64le",
                "product": {
                  "name": "buildah-debugsource-2:1.37.2-1.el9.ppc64le",
                  "product_id": "buildah-debugsource-2:1.37.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.37.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
                "product": {
                  "name": "buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
                  "product_id": "buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.37.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
                  "product_id": "buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.37.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.37.2-1.el9.x86_64",
                "product": {
                  "name": "buildah-2:1.37.2-1.el9.x86_64",
                  "product_id": "buildah-2:1.37.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.37.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.37.2-1.el9.x86_64",
                "product": {
                  "name": "buildah-tests-2:1.37.2-1.el9.x86_64",
                  "product_id": "buildah-tests-2:1.37.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.37.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.37.2-1.el9.x86_64",
                "product": {
                  "name": "buildah-debugsource-2:1.37.2-1.el9.x86_64",
                  "product_id": "buildah-debugsource-2:1.37.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.37.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.37.2-1.el9.x86_64",
                "product": {
                  "name": "buildah-debuginfo-2:1.37.2-1.el9.x86_64",
                  "product_id": "buildah-debuginfo-2:1.37.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.37.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64",
                  "product_id": "buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.37.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.37.2-1.el9.s390x",
                "product": {
                  "name": "buildah-2:1.37.2-1.el9.s390x",
                  "product_id": "buildah-2:1.37.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.37.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.37.2-1.el9.s390x",
                "product": {
                  "name": "buildah-tests-2:1.37.2-1.el9.s390x",
                  "product_id": "buildah-tests-2:1.37.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.37.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.37.2-1.el9.s390x",
                "product": {
                  "name": "buildah-debugsource-2:1.37.2-1.el9.s390x",
                  "product_id": "buildah-debugsource-2:1.37.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.37.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.37.2-1.el9.s390x",
                "product": {
                  "name": "buildah-debuginfo-2:1.37.2-1.el9.s390x",
                  "product_id": "buildah-debuginfo-2:1.37.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.37.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
                  "product_id": "buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.37.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.37.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64"
        },
        "product_reference": "buildah-2:1.37.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.37.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le"
        },
        "product_reference": "buildah-2:1.37.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.37.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x"
        },
        "product_reference": "buildah-2:1.37.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.37.2-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src"
        },
        "product_reference": "buildah-2:1.37.2-1.el9.src",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.37.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64"
        },
        "product_reference": "buildah-2:1.37.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.37.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64"
        },
        "product_reference": "buildah-debuginfo-2:1.37.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.37.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le"
        },
        "product_reference": "buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.37.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x"
        },
        "product_reference": "buildah-debuginfo-2:1.37.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.37.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64"
        },
        "product_reference": "buildah-debuginfo-2:1.37.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.37.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64"
        },
        "product_reference": "buildah-debugsource-2:1.37.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.37.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le"
        },
        "product_reference": "buildah-debugsource-2:1.37.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.37.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x"
        },
        "product_reference": "buildah-debugsource-2:1.37.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.37.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64"
        },
        "product_reference": "buildah-debugsource-2:1.37.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.37.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64"
        },
        "product_reference": "buildah-tests-2:1.37.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.37.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le"
        },
        "product_reference": "buildah-tests-2:1.37.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.37.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x"
        },
        "product_reference": "buildah-tests-2:1.37.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.37.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64"
        },
        "product_reference": "buildah-tests-2:1.37.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "cwe": {
        "id": "CWE-354",
        "name": "Improper Validation of Integrity Check Value"
      },
      "discovery_date": "2024-04-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2274767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "containers/image: digest type does not guarantee valid type",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Some conditions are necessary for this attack to occur, such as the attacker being able to upload malicious images to the registry and persuade a victim to pull them. Hence, the severity of this flaw was rated as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2274767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-3727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727"
        }
      ],
      "release_date": "2024-05-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:38:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9097"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "containers/image: digest type does not guarantee valid type"
    },
    {
      "cve": "CVE-2024-24791",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2024-07-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295310"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: Denial of service due to improper 100-continue handling in net/http",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An attacker would need to control a malicious server and induce a client to connect to it, requiring some amount of preparation outside of the attacker\u0027s control. This reduces the severity score of this flaw to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src",
          "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
          "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295310",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24791",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/591255",
          "url": "https://go.dev/cl/591255"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/67555",
          "url": "https://go.dev/issue/67555"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ",
          "url": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ"
        }
      ],
      "release_date": "2024-07-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:38:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9097"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.src",
            "AppStream-9.5.0.GA:buildah-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debuginfo-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-debugsource-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-2:1.37.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.s390x",
            "AppStream-9.5.0.GA:buildah-tests-debuginfo-2:1.37.2-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "net/http: Denial of service due to improper 100-continue handling in net/http"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for skopeo is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. \n\nSecurity Fix(es):\n\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n\n* golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)\n\n* go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)\n\n* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9098",
        "url": "https://access.redhat.com/errata/RHSA-2024:9098"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2274767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
      },
      {
        "category": "external",
        "summary": "2279814",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279814"
      },
      {
        "category": "external",
        "summary": "2294000",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294000"
      },
      {
        "category": "external",
        "summary": "2295310",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
      },
      {
        "category": "external",
        "summary": "RHEL-29277",
        "url": "https://issues.redhat.com/browse/RHEL-29277"
      },
      {
        "category": "external",
        "summary": "RHEL-40812",
        "url": "https://issues.redhat.com/browse/RHEL-40812"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9098.json"
      }
    ],
    "title": "Red Hat Security Advisory: skopeo security update",
    "tracking": {
      "current_release_date": "2026-06-04T00:11:36+00:00",
      "generator": {
        "date": "2026-06-04T00:11:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2024:9098",
      "initial_release_date": "2024-11-12T09:14:33+00:00",
      "revision_history": [
        {
          "date": "2024-11-12T09:14:33+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-12T09:14:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-04T00:11:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.5.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-2:1.16.1-1.el9.src",
                "product": {
                  "name": "skopeo-2:1.16.1-1.el9.src",
                  "product_id": "skopeo-2:1.16.1-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo@1.16.1-1.el9?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-2:1.16.1-1.el9.aarch64",
                "product": {
                  "name": "skopeo-2:1.16.1-1.el9.aarch64",
                  "product_id": "skopeo-2:1.16.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo@1.16.1-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-tests-2:1.16.1-1.el9.aarch64",
                "product": {
                  "name": "skopeo-tests-2:1.16.1-1.el9.aarch64",
                  "product_id": "skopeo-tests-2:1.16.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-tests@1.16.1-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debugsource-2:1.16.1-1.el9.aarch64",
                "product": {
                  "name": "skopeo-debugsource-2:1.16.1-1.el9.aarch64",
                  "product_id": "skopeo-debugsource-2:1.16.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debugsource@1.16.1-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
                "product": {
                  "name": "skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
                  "product_id": "skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debuginfo@1.16.1-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-2:1.16.1-1.el9.ppc64le",
                "product": {
                  "name": "skopeo-2:1.16.1-1.el9.ppc64le",
                  "product_id": "skopeo-2:1.16.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo@1.16.1-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-tests-2:1.16.1-1.el9.ppc64le",
                "product": {
                  "name": "skopeo-tests-2:1.16.1-1.el9.ppc64le",
                  "product_id": "skopeo-tests-2:1.16.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-tests@1.16.1-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
                "product": {
                  "name": "skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
                  "product_id": "skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debugsource@1.16.1-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
                "product": {
                  "name": "skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
                  "product_id": "skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debuginfo@1.16.1-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-2:1.16.1-1.el9.x86_64",
                "product": {
                  "name": "skopeo-2:1.16.1-1.el9.x86_64",
                  "product_id": "skopeo-2:1.16.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo@1.16.1-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-tests-2:1.16.1-1.el9.x86_64",
                "product": {
                  "name": "skopeo-tests-2:1.16.1-1.el9.x86_64",
                  "product_id": "skopeo-tests-2:1.16.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-tests@1.16.1-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debugsource-2:1.16.1-1.el9.x86_64",
                "product": {
                  "name": "skopeo-debugsource-2:1.16.1-1.el9.x86_64",
                  "product_id": "skopeo-debugsource-2:1.16.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debugsource@1.16.1-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
                "product": {
                  "name": "skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
                  "product_id": "skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debuginfo@1.16.1-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "skopeo-2:1.16.1-1.el9.s390x",
                "product": {
                  "name": "skopeo-2:1.16.1-1.el9.s390x",
                  "product_id": "skopeo-2:1.16.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo@1.16.1-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-tests-2:1.16.1-1.el9.s390x",
                "product": {
                  "name": "skopeo-tests-2:1.16.1-1.el9.s390x",
                  "product_id": "skopeo-tests-2:1.16.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-tests@1.16.1-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debugsource-2:1.16.1-1.el9.s390x",
                "product": {
                  "name": "skopeo-debugsource-2:1.16.1-1.el9.s390x",
                  "product_id": "skopeo-debugsource-2:1.16.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debugsource@1.16.1-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "skopeo-debuginfo-2:1.16.1-1.el9.s390x",
                "product": {
                  "name": "skopeo-debuginfo-2:1.16.1-1.el9.s390x",
                  "product_id": "skopeo-debuginfo-2:1.16.1-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/skopeo-debuginfo@1.16.1-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-2:1.16.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64"
        },
        "product_reference": "skopeo-2:1.16.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-2:1.16.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le"
        },
        "product_reference": "skopeo-2:1.16.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-2:1.16.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x"
        },
        "product_reference": "skopeo-2:1.16.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-2:1.16.1-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src"
        },
        "product_reference": "skopeo-2:1.16.1-1.el9.src",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-2:1.16.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64"
        },
        "product_reference": "skopeo-2:1.16.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debuginfo-2:1.16.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64"
        },
        "product_reference": "skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debuginfo-2:1.16.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le"
        },
        "product_reference": "skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debuginfo-2:1.16.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x"
        },
        "product_reference": "skopeo-debuginfo-2:1.16.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debuginfo-2:1.16.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64"
        },
        "product_reference": "skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debugsource-2:1.16.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64"
        },
        "product_reference": "skopeo-debugsource-2:1.16.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debugsource-2:1.16.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le"
        },
        "product_reference": "skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debugsource-2:1.16.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x"
        },
        "product_reference": "skopeo-debugsource-2:1.16.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-debugsource-2:1.16.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64"
        },
        "product_reference": "skopeo-debugsource-2:1.16.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-tests-2:1.16.1-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64"
        },
        "product_reference": "skopeo-tests-2:1.16.1-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-tests-2:1.16.1-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le"
        },
        "product_reference": "skopeo-tests-2:1.16.1-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-tests-2:1.16.1-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x"
        },
        "product_reference": "skopeo-tests-2:1.16.1-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "skopeo-tests-2:1.16.1-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
        },
        "product_reference": "skopeo-tests-2:1.16.1-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "cwe": {
        "id": "CWE-354",
        "name": "Improper Validation of Integrity Check Value"
      },
      "discovery_date": "2024-04-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2274767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "containers/image: digest type does not guarantee valid type",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Some conditions are necessary for this attack to occur, such as the attacker being able to upload malicious images to the registry and persuade a victim to pull them. Hence, the severity of this flaw was rated as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2274767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-3727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727"
        }
      ],
      "release_date": "2024-05-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:14:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9098"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "containers/image: digest type does not guarantee valid type"
    },
    {
      "cve": "CVE-2024-6104",
      "cwe": {
        "id": "CWE-532",
        "name": "Insertion of Sensitive Information into Log File"
      },
      "discovery_date": "2024-06-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2294000"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go-retryablehttp: url might write sensitive information to log file",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-6104"
        },
        {
          "category": "external",
          "summary": "RHBZ#2294000",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294000"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-6104",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-6104"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6104",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6104"
        }
      ],
      "release_date": "2024-06-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:14:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9098"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "go-retryablehttp: url might write sensitive information to log file"
    },
    {
      "cve": "CVE-2024-24788",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2024-05-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2279814"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the net package of the Go stdlib. When a malformed DNS message is received as a response to a query, the Lookup functions within the net package can get stuck in an infinite loop. This issue can lead to resource exhaustion and denial of service (DoS) conditions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: net: malformed DNS message can cause infinite loop",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24788"
        },
        {
          "category": "external",
          "summary": "RHBZ#2279814",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279814"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24788",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24788"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24788",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24788"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-2824",
          "url": "https://pkg.go.dev/vuln/GO-2024-2824"
        }
      ],
      "release_date": "2024-05-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:14:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9098"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: net: malformed DNS message can cause infinite loop"
    },
    {
      "cve": "CVE-2024-24791",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2024-07-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295310"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: Denial of service due to improper 100-continue handling in net/http",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An attacker would need to control a malicious server and induce a client to connect to it, requiring some amount of preparation outside of the attacker\u0027s control. This reduces the severity score of this flaw to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
          "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
          "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295310",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24791",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/591255",
          "url": "https://go.dev/cl/591255"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/67555",
          "url": "https://go.dev/issue/67555"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ",
          "url": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ"
        }
      ],
      "release_date": "2024-07-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:14:33+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9098"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.src",
            "AppStream-9.5.0.GA:skopeo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debuginfo-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-debugsource-2:1.16.1-1.el9.x86_64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.aarch64",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.ppc64le",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.s390x",
            "AppStream-9.5.0.GA:skopeo-tests-2:1.16.1-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "net/http: Denial of service due to improper 100-continue handling in net/http"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for podman is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes.\n\nSecurity Fix(es):\n\n* podman: Symlink error leads to information disclosure (CVE-2022-4122)\n\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n\n* golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)\n\n* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9102",
        "url": "https://access.redhat.com/errata/RHSA-2024:9102"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2144983",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2144983"
      },
      {
        "category": "external",
        "summary": "2274767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
      },
      {
        "category": "external",
        "summary": "2292668",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292668"
      },
      {
        "category": "external",
        "summary": "2295310",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
      },
      {
        "category": "external",
        "summary": "RHEL-17776",
        "url": "https://issues.redhat.com/browse/RHEL-17776"
      },
      {
        "category": "external",
        "summary": "RHEL-18987",
        "url": "https://issues.redhat.com/browse/RHEL-18987"
      },
      {
        "category": "external",
        "summary": "RHEL-24333",
        "url": "https://issues.redhat.com/browse/RHEL-24333"
      },
      {
        "category": "external",
        "summary": "RHEL-27171",
        "url": "https://issues.redhat.com/browse/RHEL-27171"
      },
      {
        "category": "external",
        "summary": "RHEL-28803",
        "url": "https://issues.redhat.com/browse/RHEL-28803"
      },
      {
        "category": "external",
        "summary": "RHEL-29763",
        "url": "https://issues.redhat.com/browse/RHEL-29763"
      },
      {
        "category": "external",
        "summary": "RHEL-3092",
        "url": "https://issues.redhat.com/browse/RHEL-3092"
      },
      {
        "category": "external",
        "summary": "RHEL-32599",
        "url": "https://issues.redhat.com/browse/RHEL-32599"
      },
      {
        "category": "external",
        "summary": "RHEL-40811",
        "url": "https://issues.redhat.com/browse/RHEL-40811"
      },
      {
        "category": "external",
        "summary": "RHEL-45979",
        "url": "https://issues.redhat.com/browse/RHEL-45979"
      },
      {
        "category": "external",
        "summary": "RHEL-48760",
        "url": "https://issues.redhat.com/browse/RHEL-48760"
      },
      {
        "category": "external",
        "summary": "RHEL-48917",
        "url": "https://issues.redhat.com/browse/RHEL-48917"
      },
      {
        "category": "external",
        "summary": "RHEL-54361",
        "url": "https://issues.redhat.com/browse/RHEL-54361"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9102.json"
      }
    ],
    "title": "Red Hat Security Advisory: podman security update",
    "tracking": {
      "current_release_date": "2026-06-04T00:11:37+00:00",
      "generator": {
        "date": "2026-06-04T00:11:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2024:9102",
      "initial_release_date": "2024-11-12T08:49:38+00:00",
      "revision_history": [
        {
          "date": "2024-11-12T08:49:38+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-12T08:49:38+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-04T00:11:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.5.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-2:5.2.2-1.el9.src",
                "product": {
                  "name": "podman-2:5.2.2-1.el9.src",
                  "product_id": "podman-2:5.2.2-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.2.2-1.el9?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-plugins-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-plugins-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-remote-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-remote-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-tests-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-tests-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-debugsource-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-debugsource-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-debuginfo-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-debuginfo-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins-debuginfo@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
                "product": {
                  "name": "podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
                  "product_id": "podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.2.2-1.el9?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-plugins-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-plugins-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-remote-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-remote-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-tests-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-tests-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-debugsource-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-debugsource-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-debuginfo-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-debuginfo-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins-debuginfo@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
                "product": {
                  "name": "podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
                  "product_id": "podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.2.2-1.el9?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-plugins-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-plugins-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-remote-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-remote-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-tests-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-tests-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-debugsource-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-debugsource-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-debuginfo-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-debuginfo-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins-debuginfo@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
                "product": {
                  "name": "podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
                  "product_id": "podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.2.2-1.el9?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-plugins-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-plugins-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-remote-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-remote-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-tests-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-tests-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-tests-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-tests@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debugsource-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-debugsource-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-debugsource-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debugsource@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-debuginfo-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-debuginfo-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-debuginfo-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-debuginfo@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-plugins-debuginfo@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
                "product": {
                  "name": "podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
                  "product_id": "podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-remote-debuginfo@5.2.2-1.el9?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "podman-docker-2:5.2.2-1.el9.noarch",
                "product": {
                  "name": "podman-docker-2:5.2.2-1.el9.noarch",
                  "product_id": "podman-docker-2:5.2.2-1.el9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/podman-docker@5.2.2-1.el9?arch=noarch\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-2:5.2.2-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src"
        },
        "product_reference": "podman-2:5.2.2-1.el9.src",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-debuginfo-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-debuginfo-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-debuginfo-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debuginfo-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-debuginfo-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-debugsource-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-debugsource-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-debugsource-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-debugsource-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-debugsource-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-docker-2:5.2.2-1.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch"
        },
        "product_reference": "podman-docker-2:5.2.2-1.el9.noarch",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-plugins-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-plugins-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-plugins-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-plugins-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-remote-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-remote-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-remote-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-remote-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-remote-debuginfo-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-2:5.2.2-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64"
        },
        "product_reference": "podman-tests-2:5.2.2-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-2:5.2.2-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le"
        },
        "product_reference": "podman-tests-2:5.2.2-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-2:5.2.2-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x"
        },
        "product_reference": "podman-tests-2:5.2.2-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "podman-tests-2:5.2.2-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
        },
        "product_reference": "podman-tests-2:5.2.2-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Erik Sj\u00f6lund"
          ],
          "organization": "Upstream"
        }
      ],
      "cve": "CVE-2022-4122",
      "cwe": {
        "id": "CWE-59",
        "name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
      },
      "discovery_date": "2022-11-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2144983"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in buildah and podman. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "podman: Symlink error leads to information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "These bugs come about when \"podman --remote build ...\" is run, thus affecting buildah, but the bug itself needs to be fixed in podman, and ported to Buildah.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-4122"
        },
        {
          "category": "external",
          "summary": "RHBZ#2144983",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2144983"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-4122",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-4122"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-4122",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4122"
        },
        {
          "category": "external",
          "summary": "https://github.com/containers/podman/pull/16315",
          "url": "https://github.com/containers/podman/pull/16315"
        }
      ],
      "release_date": "2022-11-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T08:49:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9102"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "podman: Symlink error leads to information disclosure"
    },
    {
      "cve": "CVE-2024-3727",
      "cwe": {
        "id": "CWE-354",
        "name": "Improper Validation of Integrity Check Value"
      },
      "discovery_date": "2024-04-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2274767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "containers/image: digest type does not guarantee valid type",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Some conditions are necessary for this attack to occur, such as the attacker being able to upload malicious images to the registry and persuade a victim to pull them. Hence, the severity of this flaw was rated as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2274767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-3727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727"
        }
      ],
      "release_date": "2024-05-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T08:49:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9102"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "containers/image: digest type does not guarantee valid type"
    },
    {
      "cve": "CVE-2024-24789",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2024-06-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2292668"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Golang. The ZIP implementation of the Go language archive/zip library behaves differently than the rest of the ZIP file format implementations. When handling ZIP files with a corrupted central directory record, the library skips over the invalid record and processes the next valid one. This flaw allows a malicious user to access hidden information or files inside maliciously crafted ZIP files.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: archive/zip: Incorrect handling of certain ZIP files",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24789"
        },
        {
          "category": "external",
          "summary": "RHBZ#2292668",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292668"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24789",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24789"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24789",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24789"
        }
      ],
      "release_date": "2024-06-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T08:49:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9102"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: archive/zip: Incorrect handling of certain ZIP files"
    },
    {
      "cve": "CVE-2024-24791",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2024-07-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295310"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: Denial of service due to improper 100-continue handling in net/http",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An attacker would need to control a malicious server and induce a client to connect to it, requiring some amount of preparation outside of the attacker\u0027s control. This reduces the severity score of this flaw to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
          "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
          "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295310",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24791",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/591255",
          "url": "https://go.dev/cl/591255"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/67555",
          "url": "https://go.dev/issue/67555"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ",
          "url": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ"
        }
      ],
      "release_date": "2024-07-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T08:49:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9102"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.src",
            "AppStream-9.5.0.GA:podman-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-debugsource-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-docker-2:5.2.2-1.el9.noarch",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-plugins-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-remote-debuginfo-2:5.2.2-1.el9.x86_64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.aarch64",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.ppc64le",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.s390x",
            "AppStream-9.5.0.GA:podman-tests-2:5.2.2-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "net/http: Denial of service due to improper 100-continue handling in net/http"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "OpenShift API for Data Protection (OADP) 1.3.4 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes.\n\nSecurity Fix(es) from Bugzilla:\n\n* encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion (CVE-2024-34156)\n\n* containers/image: digest type does not guarantee valid type (CVE-2024-3727)\n\n* net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)\n\n* go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion (CVE-2024-34155)\n\n* go/build/constraint: golang: Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion (CVE-2024-34158)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9960",
        "url": "https://access.redhat.com/errata/RHSA-2024:9960"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2274767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
      },
      {
        "category": "external",
        "summary": "2295310",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
      },
      {
        "category": "external",
        "summary": "2310527",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310527"
      },
      {
        "category": "external",
        "summary": "2310528",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310528"
      },
      {
        "category": "external",
        "summary": "2310529",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310529"
      },
      {
        "category": "external",
        "summary": "OADP-2944",
        "url": "https://issues.redhat.com/browse/OADP-2944"
      },
      {
        "category": "external",
        "summary": "OADP-3010",
        "url": "https://issues.redhat.com/browse/OADP-3010"
      },
      {
        "category": "external",
        "summary": "OADP-3050",
        "url": "https://issues.redhat.com/browse/OADP-3050"
      },
      {
        "category": "external",
        "summary": "OADP-3052",
        "url": "https://issues.redhat.com/browse/OADP-3052"
      },
      {
        "category": "external",
        "summary": "OADP-3562",
        "url": "https://issues.redhat.com/browse/OADP-3562"
      },
      {
        "category": "external",
        "summary": "OADP-3630",
        "url": "https://issues.redhat.com/browse/OADP-3630"
      },
      {
        "category": "external",
        "summary": "OADP-4736",
        "url": "https://issues.redhat.com/browse/OADP-4736"
      },
      {
        "category": "external",
        "summary": "OADP-4803",
        "url": "https://issues.redhat.com/browse/OADP-4803"
      },
      {
        "category": "external",
        "summary": "OADP-5111",
        "url": "https://issues.redhat.com/browse/OADP-5111"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9960.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.4 security and bug fix update",
    "tracking": {
      "current_release_date": "2026-06-04T00:11:39+00:00",
      "generator": {
        "date": "2026-06-04T00:11:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.1"
        }
      },
      "id": "RHSA-2024:9960",
      "initial_release_date": "2024-11-19T01:54:11+00:00",
      "revision_history": [
        {
          "date": "2024-11-19T01:54:11+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-19T01:54:11+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-04T00:11:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "9Base-OADP-1.3",
                "product": {
                  "name": "9Base-OADP-1.3",
                  "product_id": "9Base-OADP-1.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift API for Data Protection"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
                "product": {
                  "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
                  "product_id": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
                "product": {
                  "name": "oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
                  "product_id": "oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1.3.4-16"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
                "product": {
                  "name": "oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
                  "product_id": "oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1.3.4-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
                "product": {
                  "name": "oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
                  "product_id": "oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1.3.4-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
                "product": {
                  "name": "oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
                  "product_id": "oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1.3.4-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
                "product": {
                  "name": "oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
                  "product_id": "oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1.3.4-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
                  "product_id": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
                  "product_id": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
                  "product_id": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
                  "product_id": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
                "product": {
                  "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
                  "product_id": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1.3.4-10"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
                "product": {
                  "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
                  "product_id": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
                "product": {
                  "name": "oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
                  "product_id": "oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1.3.4-16"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
                "product": {
                  "name": "oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
                  "product_id": "oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1.3.4-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
                "product": {
                  "name": "oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
                  "product_id": "oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1.3.4-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64",
                "product": {
                  "name": "oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64",
                  "product_id": "oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1.3.4-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
                  "product_id": "oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1.3.4-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
                  "product_id": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
                  "product_id": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
                  "product_id": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
                  "product_id": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
                "product": {
                  "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
                  "product_id": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1.3.4-10"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
                "product": {
                  "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
                  "product_id": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
                "product": {
                  "name": "oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
                  "product_id": "oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1.3.4-16"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
                "product": {
                  "name": "oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
                  "product_id": "oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1.3.4-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
                "product": {
                  "name": "oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
                  "product_id": "oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1.3.4-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
                "product": {
                  "name": "oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
                  "product_id": "oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1.3.4-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
                "product": {
                  "name": "oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
                  "product_id": "oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1.3.4-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
                  "product_id": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
                  "product_id": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
                  "product_id": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
                  "product_id": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
                "product": {
                  "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
                  "product_id": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1.3.4-10"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
                "product": {
                  "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
                  "product_id": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
                "product": {
                  "name": "oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
                  "product_id": "oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1.3.4-16"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
                "product": {
                  "name": "oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
                  "product_id": "oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1.3.4-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
                "product": {
                  "name": "oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
                  "product_id": "oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1.3.4-13"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
                "product": {
                  "name": "oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
                  "product_id": "oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1.3.4-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
                  "product_id": "oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1.3.4-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
                  "product_id": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
                  "product_id": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
                  "product_id": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
                "product": {
                  "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
                  "product_id": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1.3.4-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
                "product": {
                  "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
                  "product_id": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1.3.4-10"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x"
        },
        "product_reference": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le"
        },
        "product_reference": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64"
        },
        "product_reference": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64"
        },
        "product_reference": "oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le"
        },
        "product_reference": "oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64"
        },
        "product_reference": "oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x"
        },
        "product_reference": "oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64"
        },
        "product_reference": "oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le"
        },
        "product_reference": "oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x"
        },
        "product_reference": "oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64"
        },
        "product_reference": "oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64"
        },
        "product_reference": "oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64"
        },
        "product_reference": "oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x"
        },
        "product_reference": "oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le"
        },
        "product_reference": "oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64"
        },
        "product_reference": "oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64"
        },
        "product_reference": "oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64"
        },
        "product_reference": "oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x"
        },
        "product_reference": "oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le"
        },
        "product_reference": "oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64"
        },
        "product_reference": "oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x"
        },
        "product_reference": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64"
        },
        "product_reference": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le"
        },
        "product_reference": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
        },
        "product_reference": "oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x"
        },
        "product_reference": "oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le"
        },
        "product_reference": "oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64"
        },
        "product_reference": "oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64 as a component of 9Base-OADP-1.3",
          "product_id": "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
        },
        "product_reference": "oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64",
        "relates_to_product_reference": "9Base-OADP-1.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3727",
      "cwe": {
        "id": "CWE-354",
        "name": "Improper Validation of Integrity Check Value"
      },
      "discovery_date": "2024-04-12T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2274767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "containers/image: digest type does not guarantee valid type",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Some conditions are necessary for this attack to occur, such as the attacker being able to upload malicious images to the registry and persuade a victim to pull them. Hence, the severity of this flaw was rated as Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64"
        ],
        "known_not_affected": [
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2274767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-3727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-3727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3727"
        }
      ],
      "release_date": "2024-05-09T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-19T01:54:11+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9960"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "containers/image: digest type does not guarantee valid type"
    },
    {
      "cve": "CVE-2024-24791",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2024-07-02T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295310"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Go. The net/http module mishandles specific server responses from HTTP/1.1 client requests. This issue may render a connection invalid and cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "net/http: Denial of service due to improper 100-continue handling in net/http",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An attacker would need to control a malicious server and induce a client to connect to it, requiring some amount of preparation outside of the attacker\u0027s control. This reduces the severity score of this flaw to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
        ],
        "known_not_affected": [
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295310",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295310"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24791",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/591255",
          "url": "https://go.dev/cl/591255"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/67555",
          "url": "https://go.dev/issue/67555"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ",
          "url": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ"
        }
      ],
      "release_date": "2024-07-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-19T01:54:11+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9960"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "net/http: Denial of service due to improper 100-continue handling in net/http"
    },
    {
      "cve": "CVE-2024-34155",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2024-09-06T21:20:06.929766+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2310527"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the go/parser package of the Golang standard library. Calling any Parse functions on Go source code containing deeply nested literals can cause a panic due to stack exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
        ],
        "known_not_affected": [
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-34155"
        },
        {
          "category": "external",
          "summary": "RHBZ#2310527",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310527"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-34155",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-34155"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34155",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34155"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/611238",
          "url": "https://go.dev/cl/611238"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/69138",
          "url": "https://go.dev/issue/69138"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
          "url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-3105",
          "url": "https://pkg.go.dev/vuln/GO-2024-3105"
        }
      ],
      "release_date": "2024-09-06T21:15:11.947000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-19T01:54:11+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9960"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion"
    },
    {
      "cve": "CVE-2024-34156",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2024-09-06T21:20:09.377905+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2310528"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Go\u0027s `encoding/gob` package is of high severity because it exposes applications to potential Denial of Service (DoS) attacks through stack exhaustion. Since `gob` relies on recursive function calls to decode nested structures, an attacker could exploit this by sending crafted messages with excessively deep nesting, causing the application to panic due to stack overflow. This risk is particularly important in scenarios where untrusted or external input is processed, as it can lead to system unavailability or crashes, undermining the reliability and availability of services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
        ],
        "known_not_affected": [
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-34156"
        },
        {
          "category": "external",
          "summary": "RHBZ#2310528",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310528"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-34156",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-34156"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34156"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/611239",
          "url": "https://go.dev/cl/611239"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/69139",
          "url": "https://go.dev/issue/69139"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
          "url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-3106",
          "url": "https://pkg.go.dev/vuln/GO-2024-3106"
        }
      ],
      "release_date": "2024-09-06T21:15:12.020000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-19T01:54:11+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9960"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion"
    },
    {
      "cve": "CVE-2024-34158",
      "cwe": {
        "id": "CWE-1325",
        "name": "Improperly Controlled Sequential Memory Allocation"
      },
      "discovery_date": "2024-09-06T21:20:12.126400+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2310529"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the go/build/constraint package of the Golang standard library. Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "go/build/constraint: golang: Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
        ],
        "known_not_affected": [
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
          "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
          "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
          "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
          "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-34158"
        },
        {
          "category": "external",
          "summary": "RHBZ#2310529",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2310529"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-34158",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-34158"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34158",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34158"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/611240",
          "url": "https://go.dev/cl/611240"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/69141",
          "url": "https://go.dev/issue/69141"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk",
          "url": "https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2024-3107",
          "url": "https://pkg.go.dev/vuln/GO-2024-3107"
        }
      ],
      "release_date": "2024-09-06T21:15:12.083000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-19T01:54:11+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9960"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:2bbe258bd894d2f1a7ae940fb0794e3e2da6d50b92535b02b653eea21e156ec4_s390x",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:6818ab81497735d1ccaebd8814af9104260eb4c5ce484320c19b01d0bc2427d2_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:8caa969bec4ef8787e0ca5530c491ddc91f3d1ed19ff20648e795432c0c50e67_amd64",
            "9Base-OADP-1.3:oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:d3d9f7acc10c5c86a4651eb6e3d7785d0c3b235c07937508f71cbc3cc71119c6_arm64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1e0cfc88f7d10b795f69b9328c8decb82cf578f6094a0028e582f643a76615b9_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:1faadcb77447ca04952734f846cd04bbf688ef430b568b7c0fd0b4a9d57944e5_amd64",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:550a940f0243123a6ab9c3a2a34b9b8d314850646d3b73baf767ccfb958bc884_s390x",
            "9Base-OADP-1.3:oadp/oadp-mustgather-rhel9@sha256:96f253071d1ed16b7c858d1c42114691307a2faac72619ee32f5a1ff90db8d17_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:0ca0153fd4b04609f4ba5953de6f3e9e6c7f716324529ec386d741b51deef007_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:753f1a59e04ed4b0d30791122d76065f3773ec3d26c39316655481f7834db982_s390x",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:e197d60887b37e7aec407c9872ec545fe73901de58a4803e56630a2918213dca_arm64",
            "9Base-OADP-1.3:oadp/oadp-operator-bundle@sha256:fdd33c1ab911d0b8e38a8358813de8d49f2ff8dec77a5d2ed57e11b81da83562_amd64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:31fae3bc4af8243f6b02235f746b309c5e5eaa6ef3138c1d23cb5add5f3820a0_arm64",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:5743d98dca1fd770c100db49d07841ea1aad5f28c85e3ac4d3fe8e4af816a039_s390x",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:a7aacf39f3740e328f2c2c91a96d774af8af64a0c22583eff5e4f73310a0a365_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-rhel9-operator@sha256:ae9c1ff570daf3f63b2c0624a83e6e577ee3476f812c149f0a56c67527b6a21a_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3c3b4a09d8ccd72def3569c0e1f99be0b1ee452ad2db49ce46811fd6d394af89_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4fcbd1b09c6673f364777d5970867a51e3510c3d8b12513b7807a025e913051d_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:765e3bdb4fc1240d51adb92fcaa72c5e0dd89ca7668eeb7d6e61491c1ec89d6f_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-aws-rhel9@sha256:9d76566fcc91da5abdbc401470ac50e339b4faa5613e9d75f431a1b289b91c3e_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:0c35864cbaa0f6bec4202004641cdff2b130592e2ce8c66f0179abff8b22d065_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:26ecf9b62abd992a138c0efdbac768af2994261506c87f45ef5c484dffcce943_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:2824aa03cdaffe44f21e6f58b57e8cf650cb0e96e15b2fcc987e146678d521ed_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-csi-rhel9@sha256:cc47ecae2f0d0306f3fc1bfbc13104a99e9fcc093f8c2f05ea479f5a2f966eff_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:426359cc8df7743269b5083bf218f28189d6a2736872d9afb3909d9e7c1c1861_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:4f684ef7417ede239193b32be628a4e3ede4f238d01c457b0cb5283b4e17dd9c_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:87e2c30f1b04741775e9b6d73e095585f78bdfd7ea8715cd5fdb1bc65e2bf3ad_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:b324db4dd92975489a8ceba2d72ba694b6731782dece3d5df93297e23881011e_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:193715bff5bd4bc93fbe8b7313225569ab4b2943d8003dd6d29ca74457621e9a_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:71bb8e7d4c7e8f6622e958ec38303f1def3f4d4e36e545ce339dae128a6a4348_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:9515898ce41f4f53ea69297ab578298ec70e7f4828bb7769a246f41af5cf5851_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:a853fb4574549241c758e7736e67641e019c41c557d1f0afb2f054155fb84a55_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:64d89d0cb1770aa865a932be052bb03c4e4f6bb47dcc6991365b9b25558361b2_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:da2f9dbd22533067dcc2a635a3f2c441cb69a1acb4793fd80b004368dbc0e5ab_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:e28ec47df651730661f559629b8b7a33bfc704c69807b1b8280c258152f63b38_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-plugin-rhel9@sha256:f3cca8a8c57093fc128d7731257396dda9ed179890d2f6712ed5834d04973659_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:172cc60b6553bfe1016150c87a32bf10f0b77237ca009db8d75c8c6497c82653_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:4f60326e0beaaeb585eaae1b4a84d3710603372d8b1fcb89a741aef9ebafb71b_amd64",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:d8fe9c10704991d25049ed7358bc188ea858ad16035d5eecdff119f9bda6c541_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-restic-restore-helper-rhel9@sha256:e365760218025d9ce7dd9c5ad2534c4dae757b459749a6d199daae872b83baff_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:574b94fa671857552d1a413f84a7c9389543485276e224da4abc991e831ebfe4_s390x",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:898d2f75a55aeea661ed8533b70a65ec430c05cd5aa3f834eaa2502dd7c6c149_ppc64le",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:db259445df5ff6a5bd0faa9ed04e2d0efd61a9af703b2d48db1ab9bc115d7abb_arm64",
            "9Base-OADP-1.3:oadp/oadp-velero-rhel9@sha256:dfb0c4c14278e05c9909d3d2dd76bf264008429e769bbbb18a52409fce7f4fce_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "go/build/constraint: golang: Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion"
    }
  ]
}