Action not permitted
Modal body text goes here.
cve-2022-48624
Vulnerability from cvelistv5
Published
2024-02-19 00:00
Modified
2024-08-03 15:17
Severity ?
EPSS score ?
Summary
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
References
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2022-48624",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-02-20T17:06:03.635874Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-05T17:21:42.553Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-03T15:17:55.391Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144"
},
{
"tags": [
"x_transferred"
],
"url": "https://greenwoodsoftware.com/less/"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/gwsw/less/compare/v605...v606"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240605-0010/"
},
{
"name": "[debian-lts-announce] 20240527 [SECURITY] [DLA 3823-1] less security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-10T17:11:50.319560",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144"
},
{
"url": "https://greenwoodsoftware.com/less/"
},
{
"url": "https://github.com/gwsw/less/compare/v605...v606"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240605-0010/"
},
{
"name": "[debian-lts-announce] 20240527 [SECURITY] [DLA 3823-1] less security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-48624",
"datePublished": "2024-02-19T00:00:00",
"dateReserved": "2024-02-19T00:00:00",
"dateUpdated": "2024-08-03T15:17:55.391Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2022-48624\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2024-02-19T01:15:48.643\",\"lastModified\":\"2024-06-10T18:15:19.857\",\"vulnStatus\":\"Awaiting Analysis\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.\"},{\"lang\":\"es\",\"value\":\"close_altfile en filename.c en less antes de 606 omite las llamadas shell_quote para LESSCLOSE.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://github.com/gwsw/less/compare/v605...v606\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://greenwoodsoftware.com/less/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20240605-0010/\",\"source\":\"cve@mitre.org\"}]}}"
}
}
rhsa-2024_4256
Vulnerability from csaf_redhat
Published
2024-07-02 15:27
Modified
2024-11-06 06:17
Summary
Red Hat Security Advisory: less security update
Notes
Topic
An update for less is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.
Security Fix(es):
* less: OS command injection (CVE-2024-32487)
* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for less is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: OS command injection (CVE-2024-32487)\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:4256",
"url": "https://access.redhat.com/errata/RHSA-2024:4256"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "2274980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274980"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4256.json"
}
],
"title": "Red Hat Security Advisory: less security update",
"tracking": {
"current_release_date": "2024-11-06T06:17:14+00:00",
"generator": {
"date": "2024-11-06T06:17:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:4256",
"initial_release_date": "2024-07-02T15:27:33+00:00",
"revision_history": [
{
"date": "2024-07-02T15:27:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-07-02T15:27:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T06:17:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-3.el8_10.src",
"product": {
"name": "less-0:530-3.el8_10.src",
"product_id": "less-0:530-3.el8_10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-3.el8_10?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-3.el8_10.aarch64",
"product": {
"name": "less-0:530-3.el8_10.aarch64",
"product_id": "less-0:530-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-3.el8_10.aarch64",
"product": {
"name": "less-debugsource-0:530-3.el8_10.aarch64",
"product_id": "less-debugsource-0:530-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-3.el8_10?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-3.el8_10.aarch64",
"product": {
"name": "less-debuginfo-0:530-3.el8_10.aarch64",
"product_id": "less-debuginfo-0:530-3.el8_10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-3.el8_10?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-3.el8_10.ppc64le",
"product": {
"name": "less-0:530-3.el8_10.ppc64le",
"product_id": "less-0:530-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-3.el8_10.ppc64le",
"product": {
"name": "less-debugsource-0:530-3.el8_10.ppc64le",
"product_id": "less-debugsource-0:530-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-3.el8_10?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-3.el8_10.ppc64le",
"product": {
"name": "less-debuginfo-0:530-3.el8_10.ppc64le",
"product_id": "less-debuginfo-0:530-3.el8_10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-3.el8_10?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-3.el8_10.x86_64",
"product": {
"name": "less-0:530-3.el8_10.x86_64",
"product_id": "less-0:530-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-3.el8_10.x86_64",
"product": {
"name": "less-debugsource-0:530-3.el8_10.x86_64",
"product_id": "less-debugsource-0:530-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-3.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-3.el8_10.x86_64",
"product": {
"name": "less-debuginfo-0:530-3.el8_10.x86_64",
"product_id": "less-debuginfo-0:530-3.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-3.el8_10?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-3.el8_10.s390x",
"product": {
"name": "less-0:530-3.el8_10.s390x",
"product_id": "less-0:530-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-3.el8_10.s390x",
"product": {
"name": "less-debugsource-0:530-3.el8_10.s390x",
"product_id": "less-debugsource-0:530-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-3.el8_10?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-3.el8_10.s390x",
"product": {
"name": "less-debuginfo-0:530-3.el8_10.s390x",
"product_id": "less-debuginfo-0:530-3.el8_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-3.el8_10?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64"
},
"product_reference": "less-0:530-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le"
},
"product_reference": "less-0:530-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x"
},
"product_reference": "less-0:530-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-3.el8_10.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src"
},
"product_reference": "less-0:530-3.el8_10.src",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64"
},
"product_reference": "less-0:530-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64"
},
"product_reference": "less-debuginfo-0:530-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le"
},
"product_reference": "less-debuginfo-0:530-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x"
},
"product_reference": "less-debuginfo-0:530-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64"
},
"product_reference": "less-debuginfo-0:530-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-3.el8_10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64"
},
"product_reference": "less-debugsource-0:530-3.el8_10.aarch64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-3.el8_10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le"
},
"product_reference": "less-debugsource-0:530-3.el8_10.ppc64le",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-3.el8_10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x"
},
"product_reference": "less-debugsource-0:530-3.el8_10.s390x",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-3.el8_10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
},
"product_reference": "less-debugsource-0:530-3.el8_10.x86_64",
"relates_to_product_reference": "BaseOS-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2024-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: missing quoting of shell metacharacters in LESSCLOSE handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs the ability to influence the LESSCLOSE environment variable. This requirement makes this CVE a Moderate impact CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48624"
},
{
"category": "external",
"summary": "RHBZ#2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
}
],
"release_date": "2024-02-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T15:27:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "less: missing quoting of shell metacharacters in LESSCLOSE handling"
},
{
"cve": "CVE-2024-32487",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2024-04-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2274980"
}
],
"notes": [
{
"category": "description",
"text": "An OS command injection flaw was found in Less. Since quoting is mishandled in filename.c, opening files with attacker-controlled file names can lead to OS command execution. Exploitation requires the LESSOPEN environment variable, which is set by default in many common cases.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: OS command injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The described vulnerability in less poses an Important security risk due to its potential for arbitrary OS command execution. Exploitation of this vulnerability allows an attacker to inject malicious commands through specially crafted filenames containing newline characters. This could lead to unauthorized access, data exfiltration, or even full system compromise, depending on the privileges of the user executing the less command. Furthermore, the mishandling of the LESSOPEN environment variable exacerbates the issue, as it can be set by default in many installations, providing an additional vector for exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-32487"
},
{
"category": "external",
"summary": "RHBZ#2274980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-32487",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-32487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-32487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32487"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2024/04/12/5",
"url": "https://www.openwall.com/lists/oss-security/2024/04/12/5"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2024/04/13/2",
"url": "https://www.openwall.com/lists/oss-security/2024/04/13/2"
}
],
"release_date": "2024-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-07-02T15:27:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:4256"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.src",
"BaseOS-8.10.0.Z.MAIN.EUS:less-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debuginfo-0:530-3.el8_10.x86_64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.aarch64",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.ppc64le",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.s390x",
"BaseOS-8.10.0.Z.MAIN.EUS:less-debugsource-0:530-3.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "less: OS command injection"
}
]
}
rhsa-2024_1875
Vulnerability from csaf_redhat
Published
2024-04-18 01:59
Modified
2024-11-06 05:30
Summary
Red Hat Security Advisory: less security update
Notes
Topic
An update for less is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of
Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a
detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
Details
The "less" utility is a text file browser that resembles "more", but allows
users to move backwards in the file as well as forwards. Since "less" does not
read the entire input file at startup, it also starts more quickly than ordinary
text editors.
Security Fix(es):
* less: missing quoting of shell metacharacters in LESSCLOSE handling
(CVE-2022-48624)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for less is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of\nModerate. A Common Vulnerability Scoring System (CVSS) base score, which gives a\ndetailed severity rating, is available for each vulnerability from the CVE\nlink(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The \"less\" utility is a text file browser that resembles \"more\", but allows\nusers to move backwards in the file as well as forwards. Since \"less\" does not\nread the entire input file at startup, it also starts more quickly than ordinary\ntext editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling\n(CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1875",
"url": "https://access.redhat.com/errata/RHSA-2024:1875"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1875.json"
}
],
"title": "Red Hat Security Advisory: less security update",
"tracking": {
"current_release_date": "2024-11-06T05:30:36+00:00",
"generator": {
"date": "2024-11-06T05:30:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:1875",
"initial_release_date": "2024-04-18T01:59:17+00:00",
"revision_history": [
{
"date": "2024-04-18T01:59:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-18T01:59:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T05:30:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:8.8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_8.src",
"product": {
"name": "less-0:530-2.el8_8.src",
"product_id": "less-0:530-2.el8_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_8.aarch64",
"product": {
"name": "less-0:530-2.el8_8.aarch64",
"product_id": "less-0:530-2.el8_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_8.aarch64",
"product": {
"name": "less-debugsource-0:530-2.el8_8.aarch64",
"product_id": "less-debugsource-0:530-2.el8_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_8.aarch64",
"product": {
"name": "less-debuginfo-0:530-2.el8_8.aarch64",
"product_id": "less-debuginfo-0:530-2.el8_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_8.ppc64le",
"product": {
"name": "less-0:530-2.el8_8.ppc64le",
"product_id": "less-0:530-2.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_8.ppc64le",
"product": {
"name": "less-debugsource-0:530-2.el8_8.ppc64le",
"product_id": "less-debugsource-0:530-2.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_8.ppc64le",
"product": {
"name": "less-debuginfo-0:530-2.el8_8.ppc64le",
"product_id": "less-debuginfo-0:530-2.el8_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_8.x86_64",
"product": {
"name": "less-0:530-2.el8_8.x86_64",
"product_id": "less-0:530-2.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_8.x86_64",
"product": {
"name": "less-debugsource-0:530-2.el8_8.x86_64",
"product_id": "less-debugsource-0:530-2.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_8.x86_64",
"product": {
"name": "less-debuginfo-0:530-2.el8_8.x86_64",
"product_id": "less-debuginfo-0:530-2.el8_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_8.s390x",
"product": {
"name": "less-0:530-2.el8_8.s390x",
"product_id": "less-0:530-2.el8_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_8.s390x",
"product": {
"name": "less-debugsource-0:530-2.el8_8.s390x",
"product_id": "less-debugsource-0:530-2.el8_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_8.s390x",
"product": {
"name": "less-debuginfo-0:530-2.el8_8.s390x",
"product_id": "less-debuginfo-0:530-2.el8_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.aarch64"
},
"product_reference": "less-0:530-2.el8_8.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.ppc64le"
},
"product_reference": "less-0:530-2.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_8.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.s390x"
},
"product_reference": "less-0:530-2.el8_8.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_8.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.src"
},
"product_reference": "less-0:530-2.el8_8.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.x86_64"
},
"product_reference": "less-0:530-2.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.aarch64"
},
"product_reference": "less-debuginfo-0:530-2.el8_8.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.ppc64le"
},
"product_reference": "less-debuginfo-0:530-2.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_8.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.s390x"
},
"product_reference": "less-debuginfo-0:530-2.el8_8.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.x86_64"
},
"product_reference": "less-debuginfo-0:530-2.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.aarch64"
},
"product_reference": "less-debugsource-0:530-2.el8_8.aarch64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.ppc64le"
},
"product_reference": "less-debugsource-0:530-2.el8_8.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_8.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.s390x"
},
"product_reference": "less-debugsource-0:530-2.el8_8.s390x",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.x86_64"
},
"product_reference": "less-debugsource-0:530-2.el8_8.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2024-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: missing quoting of shell metacharacters in LESSCLOSE handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs the ability to influence the LESSCLOSE environment variable. This requirement makes this CVE a Moderate impact CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.src",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.x86_64",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.x86_64",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48624"
},
{
"category": "external",
"summary": "RHBZ#2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
}
],
"release_date": "2024-02-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-18T01:59:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.src",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.x86_64",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.x86_64",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1875"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.src",
"BaseOS-8.8.0.Z.EUS:less-0:530-2.el8_8.x86_64",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-debuginfo-0:530-2.el8_8.x86_64",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.aarch64",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.ppc64le",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.s390x",
"BaseOS-8.8.0.Z.EUS:less-debugsource-0:530-2.el8_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "less: missing quoting of shell metacharacters in LESSCLOSE handling"
}
]
}
rhsa-2024_1989
Vulnerability from csaf_redhat
Published
2024-04-23 14:05
Modified
2024-11-06 05:34
Summary
Red Hat Security Advisory: less security update
Notes
Topic
An update for less is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.
Security Fix(es):
* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for less is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1989",
"url": "https://access.redhat.com/errata/RHSA-2024:1989"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1989.json"
}
],
"title": "Red Hat Security Advisory: less security update",
"tracking": {
"current_release_date": "2024-11-06T05:34:17+00:00",
"generator": {
"date": "2024-11-06T05:34:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:1989",
"initial_release_date": "2024-04-23T14:05:54+00:00",
"revision_history": [
{
"date": "2024-04-23T14:05:54+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-23T14:05:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T05:34:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_6.src",
"product": {
"name": "less-0:530-2.el8_6.src",
"product_id": "less-0:530-2.el8_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_6.aarch64",
"product": {
"name": "less-0:530-2.el8_6.aarch64",
"product_id": "less-0:530-2.el8_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_6.aarch64",
"product": {
"name": "less-debugsource-0:530-2.el8_6.aarch64",
"product_id": "less-debugsource-0:530-2.el8_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_6.aarch64",
"product": {
"name": "less-debuginfo-0:530-2.el8_6.aarch64",
"product_id": "less-debuginfo-0:530-2.el8_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_6.ppc64le",
"product": {
"name": "less-0:530-2.el8_6.ppc64le",
"product_id": "less-0:530-2.el8_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_6.ppc64le",
"product": {
"name": "less-debugsource-0:530-2.el8_6.ppc64le",
"product_id": "less-debugsource-0:530-2.el8_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_6.ppc64le",
"product": {
"name": "less-debuginfo-0:530-2.el8_6.ppc64le",
"product_id": "less-debuginfo-0:530-2.el8_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_6.x86_64",
"product": {
"name": "less-0:530-2.el8_6.x86_64",
"product_id": "less-0:530-2.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_6.x86_64",
"product": {
"name": "less-debugsource-0:530-2.el8_6.x86_64",
"product_id": "less-debugsource-0:530-2.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_6.x86_64",
"product": {
"name": "less-debuginfo-0:530-2.el8_6.x86_64",
"product_id": "less-debuginfo-0:530-2.el8_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_6.s390x",
"product": {
"name": "less-0:530-2.el8_6.s390x",
"product_id": "less-0:530-2.el8_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_6.s390x",
"product": {
"name": "less-debugsource-0:530-2.el8_6.s390x",
"product_id": "less-debugsource-0:530-2.el8_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_6.s390x",
"product": {
"name": "less-debuginfo-0:530-2.el8_6.s390x",
"product_id": "less-debuginfo-0:530-2.el8_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.aarch64"
},
"product_reference": "less-0:530-2.el8_6.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.ppc64le"
},
"product_reference": "less-0:530-2.el8_6.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_6.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.s390x"
},
"product_reference": "less-0:530-2.el8_6.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_6.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.src"
},
"product_reference": "less-0:530-2.el8_6.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.x86_64"
},
"product_reference": "less-0:530-2.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.aarch64"
},
"product_reference": "less-debuginfo-0:530-2.el8_6.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.ppc64le"
},
"product_reference": "less-debuginfo-0:530-2.el8_6.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_6.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.s390x"
},
"product_reference": "less-debuginfo-0:530-2.el8_6.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.x86_64"
},
"product_reference": "less-debuginfo-0:530-2.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.aarch64"
},
"product_reference": "less-debugsource-0:530-2.el8_6.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.ppc64le"
},
"product_reference": "less-debugsource-0:530-2.el8_6.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_6.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.s390x"
},
"product_reference": "less-debugsource-0:530-2.el8_6.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.x86_64"
},
"product_reference": "less-debugsource-0:530-2.el8_6.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2024-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: missing quoting of shell metacharacters in LESSCLOSE handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs the ability to influence the LESSCLOSE environment variable. This requirement makes this CVE a Moderate impact CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.src",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48624"
},
{
"category": "external",
"summary": "RHBZ#2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
}
],
"release_date": "2024-02-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-23T14:05:54+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.src",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1989"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.src",
"BaseOS-8.6.0.Z.EUS:less-0:530-2.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-debuginfo-0:530-2.el8_6.x86_64",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.aarch64",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.ppc64le",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.s390x",
"BaseOS-8.6.0.Z.EUS:less-debugsource-0:530-2.el8_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "less: missing quoting of shell metacharacters in LESSCLOSE handling"
}
]
}
rhsa-2024_2092
Vulnerability from csaf_redhat
Published
2024-05-01 16:42
Modified
2024-11-06 05:38
Summary
Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.6.18
Notes
Topic
Moderate Logging for Red Hat OpenShift - 5.6.18
Details
Logging for Red Hat OpenShift - 5.6.18
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Moderate Logging for Red Hat OpenShift - 5.6.18",
"title": "Topic"
},
{
"category": "general",
"text": "Logging for Red Hat OpenShift - 5.6.18",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2092",
"url": "https://access.redhat.com/errata/RHSA-2024:2092"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "LOG-5244",
"url": "https://issues.redhat.com/browse/LOG-5244"
},
{
"category": "external",
"summary": "LOG-5278",
"url": "https://issues.redhat.com/browse/LOG-5278"
},
{
"category": "external",
"summary": "LOG-5396",
"url": "https://issues.redhat.com/browse/LOG-5396"
},
{
"category": "external",
"summary": "LOG-5400",
"url": "https://issues.redhat.com/browse/LOG-5400"
},
{
"category": "external",
"summary": "LOG-5404",
"url": "https://issues.redhat.com/browse/LOG-5404"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2092.json"
}
],
"title": "Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.6.18",
"tracking": {
"current_release_date": "2024-11-06T05:38:53+00:00",
"generator": {
"date": "2024-11-06T05:38:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:2092",
"initial_release_date": "2024-05-01T16:42:37+00:00",
"revision_history": [
{
"date": "2024-05-01T16:42:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-05-01T16:42:37+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T05:38:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHOL 5.6 for RHEL 8",
"product": {
"name": "RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:5.6::el8"
}
}
}
],
"category": "product_family",
"name": "logging for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"product": {
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"product_id": "openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=v5.6.18-16"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"product": {
"name": "openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"product_id": "openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-operator-bundle\u0026tag=v5.6.18-16"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-481"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-226"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-472"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-409"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-246"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"product_id": "openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-216"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"product_id": "openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-430"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-16"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"product_id": "openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.21.0-127"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.6.18-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"product": {
"name": "openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"product_id": "openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=v5.6.18-30"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.6.18-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-528"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-226"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-481"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-226"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-472"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-409"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-246"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"product_id": "openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-216"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"product_id": "openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-430"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-16"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"product_id": "openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.21.0-127"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.6.18-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.6.18-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-528"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-226"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-481"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-226"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-472"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-409"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-246"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"product_id": "openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-216"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"product_id": "openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-430"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-16"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x",
"product_id": "openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.21.0-127"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.6.18-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.6.18-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-528"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-226"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.6.18-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-481"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-226"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-472"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-409"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-246"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"product_id": "openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-216"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"product_id": "openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-430"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-16"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"product_id": "openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.21.0-127"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.6.18-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.6.18-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-528"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-226"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64"
},
"product_reference": "openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64"
},
"product_reference": "openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64"
},
"product_reference": "openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64 as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"relates_to_product_reference": "8Base-RHOL-5.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x as a component of RHOL 5.6 for RHEL 8",
"product_id": "8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x",
"relates_to_product_reference": "8Base-RHOL-5.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-43618",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2021-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2024904"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gmp: Integer overflow and resultant buffer overflow via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation is only possible on 32-bit systems. The susceptible GMP package is not tethered to the network stack, so it can only be exploited via a file already on the local system. This can be achieved either by the attacker gaining local login credentials or alternatively; by tricking a user into loading then executing a malicious file. Because of these combined reasons Red Hat Product Security rates the impact as Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-43618"
},
{
"category": "external",
"summary": "RHBZ#2024904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2024904"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-43618",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-43618",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43618"
},
{
"category": "external",
"summary": "https://bugs.debian.org/994405",
"url": "https://bugs.debian.org/994405"
},
{
"category": "external",
"summary": "https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html",
"url": "https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html"
},
{
"category": "external",
"summary": "https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e",
"url": "https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e"
}
],
"release_date": "2021-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T16:42:37+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html\n\nFor Red Hat OpenShift Logging 5.6, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2092"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gmp: Integer overflow and resultant buffer overflow via crafted input"
},
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2024-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: missing quoting of shell metacharacters in LESSCLOSE handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs the ability to influence the LESSCLOSE environment variable. This requirement makes this CVE a Moderate impact CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48624"
},
{
"category": "external",
"summary": "RHBZ#2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
}
],
"release_date": "2024-02-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T16:42:37+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html\n\nFor Red Hat OpenShift Logging 5.6, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2092"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "less: missing quoting of shell metacharacters in LESSCLOSE handling"
},
{
"acknowledgments": [
{
"names": [
"Hiroki Kurosawa",
"Daniel Stenberg"
]
}
],
"cve": "CVE-2023-28322",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"discovery_date": "2023-05-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2196793"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the Curl package. This issue may lead to unintended information disclosure by the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: more POST-after-PUT confusion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-28322"
},
{
"category": "external",
"summary": "RHBZ#2196793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196793"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-28322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28322"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2023-28322.html",
"url": "https://curl.se/docs/CVE-2023-28322.html"
}
],
"release_date": "2023-05-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T16:42:37+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html\n\nFor Red Hat OpenShift Logging 5.6, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2092"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: more POST-after-PUT confusion"
},
{
"acknowledgments": [
{
"names": [
"Reported-by: w0x42 on hackerone",
"Patched-by: Daniel Stenberg"
]
}
],
"cve": "CVE-2023-38546",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"discovery_date": "2023-10-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2241938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: cookie injection with none file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw requires a series of conditions to be met and the likeliness that they shall allow an attacker to take advantage of it is low. Even if the bug could be made to trigger, the risk that a cookie injection can be done to cause harm is additionally also low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-38546"
},
{
"category": "external",
"summary": "RHBZ#2241938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-38546",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38546",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38546"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2023-38546.html",
"url": "https://curl.se/docs/CVE-2023-38546.html"
}
],
"release_date": "2023-10-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T16:42:37+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html\n\nFor Red Hat OpenShift Logging 5.6, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2092"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: cookie injection with none file"
},
{
"acknowledgments": [
{
"names": [
"Harry Sintonen"
],
"organization": "reported"
},
{
"names": [
"Daniel Stenberg"
],
"organization": "patched"
}
],
"cve": "CVE-2023-46218",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2023-11-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2252030"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set \"super cookies\" in curl that are passed back to more origins than what is otherwise allowed or possible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: information disclosure by exploiting a mixed case flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When curl is built without PSL support, it cannot protect against this problem but it is expected to not allow \"too wide\" cookies when PSL support is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46218"
},
{
"category": "external",
"summary": "RHBZ#2252030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2252030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46218",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46218",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46218"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2023-46218.html",
"url": "https://curl.se/docs/CVE-2023-46218.html"
}
],
"release_date": "2023-12-06T07:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T16:42:37+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.html\n\nFor Red Hat OpenShift Logging 5.6, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.11/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2092"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.6:openshift-logging/cluster-logging-operator-bundle@sha256:c8911464815a24eda894efc23aaa2bd6c417e0233e964c09c2c8016387530923_amd64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:07b8ece49c28befae3616e78426e5dbc268f58fbb54f31dcb00204479529af3f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:1e9910609d6be65c52cb2c4a48fa76c28cc1f055c296f63ad3501b4d060eb729_arm64",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:63121cf7ece7a6cb1aac4dc7f73e1087c23c8c47201aeee32c0cdac05ffba2c9_s390x",
"8Base-RHOL-5.6:openshift-logging/cluster-logging-rhel8-operator@sha256:d24631f67da9c1a048bc469344ab7bcb4380ec2c77ecb6b9dc6e5cf15ba94c50_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-operator-bundle@sha256:23174febfa715dd39f50473e2a6724a4bbae571e0f93d26aaf8a858b58a66cff_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:4dcea5fae7d90d016c56917f1cc628763aa1bc38e1a0909635fbb7b05f75ba9e_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:b6d6056eb2734c71a4386b06d41385319621f39df503c96b59d378388b13fe82_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:cff5308ccc0001df80a4a72495a6e316934c24ee9684bf3e971ca869efb01717_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-proxy-rhel8@sha256:e8966795e8c10bfea8e267747693c7bb67892ef0b986f49b9ee629dc34d3c639_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:a938f0e65ca82dc652e09cc6273d3c67d05dd9edeed1bacef2db35515d5a3d73_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:b4399f758dd7746e2dec027e33c5d0dae2fc24d9f2977111b63947122eb621b7_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:e0553e16cac24a8e952fa974d81b3bd51032a87f89b95974533c171a918fa031_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch-rhel8-operator@sha256:ecc5043cbab89d983e354e9f05b4ba938711ebb00a1147e20a3f4bd168740b6c_s390x",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:0ca2eaef338e14751bfc461622a2448bf80f36fdf8e57dc648b0a7efd8ac4a4f_amd64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:86faf948fc4cedb341dc076dd7a4a5f49a2d4f63c7d8b6e6d93dd35f273bdaa2_arm64",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:a1c5699a1623667ec78dfc966cb47b179823f90e9cbf80b15f4f536b559a9dc8_ppc64le",
"8Base-RHOL-5.6:openshift-logging/elasticsearch6-rhel8@sha256:d8c3b274249b59a35365ab80373a03abed3a8f6116d7af4d4923a84604a7e711_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:2127769894108293617845a3a56d166cfc815a9fda118c4f569652e6fe0cc7f8_s390x",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:503b8b98162509da1c65e169a7842855155c3d86e9a32b241ff19adb9a6270bc_arm64",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:888404989d27290768ad085cef038f467f41e26aaf76eb17d85156e4af3d2f7f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/eventrouter-rhel8@sha256:e790dfe61c9f9c91f526c2c04a1fd49334ecb20dcd4820213445ae0285b8e837_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:7c1cdbf13482de231c14d258484ab742a55fb6c4221c92f365304a15bca31c3e_ppc64le",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:8d5cb8343560160c579aec576927618e54cda55430c0054cd46c9d61d814faca_s390x",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:c2fc5565f8b818af00383f484af6b50de61761be10af9aeae6311b823f3ef0d8_amd64",
"8Base-RHOL-5.6:openshift-logging/fluentd-rhel8@sha256:fd159618d5d1e906925ec2f4d9ac2a0b16063544484deddcce195e598a2fc3f8_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:06bb88597ebfc77cd5074d105d33181a9519f40507d87bf513ca85c043a3686f_arm64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:4e3b00092b1efe387fb4be3ad8ccf7737edeee4579d6a6bcddec875a5a9f394d_amd64",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:ce48336e71266d8a70a6e721ec7c5b3226d87013f37d23fc57a343840799e79f_ppc64le",
"8Base-RHOL-5.6:openshift-logging/kibana6-rhel8@sha256:f6e65d36752f4857877f587d9687e1bb73f1091325e94b49e6b3d1fba2c8f505_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:151c3cba48f8416c2187217303101ec9332581504ef11fb9cfee5f45b07bdb78_s390x",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:6a0b43ac57d000bf47cd5a1d4abe2959e6494ab4d4e7e9396bfb7311a68997a3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:ba287365a3536bff78714a7767a05f795558523edf582081619ac08df9285c5d_arm64",
"8Base-RHOL-5.6:openshift-logging/log-file-metric-exporter-rhel8@sha256:fc7598cd8ff5a2eb9a9c410a9c82d98cb0f6d2490a8aa6875440e0ff54edb5be_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:b83cbd531f4e1fe5d3c1721f0bcce4aa35534872d6046042b4ff48c141198ac3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:cf6baa0b2b4868281e83497f0d7e0839a0b9e8943390c667f8122ae5e2b8d1d1_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:ddd45c0e737415e559cafb3a3d81a226e9fec1b3223dc89f27bff167b41896ad_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-curator5-rhel8@sha256:fa02333f7f6d1b2d4133e5f8026bb079390098949c405922536dfb9a4501218d_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:02d4084a43324746f089e23d826cac8e5d1c96642193b67bb4832b5205c3a686_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:181bcbbcc0b60777656a604f8b0a5df6f73a79024d0af82c093bf88f1b505dab_s390x",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:660e3d802f4cb3a47e7fcbacc6d90cc4fc99fc9751c54b229172c9626fe374fc_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-loki-rhel8@sha256:d23a9d5d56609f9db6f0171f9368398dd39f93a89ee3a66447e5401d70653c52_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:4fc0f0c3130052d733881a3238ce8f18d5b1714b0750e05120321052ddedf44b_amd64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:523901895776ab29649d0b3f7584f5c5799cfb2cbad599d627731dfbf8090335_arm64",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:77d3afcac57a94952e5f6801ac4f594c2f1ab347afeb9f8a2992a50c063637c3_ppc64le",
"8Base-RHOL-5.6:openshift-logging/logging-view-plugin-rhel8@sha256:ca7e474820caebe59d84a02014f47107d7e9cad023b90ac1eb3101ac72a1e02b_s390x",
"8Base-RHOL-5.6:openshift-logging/loki-operator-bundle@sha256:6d51ab1d1bd39dab618ab7b82ce09e93f9df69eed90bb0a8a5cf723bd7affaa5_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:04c8c74f483312a7ed5a52a1e5fe43329167387d455a907365941c24991550a1_arm64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:555d7aea143b6bc937baf89676dcd425c67d5307569651251ba989afe8a48a3e_amd64",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:5a38dbba1a9f9032bc6fdf49b8832aa72072a2c75e31c8fa1e20b3fadfa3bb14_ppc64le",
"8Base-RHOL-5.6:openshift-logging/loki-rhel8-operator@sha256:b342e8cc522230872c993779fa8e765626a58c157fa1ffcc6f4573f381711e0e_s390x",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:27bed7cdb67402b9420aa8a5c44d4809c6288da4f6c6f6a16556fd82fb693222_ppc64le",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:a36c749ced7fe0d9163f800de1024cda072e9026a1dff07d812478f609b8a661_amd64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c16caa479adbb6be650d3b6b1097ed3fe6bc1cb9ebd9b37fb336d72cc2d7ba9d_arm64",
"8Base-RHOL-5.6:openshift-logging/lokistack-gateway-rhel8@sha256:c1d18a2ea2df824b187c197c09b0bdf9b885e730b3ffed05a7c0e9609167354e_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:7cd4b6c7e26ffd04fbef970444585f397d169fcdca41002120c12c997ea1019a_s390x",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:858e8481e119bb329abdb627db7965c8b2ad35f3cac5831f965e4dcc39257a93_ppc64le",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:ef0d2b9a8153eb5da5e325747e74149bbfb12002b5fa0ea8266ee115c60c5192_amd64",
"8Base-RHOL-5.6:openshift-logging/opa-openshift-rhel8@sha256:f27a87fb81e2947722e4583d88a3ecef35ff7bde1bd088945102896f904ab52c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:69abf6cf57f1339790b5f0287aa361fc14e3e2323a43f88a7db2f5d6deb5de8c_arm64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:8e406291bdedd525843af9124eb745f1d5cb5a64e445a70735d2a1f70a36f000_ppc64le",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:97a22fb9d6e42169707449eb0a126518fae5dc4907802a3a221f8041e336877e_amd64",
"8Base-RHOL-5.6:openshift-logging/vector-rhel8@sha256:e4e9e5341540f91c40a0c525b0cf1c7de1fafb5d1ec10b0bfb7d633e41f649ac_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: information disclosure by exploiting a mixed case flaw"
}
]
}
rhsa-2024_2093
Vulnerability from csaf_redhat
Published
2024-05-01 07:47
Modified
2024-11-15 17:47
Summary
Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.7.13
Notes
Topic
Moderate Logging for Red Hat OpenShift - 5.7.13
Details
Logging for Red Hat OpenShift - 5.7.13
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Moderate Logging for Red Hat OpenShift - 5.7.13",
"title": "Topic"
},
{
"category": "general",
"text": "Logging for Red Hat OpenShift - 5.7.13",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2093",
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "LOG-5243",
"url": "https://issues.redhat.com/browse/LOG-5243"
},
{
"category": "external",
"summary": "LOG-5278",
"url": "https://issues.redhat.com/browse/LOG-5278"
},
{
"category": "external",
"summary": "LOG-5393",
"url": "https://issues.redhat.com/browse/LOG-5393"
},
{
"category": "external",
"summary": "LOG-5399",
"url": "https://issues.redhat.com/browse/LOG-5399"
},
{
"category": "external",
"summary": "LOG-5403",
"url": "https://issues.redhat.com/browse/LOG-5403"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2093.json"
}
],
"title": "Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.7.13",
"tracking": {
"current_release_date": "2024-11-15T17:47:34+00:00",
"generator": {
"date": "2024-11-15T17:47:34+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:2093",
"initial_release_date": "2024-05-01T07:47:45+00:00",
"revision_history": [
{
"date": "2024-05-01T07:47:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-05-01T07:47:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T17:47:34+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHOL 5.7 for RHEL 8",
"product": {
"name": "RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:5.7::el8"
}
}
}
],
"category": "product_family",
"name": "logging for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.7.13-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.7.13-9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-480"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-228"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-471"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-408"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-248"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"product_id": "openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-215"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"product_id": "openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-431"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-15"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le",
"product_id": "openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.28.1-57"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.7.13-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.7.13-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-527"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-225"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.7.13-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.7.13-9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-480"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-228"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-471"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-408"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-248"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"product_id": "openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-215"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"product_id": "openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-431"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-15"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"product_id": "openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.28.1-57"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.7.13-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.7.13-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-527"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-225"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.7.13-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.7.13-9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-480"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-228"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-471"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-408"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-248"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"product_id": "openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-215"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"product_id": "openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-431"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-15"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"product_id": "openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.28.1-57"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.7.13-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.7.13-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-527"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-225"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"product": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.7.13-7"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"product": {
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"product_id": "openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=v5.7.13-16"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"product": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.7.13-9"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"product": {
"name": "openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"product_id": "openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-operator-bundle\u0026tag=v5.7.13-19"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"product": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-480"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.1.0-228"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"product": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"product_id": "openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-471"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"product": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"product_id": "openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"product_identification_helper": {
"purl": "pkg:oci/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-408"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"product": {
"name": "openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"product_id": "openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.4.0-248"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"product": {
"name": "openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"product_id": "openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.14.6-215"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"product": {
"name": "openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"product_id": "openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-431"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"product": {
"name": "openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"product_id": "openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel8\u0026tag=v2.9.6-15"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"product": {
"name": "openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"product_id": "openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel8\u0026tag=v0.28.1-57"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"product_id": "openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel8\u0026tag=v5.7.13-3"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"product": {
"name": "openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"product_id": "openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=v5.7.13-27"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"product": {
"name": "openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"product_id": "openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel8-operator\u0026tag=v5.7.13-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"product_id": "openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel8\u0026tag=v0.1.0-527"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"product": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"product_id": "openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel8\u0026tag=v0.1.0-225"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64"
},
"product_reference": "openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64"
},
"product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64"
},
"product_reference": "openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64"
},
"product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x"
},
"product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x"
},
"product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64"
},
"product_reference": "openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le"
},
"product_reference": "openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le"
},
"product_reference": "openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x"
},
"product_reference": "openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64"
},
"product_reference": "openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64"
},
"product_reference": "openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x"
},
"product_reference": "openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x"
},
"product_reference": "openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64 as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"relates_to_product_reference": "8Base-RHOL-5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le as a component of RHOL 5.7 for RHEL 8",
"product_id": "8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
},
"product_reference": "openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le",
"relates_to_product_reference": "8Base-RHOL-5.7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-33631",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2024-01-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261976"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the openEuler kernel in Linux filesystem modules that allows an integer overflow via mounting a corrupted filesystem. This issue affects the openEuler kernel in versions from 4.19.90 through 4.19.90-2401.3 and 5.10.0-60.18.0 through 5.10.0-183.0.0.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: ext4: kernel bug in ext4_write_inline_data_end()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has protection mechanisms in place against buffer overflows, such as FORTIFY_SOURCE, Position Independent Executables or Stack Smashing Protection.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-33631"
},
{
"category": "external",
"summary": "RHBZ#2261976",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261976"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-33631",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33631"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33631",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33631"
},
{
"category": "external",
"summary": "https://seclists.org/oss-sec/2024/q1/65",
"url": "https://seclists.org/oss-sec/2024/q1/65"
}
],
"release_date": "2024-01-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: ext4: kernel bug in ext4_write_inline_data_end()"
},
{
"cve": "CVE-2021-43618",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2021-11-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2024904"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gmp: Integer overflow and resultant buffer overflow via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation is only possible on 32-bit systems. The susceptible GMP package is not tethered to the network stack, so it can only be exploited via a file already on the local system. This can be achieved either by the attacker gaining local login credentials or alternatively; by tricking a user into loading then executing a malicious file. Because of these combined reasons Red Hat Product Security rates the impact as Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-43618"
},
{
"category": "external",
"summary": "RHBZ#2024904",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2024904"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-43618",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-43618"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-43618",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43618"
},
{
"category": "external",
"summary": "https://bugs.debian.org/994405",
"url": "https://bugs.debian.org/994405"
},
{
"category": "external",
"summary": "https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html",
"url": "https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html"
},
{
"category": "external",
"summary": "https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e",
"url": "https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e"
}
],
"release_date": "2021-11-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gmp: Integer overflow and resultant buffer overflow via crafted input"
},
{
"cve": "CVE-2022-38096",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2022-09-09T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2133452"
}
],
"notes": [
{
"category": "description",
"text": "A NULL pointer dereference issue was found in the Linux kernel\u0027s vmwgfx driver in vmw_cmd_dx_define_query. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl() on the resulting file descriptor, to crash the system, causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Systems making use of the vmwgfx driver are potentially affected by this flaw; systems without the vmwgfx driver loaded are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-38096"
},
{
"category": "external",
"summary": "RHBZ#2133452",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2133452"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-38096",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38096"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-38096",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38096"
}
],
"release_date": "2022-09-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "workaround",
"details": "To mitigate this issue, it is possible to prevent the affected code from being loaded by blacklisting the vmwgfx kernel module. For instructions relating to blacklisting a kernel module, please see https://access.redhat.com/solutions/41278.",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query"
},
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2024-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: missing quoting of shell metacharacters in LESSCLOSE handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs the ability to influence the LESSCLOSE environment variable. This requirement makes this CVE a Moderate impact CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48624"
},
{
"category": "external",
"summary": "RHBZ#2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
}
],
"release_date": "2024-02-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "less: missing quoting of shell metacharacters in LESSCLOSE handling"
},
{
"cve": "CVE-2023-6546",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-12-18T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2255498"
}
],
"notes": [
{
"category": "description",
"text": "A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: GSM multiplexing race condition leads to privilege escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is critical because it can be exploited to escalate privileges, directly threatening system security. Despite requiring local access and having a high attack complexity, the potential to severely impact confidentiality, integrity, and availability justifies its \"Important\" rating.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-6546"
},
{
"category": "external",
"summary": "RHBZ#2255498",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255498"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-6546",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6546"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6546",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6546"
},
{
"category": "external",
"summary": "https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3",
"url": "https://github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-CAN-20527"
}
],
"release_date": "2023-12-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "workaround",
"details": "This flaw can be mitigated by preventing the affected `n_gsm` kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: GSM multiplexing race condition leads to privilege escalation"
},
{
"cve": "CVE-2023-6931",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2023-11-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2252731"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event\u0027s read_size",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-6931"
},
{
"category": "external",
"summary": "RHBZ#2252731",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2252731"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-6931",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6931"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6931",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6931"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b"
}
],
"release_date": "2023-11-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "workaround",
"details": "It is not possible to trigger this issue with the default kernel.perf_event_paranoid sysctl value 2. You may check it with:\ncat /proc/sys/kernel/perf_event_paranoid",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event\u0027s read_size"
},
{
"acknowledgments": [
{
"names": [
"Hiroki Kurosawa",
"Daniel Stenberg"
]
}
],
"cve": "CVE-2023-28322",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"discovery_date": "2023-05-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2196793"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the Curl package. This issue may lead to unintended information disclosure by the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: more POST-after-PUT confusion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-28322"
},
{
"category": "external",
"summary": "RHBZ#2196793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2196793"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-28322",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-28322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-28322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28322"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2023-28322.html",
"url": "https://curl.se/docs/CVE-2023-28322.html"
}
],
"release_date": "2023-05-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: more POST-after-PUT confusion"
},
{
"acknowledgments": [
{
"names": [
"Reported-by: w0x42 on hackerone",
"Patched-by: Daniel Stenberg"
]
}
],
"cve": "CVE-2023-38546",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"discovery_date": "2023-10-03T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2241938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: cookie injection with none file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The flaw requires a series of conditions to be met and the likeliness that they shall allow an attacker to take advantage of it is low. Even if the bug could be made to trigger, the risk that a cookie injection can be done to cause harm is additionally also low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-38546"
},
{
"category": "external",
"summary": "RHBZ#2241938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-38546",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38546"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38546",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38546"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2023-38546.html",
"url": "https://curl.se/docs/CVE-2023-38546.html"
}
],
"release_date": "2023-10-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "curl: cookie injection with none file"
},
{
"acknowledgments": [
{
"names": [
"Harry Sintonen"
],
"organization": "reported"
},
{
"names": [
"Daniel Stenberg"
],
"organization": "patched"
}
],
"cve": "CVE-2023-46218",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2023-11-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2252030"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in curl that verifies a given cookie domain against the Public Suffix List. This issue could allow a malicious HTTP server to set \"super cookies\" in curl that are passed back to more origins than what is otherwise allowed or possible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "curl: information disclosure by exploiting a mixed case flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "When curl is built without PSL support, it cannot protect against this problem but it is expected to not allow \"too wide\" cookies when PSL support is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-46218"
},
{
"category": "external",
"summary": "RHBZ#2252030",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2252030"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-46218",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-46218"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-46218",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46218"
},
{
"category": "external",
"summary": "https://curl.se/docs/CVE-2023-46218.html",
"url": "https://curl.se/docs/CVE-2023-46218.html"
}
],
"release_date": "2023-12-06T07:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "curl: information disclosure by exploiting a mixed case flaw"
},
{
"cve": "CVE-2023-51042",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-01-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2259866"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s AMD GPU driver which may allow access to members of a synchronization structure after the structure is freed. This issue could allow a local user to crash the system or to access confidential system memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only applicable to the amdgpu module, which is typically only loaded on systems that use AMD GPU hardware. Use the `lsmod` command to determine whether the amdgpu module is loaded.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-51042"
},
{
"category": "external",
"summary": "RHBZ#2259866",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259866"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-51042",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-51042"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-51042",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51042"
},
{
"category": "external",
"summary": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628",
"url": "https://github.com/torvalds/linux/commit/2e54154b9f27262efd0cb4f903cc7d5ad1fe9628"
}
],
"release_date": "2024-01-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the amdgpu module from loading. Please see https://access.redhat.com/solutions/41278 for more information on how to prevent kernel modules from loading. Note that if a system has an AMD GPU, this may make certain features of that GPU unavailable.",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c"
},
{
"cve": "CVE-2024-0565",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2024-01-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2258518"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability considered being Moderate impact because of limitations for attack scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0565"
},
{
"category": "external",
"summary": "RHBZ#2258518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258518"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0565",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0565"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0565",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0565"
},
{
"category": "external",
"summary": "https://www.spinics.net/lists/stable-commits/msg328851.html",
"url": "https://www.spinics.net/lists/stable-commits/msg328851.html"
}
],
"release_date": "2023-12-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module cifs from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client"
},
{
"cve": "CVE-2024-1086",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2024-01-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2262126"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netfilter subsystem in the Linux kernel. This issue occurs in the nft_verdict_init() function, allowing positive values as a drop error within the hook verdict, therefore, the nf_hook_slow() function can cause a double-free vulnerability when NF_DROP is issued with a drop error that resembles NF_ACCEPT. The nf_tables component can be exploited to achieve local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as having an Important impact. There is the limitation that it can only be exploited by a local user with access to Netfilter, but can still allow privilege escalation if user namespaces are enabled and Netfilter is being used.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1086"
},
{
"category": "external",
"summary": "RHBZ#2262126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1086"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660"
},
{
"category": "external",
"summary": "https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660",
"url": "https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2024-01-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:47:45+00:00",
"details": "For OpenShift Container Platform 4.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html\n\nFor Red Hat OpenShift Logging 5.7, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.12/logging/cluster-logging-upgrading.html",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "workaround",
"details": "1. This flaw can be mitigated by preventing the affected netfilter (nf_tables) kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.\n\n2. If the module cannot be disabled, on non-containerized deployments of Red Hat Enterprise Linux, the mitigation is to disable user namespaces:\n```\n# echo \"user.max_user_namespaces=0\" \u003e /etc/sysctl.d/userns.conf\n# sysctl -p /etc/sysctl.d/userns.conf\n```\nOn containerized deployments, such as Red Hat OpenShift Container Platform, do not use the second mitigation (disabling user namespaces) as the functionality is needed to be enabled. The first mitigation (blacklisting nf_tables) is still viable for containerized deployments, providing the environment is not using netfilter.",
"product_ids": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOL-5.7:openshift-logging/cluster-logging-operator-bundle@sha256:5052bba9c7eba5ad23b72f73429ecdbc2de555d9138a2d77ec271297b5030ffd_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:2c8e5b01f778d0c79cd5dd94476fca3c67f540c234735c9511c5a84fc08aab99_ppc64le",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:47f59d32139e8d738e1916321c52842e62f79724334c6af50ce988e283aa0a99_s390x",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:61c2a4170defd4022aa103f89394cb759fa349e7c146506f4c247e67b3b12c01_amd64",
"8Base-RHOL-5.7:openshift-logging/cluster-logging-rhel8-operator@sha256:e3da1a9825779d34882915353603bca4fb66accdd45aa9acc92ed2fe694071cd_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-operator-bundle@sha256:e7473220ed7c90e9828fa9f20ca7b5365abcceec9e0deb23ccd7fb1d59557457_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:16774c5a92ee7c8a5c841badba97b346cc1bdfb34b776331177ccea7d1967b5e_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:25f30f718ad1ff34d4658aa14c86eaac26f973d42d736f65fa68ab23d2256439_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:cfbaf603982debbd682ef4a5d5e2b8309c43e6db519699e793f55f4433d13327_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-proxy-rhel8@sha256:ec87f5708c1726a86cd075f1eb0c7c8f272e18311e898481282f29bb63189d26_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:2ec1ae08dd2f29a777d71003ae0d2a69eb56ad6e10742706ac35784faf45c08d_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:9c4d1c2beb0248c2f518e1e936298bfb9c9a22f87e2cbacd501cdaef675850e2_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:b884874a18a66126d49de1d0c253247b87371dc027f1d96b5615fbeb0adaa7b5_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch-rhel8-operator@sha256:c3f5921db6798608847173f2c6049f7a6bec470ead8aea936c13fb5348e6192a_s390x",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:0c04dbc3a45a08de0f6e53605c8e9db1fae051053dc524a70bf6d99746667a60_amd64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:44989bd7b7fe369ff2f3ba62b5db4d264b0a86d8cfccd96b720d74d50e9a4910_arm64",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:68453af0ac957b708b8972162a4e5382f2ec30fa6de79caf013ee876c2008654_ppc64le",
"8Base-RHOL-5.7:openshift-logging/elasticsearch6-rhel8@sha256:add0ccfb34e3f0798db0f544bdbc080706611b506eaa24fe8b39a369fba1af7c_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:33b90ea96d93fcc73e740227aa755d85e18566654668f89928572126d80535fe_ppc64le",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:7668e3265f4372a0d45342948ce1630e73cd88318e7fce7d720a685a3b240ece_s390x",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9ce55848e6d84082724ef735fd373726fdecf0935fc42061358a2704c405a3d5_amd64",
"8Base-RHOL-5.7:openshift-logging/eventrouter-rhel8@sha256:9f4432fa50935c4d18ae0b9a4da00bf82336347700d1a09643d6597247e1f2f9_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:25a5133ec301b3334446ccd2205d20209aaf246544b5c11d01f6b1b8885da046_amd64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:2a441a5b9d9ca81a769af0bf89245f437f3156b654ed25afa885960567166b9d_s390x",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:451c1497aa3e26d72a165923d36bbbec4a1ba6536f6ca1fab227467aae21bab6_arm64",
"8Base-RHOL-5.7:openshift-logging/fluentd-rhel8@sha256:f1b69daf30586538e51e61165ddb5c91d51524d6a020a6392955b726bfc9b1e4_ppc64le",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:3cfae28317e8fa0d73f66626827aa16e8b98b9e8961007b3aa1d4fa30ab663e6_s390x",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:80fc28564f2bb7d5324997722497a5a64db13b9a92c93e632323168b9ef12afc_arm64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:bb7addc37488f89ac93564dea9d76e3778eaa421206db72236d8aeb56195878a_amd64",
"8Base-RHOL-5.7:openshift-logging/kibana6-rhel8@sha256:c32a3c2d6c7246e73ebd17e4536b35dea61e4f2c91fda9d2ff704db83144233e_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:2800d2b1420d2db70ebcad5f9877d4269091a5a1aee6f411533ff21a6dc91877_amd64",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:6eabb34530d3fd81622fb63ff7787d014305690988c050993668206503b67344_ppc64le",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:b5f183b0c351d7f237a94773541fe9243a0dc7437d819620daadee68df08a540_s390x",
"8Base-RHOL-5.7:openshift-logging/log-file-metric-exporter-rhel8@sha256:c1f893de26335c435974ce6dc08cffd3d2dd4a4160aa9c6bc3e8885a2057b201_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:028325b6fe574bcf8af1366540e4da60b2ebca734caa3bf20de75e48b06abbfc_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:065a934e612868128f21b676e653e697b62aa1f684feb8c91f42681c1dc69dd9_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:53a88958754109e0397a1c2a4314efcb8095aaf6ceed99e29b458f260c4641ae_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-curator5-rhel8@sha256:9122fc216d96cbe5600214280e04c0685ba7dcda94bfd0d352bcee3d0a3bc118_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:4410e01bf80e2edf9e4ea0506bd23a0de143941c8338565edb0ffa04367993ce_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:50dee54ca2abbe169cb212f5303fa32a0d3fde7f0710aa8442ad3b75732010fd_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:84c737b00a68b7edfd013267b281d17826124724c4a127f1134d54cdb467327d_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-loki-rhel8@sha256:ef567b608176f5c369d8fda4ef7dffbaac0b77a9d5137a5c11179ad68491605b_arm64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5b7f4594f0f3c99f727ba7fe4e5e2d448a793317ccdaa20b065d4338392f20e3_amd64",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:5eb879fd8d4389ec692f5c5ce8dc4d5d8f25502100fc65f8d32963d17075e751_ppc64le",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:df59db956eebd9660557dd84d7b1fd8798948f34f561acc4ba9f602d674a2f7c_s390x",
"8Base-RHOL-5.7:openshift-logging/logging-view-plugin-rhel8@sha256:fc235e811b0555705b202b14f1355f07855ded3a8655f20b586850bddec63d43_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-operator-bundle@sha256:19253d82c2b591ce0571cdb7af1f78ba4f0f26945a0f23cced740e7614041afa_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:3b767616c05a9d8ebb64339cae8264f1ecec06cd8a39a0be5d998356b73e8a0f_arm64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:ba650502eb74b344a1909e6e6157bd643743ce7ceef834f2f04bf5466f59b87b_amd64",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:de04bbd436d7cae593ba9c39b95373756eb7a2ef48cb1cc7f0a97d9c19cd71f7_ppc64le",
"8Base-RHOL-5.7:openshift-logging/loki-rhel8-operator@sha256:f19e2ef6f679011cb197bc5d19c920a02a7fc0823d96892dd1256c3ac7ef3f8f_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:3f19a9f36830bf9bfe6287a89f47109bc7c33bd9dd15544034a7ea42cd959c49_arm64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:4db6a4f74f97b0488c7c496b12ef6a8aa68e772e7f76b2445531b5b6184985f3_amd64",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:6e68c0305cdf5232f024267eacc06ccc9077ae07889fcc006bbe9dd4a4f1c150_s390x",
"8Base-RHOL-5.7:openshift-logging/lokistack-gateway-rhel8@sha256:9bd9179c7f607779b7a5430f9d3c6872bcf149879eae54ec12bb76389d30e06c_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:31040aab576e551099b6a5a3d8f05df20c9f242d539aaa393bfe131f2dd5ece8_amd64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:8c2367d4caee4c93f67831412ef1f3d087e89bb4ae95157029d2a7b1eeb5f2d5_arm64",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:c6691999a6ec0a3f63009fca5863109cf6205aa42ea4495a17a00db89766ddb5_ppc64le",
"8Base-RHOL-5.7:openshift-logging/opa-openshift-rhel8@sha256:d2afab4c0e9e0cb3d2132b08fcd656851b132e1ebe6fb15e860faba8bad4598a_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:45c6577bf54cff252ace26b759fdb6dac4000e0cd2a28dd2989e196bd88eb7e4_arm64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:6a482c2b1e950f36ae86a787ea357715211bb97ffa0ed21fd72854b0873b38e9_s390x",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:caa92026abefc9d8fdd0b922b615906556e1d40e94ed040d37ae37000227c372_amd64",
"8Base-RHOL-5.7:openshift-logging/vector-rhel8@sha256:fd613e05b052acd318d8ca445a634c2439afc7bf4bec1fa2ca5552569e1ee98d_ppc64le"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2024-05-30T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function"
}
]
}
rhsa-2024_1610
Vulnerability from csaf_redhat
Published
2024-04-02 16:08
Modified
2024-11-06 05:22
Summary
Red Hat Security Advisory: less security update
Notes
Topic
An update for less is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.
Security Fix(es):
* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for less is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1610",
"url": "https://access.redhat.com/errata/RHSA-2024:1610"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1610.json"
}
],
"title": "Red Hat Security Advisory: less security update",
"tracking": {
"current_release_date": "2024-11-06T05:22:50+00:00",
"generator": {
"date": "2024-11-06T05:22:50+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:1610",
"initial_release_date": "2024-04-02T16:08:53+00:00",
"revision_history": [
{
"date": "2024-04-02T16:08:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-02T16:08:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T05:22:50+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_9.src",
"product": {
"name": "less-0:530-2.el8_9.src",
"product_id": "less-0:530-2.el8_9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_9.aarch64",
"product": {
"name": "less-0:530-2.el8_9.aarch64",
"product_id": "less-0:530-2.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_9.aarch64",
"product": {
"name": "less-debugsource-0:530-2.el8_9.aarch64",
"product_id": "less-debugsource-0:530-2.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_9.aarch64",
"product": {
"name": "less-debuginfo-0:530-2.el8_9.aarch64",
"product_id": "less-debuginfo-0:530-2.el8_9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_9.ppc64le",
"product": {
"name": "less-0:530-2.el8_9.ppc64le",
"product_id": "less-0:530-2.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_9.ppc64le",
"product": {
"name": "less-debugsource-0:530-2.el8_9.ppc64le",
"product_id": "less-debugsource-0:530-2.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_9.ppc64le",
"product": {
"name": "less-debuginfo-0:530-2.el8_9.ppc64le",
"product_id": "less-debuginfo-0:530-2.el8_9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_9.x86_64",
"product": {
"name": "less-0:530-2.el8_9.x86_64",
"product_id": "less-0:530-2.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_9.x86_64",
"product": {
"name": "less-debugsource-0:530-2.el8_9.x86_64",
"product_id": "less-debugsource-0:530-2.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_9.x86_64",
"product": {
"name": "less-debuginfo-0:530-2.el8_9.x86_64",
"product_id": "less-debuginfo-0:530-2.el8_9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:530-2.el8_9.s390x",
"product": {
"name": "less-0:530-2.el8_9.s390x",
"product_id": "less-0:530-2.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@530-2.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:530-2.el8_9.s390x",
"product": {
"name": "less-debugsource-0:530-2.el8_9.s390x",
"product_id": "less-debugsource-0:530-2.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@530-2.el8_9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:530-2.el8_9.s390x",
"product": {
"name": "less-debuginfo-0:530-2.el8_9.s390x",
"product_id": "less-debuginfo-0:530-2.el8_9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@530-2.el8_9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.aarch64"
},
"product_reference": "less-0:530-2.el8_9.aarch64",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.ppc64le"
},
"product_reference": "less-0:530-2.el8_9.ppc64le",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.s390x"
},
"product_reference": "less-0:530-2.el8_9.s390x",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_9.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.src"
},
"product_reference": "less-0:530-2.el8_9.src",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:530-2.el8_9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.x86_64"
},
"product_reference": "less-0:530-2.el8_9.x86_64",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.aarch64"
},
"product_reference": "less-debuginfo-0:530-2.el8_9.aarch64",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.ppc64le"
},
"product_reference": "less-debuginfo-0:530-2.el8_9.ppc64le",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.s390x"
},
"product_reference": "less-debuginfo-0:530-2.el8_9.s390x",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:530-2.el8_9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.x86_64"
},
"product_reference": "less-debuginfo-0:530-2.el8_9.x86_64",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.aarch64"
},
"product_reference": "less-debugsource-0:530-2.el8_9.aarch64",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.ppc64le"
},
"product_reference": "less-debugsource-0:530-2.el8_9.ppc64le",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.s390x"
},
"product_reference": "less-debugsource-0:530-2.el8_9.s390x",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:530-2.el8_9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)",
"product_id": "BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.x86_64"
},
"product_reference": "less-debugsource-0:530-2.el8_9.x86_64",
"relates_to_product_reference": "BaseOS-8.9.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2024-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: missing quoting of shell metacharacters in LESSCLOSE handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs the ability to influence the LESSCLOSE environment variable. This requirement makes this CVE a Moderate impact CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.src",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.x86_64",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.x86_64",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48624"
},
{
"category": "external",
"summary": "RHBZ#2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
}
],
"release_date": "2024-02-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-02T16:08:53+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.src",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.x86_64",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.x86_64",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1610"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.src",
"BaseOS-8.9.0.Z.MAIN:less-0:530-2.el8_9.x86_64",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-debuginfo-0:530-2.el8_9.x86_64",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.aarch64",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.ppc64le",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.s390x",
"BaseOS-8.9.0.Z.MAIN:less-debugsource-0:530-2.el8_9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "less: missing quoting of shell metacharacters in LESSCLOSE handling"
}
]
}
rhsa-2024_1692
Vulnerability from csaf_redhat
Published
2024-04-08 09:28
Modified
2024-11-06 05:24
Summary
Red Hat Security Advisory: less security update
Notes
Topic
An update for less is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of
Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.
Details
The "less" utility is a text file browser that resembles "more", but allows
users to move backwards in the file as well as forwards. Since "less" does not
read the entire input file at startup, it also starts more quickly than ordinary
text editors.
Security Fix(es):
* less: missing quoting of shell metacharacters in LESSCLOSE handling
(CVE-2022-48624)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for less is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of\nModerate. A Common Vulnerability Scoring System (CVSS) base score, which gives\na detailed severity rating, is available for each vulnerability from the CVE\nlink(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The \"less\" utility is a text file browser that resembles \"more\", but allows\nusers to move backwards in the file as well as forwards. Since \"less\" does not\nread the entire input file at startup, it also starts more quickly than ordinary\ntext editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling\n(CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1692",
"url": "https://access.redhat.com/errata/RHSA-2024:1692"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1692.json"
}
],
"title": "Red Hat Security Advisory: less security update",
"tracking": {
"current_release_date": "2024-11-06T05:24:49+00:00",
"generator": {
"date": "2024-11-06T05:24:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:1692",
"initial_release_date": "2024-04-08T09:28:17+00:00",
"revision_history": [
{
"date": "2024-04-08T09:28:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-08T09:28:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T05:24:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:590-3.el9_3.src",
"product": {
"name": "less-0:590-3.el9_3.src",
"product_id": "less-0:590-3.el9_3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@590-3.el9_3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:590-3.el9_3.aarch64",
"product": {
"name": "less-0:590-3.el9_3.aarch64",
"product_id": "less-0:590-3.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@590-3.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:590-3.el9_3.aarch64",
"product": {
"name": "less-debugsource-0:590-3.el9_3.aarch64",
"product_id": "less-debugsource-0:590-3.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@590-3.el9_3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:590-3.el9_3.aarch64",
"product": {
"name": "less-debuginfo-0:590-3.el9_3.aarch64",
"product_id": "less-debuginfo-0:590-3.el9_3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@590-3.el9_3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:590-3.el9_3.ppc64le",
"product": {
"name": "less-0:590-3.el9_3.ppc64le",
"product_id": "less-0:590-3.el9_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@590-3.el9_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:590-3.el9_3.ppc64le",
"product": {
"name": "less-debugsource-0:590-3.el9_3.ppc64le",
"product_id": "less-debugsource-0:590-3.el9_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@590-3.el9_3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:590-3.el9_3.ppc64le",
"product": {
"name": "less-debuginfo-0:590-3.el9_3.ppc64le",
"product_id": "less-debuginfo-0:590-3.el9_3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@590-3.el9_3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:590-3.el9_3.x86_64",
"product": {
"name": "less-0:590-3.el9_3.x86_64",
"product_id": "less-0:590-3.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@590-3.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:590-3.el9_3.x86_64",
"product": {
"name": "less-debugsource-0:590-3.el9_3.x86_64",
"product_id": "less-debugsource-0:590-3.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@590-3.el9_3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:590-3.el9_3.x86_64",
"product": {
"name": "less-debuginfo-0:590-3.el9_3.x86_64",
"product_id": "less-debuginfo-0:590-3.el9_3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@590-3.el9_3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "less-0:590-3.el9_3.s390x",
"product": {
"name": "less-0:590-3.el9_3.s390x",
"product_id": "less-0:590-3.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less@590-3.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debugsource-0:590-3.el9_3.s390x",
"product": {
"name": "less-debugsource-0:590-3.el9_3.s390x",
"product_id": "less-debugsource-0:590-3.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debugsource@590-3.el9_3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "less-debuginfo-0:590-3.el9_3.s390x",
"product": {
"name": "less-debuginfo-0:590-3.el9_3.s390x",
"product_id": "less-debuginfo-0:590-3.el9_3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/less-debuginfo@590-3.el9_3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:590-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.aarch64"
},
"product_reference": "less-0:590-3.el9_3.aarch64",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:590-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.ppc64le"
},
"product_reference": "less-0:590-3.el9_3.ppc64le",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:590-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.s390x"
},
"product_reference": "less-0:590-3.el9_3.s390x",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:590-3.el9_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.src"
},
"product_reference": "less-0:590-3.el9_3.src",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-0:590-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.x86_64"
},
"product_reference": "less-0:590-3.el9_3.x86_64",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:590-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.aarch64"
},
"product_reference": "less-debuginfo-0:590-3.el9_3.aarch64",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:590-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.ppc64le"
},
"product_reference": "less-debuginfo-0:590-3.el9_3.ppc64le",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:590-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.s390x"
},
"product_reference": "less-debuginfo-0:590-3.el9_3.s390x",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debuginfo-0:590-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.x86_64"
},
"product_reference": "less-debuginfo-0:590-3.el9_3.x86_64",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:590-3.el9_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.aarch64"
},
"product_reference": "less-debugsource-0:590-3.el9_3.aarch64",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:590-3.el9_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.ppc64le"
},
"product_reference": "less-debugsource-0:590-3.el9_3.ppc64le",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:590-3.el9_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.s390x"
},
"product_reference": "less-debugsource-0:590-3.el9_3.s390x",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "less-debugsource-0:590-3.el9_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.x86_64"
},
"product_reference": "less-debugsource-0:590-3.el9_3.x86_64",
"relates_to_product_reference": "BaseOS-9.3.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48624",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2024-02-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2265081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in less. The close_altfile() function in filename.c omits shell_quote calls for LESSCLOSE, a command line to invoke the optional input postprocessor. This issue could lead to an OS command injection vulnerability and arbitrary command execution on the host operating system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "less: missing quoting of shell metacharacters in LESSCLOSE handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs the ability to influence the LESSCLOSE environment variable. This requirement makes this CVE a Moderate impact CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.src",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.x86_64",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.x86_64",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48624"
},
{
"category": "external",
"summary": "RHBZ#2265081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
}
],
"release_date": "2024-02-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-08T09:28:17+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.src",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.x86_64",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.x86_64",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1692"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.src",
"BaseOS-9.3.0.Z.MAIN:less-0:590-3.el9_3.x86_64",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-debuginfo-0:590-3.el9_3.x86_64",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.aarch64",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.ppc64le",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.s390x",
"BaseOS-9.3.0.Z.MAIN:less-debugsource-0:590-3.el9_3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "less: missing quoting of shell metacharacters in LESSCLOSE handling"
}
]
}
wid-sec-w-2024-1307
Vulnerability from csaf_certbund
Published
2024-06-06 22:00
Modified
2024-06-13 22:00
Summary
Red Hat OpenShift Service Mesh Containers: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh Containers ausnutzen, um Dateien zu manipulieren, einen 'Denial of Service'-Zustand erzuegen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuführen.
Betroffene Betriebssysteme
- Sonstiges
- UNIX
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Red Hat OpenShift ist eine \"Platform as a Service\" (PaaS) L\u00f6sung zur Bereitstellung von Applikationen in der Cloud.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh Containers ausnutzen, um Dateien zu manipulieren, einen \u0027Denial of Service\u0027-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1307 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1307.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1307 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1307"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3680 vom 2024-06-06",
"url": "https://access.redhat.com/errata/RHSA-2024:3680"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3683 vom 2024-06-06",
"url": "https://access.redhat.com/errata/RHSA-2024:3683"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3790 vom 2024-06-11",
"url": "https://access.redhat.com/errata/RHSA-2024:3790"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3314 vom 2024-06-13",
"url": "https://access.redhat.com/errata/RHSA-2024:3314"
}
],
"source_lang": "en-US",
"title": "Red Hat OpenShift Service Mesh Containers: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-06-13T22:00:00.000+00:00",
"generator": {
"date": "2024-06-14T08:08:17.851+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2024-1307",
"initial_release_date": "2024-06-06T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-06-06T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-06-10T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-06-13T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "Service Mesh Containers \u003c2.5.2",
"product": {
"name": "Red Hat OpenShift Service Mesh Containers \u003c2.5.2",
"product_id": "T035259",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:service_mesh_containers__2.5.2"
}
}
},
{
"category": "product_version_range",
"name": "Service Mesh Containers \u003c2.4.8",
"product": {
"name": "Red Hat OpenShift Service Mesh Containers \u003c2.4.8",
"product_id": "T035260",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:service_mesh_containers__2.4.8"
}
}
}
],
"category": "product_name",
"name": "OpenShift"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-25220",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2021-25220"
},
{
"cve": "CVE-2021-43618",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2021-43618"
},
{
"cve": "CVE-2021-46848",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2021-46848"
},
{
"cve": "CVE-2022-1271",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-1271"
},
{
"cve": "CVE-2022-2795",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-2795"
},
{
"cve": "CVE-2022-3094",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-3094"
},
{
"cve": "CVE-2022-36227",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-36227"
},
{
"cve": "CVE-2022-47024",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-47024"
},
{
"cve": "CVE-2022-47629",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-47629"
},
{
"cve": "CVE-2022-48303",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-48303"
},
{
"cve": "CVE-2022-48468",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-48468"
},
{
"cve": "CVE-2022-48554",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-48554"
},
{
"cve": "CVE-2022-48624",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2022-48624"
},
{
"cve": "CVE-2023-22745",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-22745"
},
{
"cve": "CVE-2023-2602",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-2602"
},
{
"cve": "CVE-2023-2603",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-2603"
},
{
"cve": "CVE-2023-29491",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-29491"
},
{
"cve": "CVE-2023-2975",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-2975"
},
{
"cve": "CVE-2023-3446",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-3446"
},
{
"cve": "CVE-2023-36054",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-36054"
},
{
"cve": "CVE-2023-3817",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-3817"
},
{
"cve": "CVE-2023-39975",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-39975"
},
{
"cve": "CVE-2023-4408",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-4408"
},
{
"cve": "CVE-2023-44487",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-44487"
},
{
"cve": "CVE-2023-45288",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-45288"
},
{
"cve": "CVE-2023-4641",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-4641"
},
{
"cve": "CVE-2023-4692",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-4692"
},
{
"cve": "CVE-2023-4693",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-4693"
},
{
"cve": "CVE-2023-47038",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-47038"
},
{
"cve": "CVE-2023-50387",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-50387"
},
{
"cve": "CVE-2023-50868",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-50868"
},
{
"cve": "CVE-2023-5517",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-5517"
},
{
"cve": "CVE-2023-5678",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-5678"
},
{
"cve": "CVE-2023-5679",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-5679"
},
{
"cve": "CVE-2023-6004",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-6004"
},
{
"cve": "CVE-2023-6129",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-6129"
},
{
"cve": "CVE-2023-6237",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-6237"
},
{
"cve": "CVE-2023-6516",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-6516"
},
{
"cve": "CVE-2023-6597",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-6597"
},
{
"cve": "CVE-2023-6918",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-6918"
},
{
"cve": "CVE-2023-7008",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-7008"
},
{
"cve": "CVE-2023-7104",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2023-7104"
},
{
"cve": "CVE-2024-0450",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-0450"
},
{
"cve": "CVE-2024-0727",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-0727"
},
{
"cve": "CVE-2024-1048",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-1048"
},
{
"cve": "CVE-2024-1313",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-1313"
},
{
"cve": "CVE-2024-1394",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-1394"
},
{
"cve": "CVE-2024-22195",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-22195"
},
{
"cve": "CVE-2024-22365",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-22365"
},
{
"cve": "CVE-2024-24786",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-24786"
},
{
"cve": "CVE-2024-25062",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-25062"
},
{
"cve": "CVE-2024-26458",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-26458"
},
{
"cve": "CVE-2024-26461",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-26461"
},
{
"cve": "CVE-2024-28834",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-28834"
},
{
"cve": "CVE-2024-28835",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-28835"
},
{
"cve": "CVE-2024-2961",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-2961"
},
{
"cve": "CVE-2024-33599",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-33599"
},
{
"cve": "CVE-2024-33600",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-33600"
},
{
"cve": "CVE-2024-33601",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-33601"
},
{
"cve": "CVE-2024-33602",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift existieren mehrere Schwachstellen. Diese Fehler bestehen in verschiedenen Komponenten und Subsystemen wie der Libksba-Library, BIND, gmp und der Tar-Paketkomponente aufgrund einer Race Condition, einer NULL-Zeiger-Dereferenz, einem Speicherzuordnungsproblem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial of Service-Zustand erzuegen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646"
]
},
"release_date": "2024-06-06T22:00:00Z",
"title": "CVE-2024-33602"
}
]
}
wid-sec-w-2024-1226
Vulnerability from csaf_certbund
Published
2024-05-22 22:00
Modified
2024-06-13 22:00
Summary
Red Hat OpenShift: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder um weitere nicht spezifizierte Angriffe auszuführen.
Betroffene Betriebssysteme
- Linux
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Red Hat OpenShift ist eine \"Platform as a Service\" (PaaS) L\u00f6sung zur Bereitstellung von Applikationen in der Cloud.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, seine Privilegien zu erweitern oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1226 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1226.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1226 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1226"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2874 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:2874"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2929 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:2929"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2930 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:2930"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2932 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:2932"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2933 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:2933"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2874 vom 2024-05-22",
"url": "https://access.redhat.com/errata/RHSA-2024:3316"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2901 vom 2024-05-23",
"url": "https://access.redhat.com/errata/RHSA-2024:2901"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3473 vom 2024-05-29",
"url": "https://access.redhat.com/errata/RHSA-2024:3473"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3790 vom 2024-06-11",
"url": "https://access.redhat.com/errata/RHSA-2024:3790"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3715 vom 2024-06-12",
"url": "https://access.redhat.com/errata/RHSA-2024:3715"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:3314 vom 2024-06-13",
"url": "https://access.redhat.com/errata/RHSA-2024:3314"
},
{
"category": "external",
"summary": "RedHat Security Advisory",
"url": "https://access.redhat.com/errata/RHSA-2024:3919"
}
],
"source_lang": "en-US",
"title": "Red Hat OpenShift: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-06-13T22:00:00.000+00:00",
"generator": {
"date": "2024-06-14T08:08:23.564+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2024-1226",
"initial_release_date": "2024-05-22T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-05-22T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-05-23T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-30T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-06-10T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-06-11T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-06-13T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "6"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "T035142",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "product_name",
"name": "Enterprise Linux"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift",
"product": {
"name": "Red Hat OpenShift",
"product_id": "T035034",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:-"
}
}
},
{
"category": "product_version_range",
"name": "Migration Toolkit for Applications \u003c7.0.3",
"product": {
"name": "Red Hat OpenShift Migration Toolkit for Applications \u003c7.0.3",
"product_id": "T035036",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:migration_toolkit_for_applications__7.0.3"
}
}
},
{
"category": "product_version",
"name": "Custom Metric Autoscaler 2",
"product": {
"name": "Red Hat OpenShift Custom Metric Autoscaler 2",
"product_id": "T035047",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:custom_metric_autoscaler_2"
}
}
}
],
"category": "product_name",
"name": "OpenShift"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-26555",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2020-26555"
},
{
"cve": "CVE-2021-25220",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2021-25220"
},
{
"cve": "CVE-2021-29390",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2021-29390"
},
{
"cve": "CVE-2021-43618",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2021-43618"
},
{
"cve": "CVE-2022-0480",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-0480"
},
{
"cve": "CVE-2022-2795",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-2795"
},
{
"cve": "CVE-2022-3094",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-3094"
},
{
"cve": "CVE-2022-38096",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-38096"
},
{
"cve": "CVE-2022-40090",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-40090"
},
{
"cve": "CVE-2022-45934",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-45934"
},
{
"cve": "CVE-2022-48554",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-48554"
},
{
"cve": "CVE-2022-48624",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2022-48624"
},
{
"cve": "CVE-2023-24023",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-24023"
},
{
"cve": "CVE-2023-25193",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-25193"
},
{
"cve": "CVE-2023-25775",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-25775"
},
{
"cve": "CVE-2023-26159",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-26159"
},
{
"cve": "CVE-2023-26364",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-26364"
},
{
"cve": "CVE-2023-28322",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-28322"
},
{
"cve": "CVE-2023-28464",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-28464"
},
{
"cve": "CVE-2023-28866",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-28866"
},
{
"cve": "CVE-2023-2975",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-2975"
},
{
"cve": "CVE-2023-31083",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-31083"
},
{
"cve": "CVE-2023-31122",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-31122"
},
{
"cve": "CVE-2023-3446",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-3446"
},
{
"cve": "CVE-2023-3567",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-3567"
},
{
"cve": "CVE-2023-3618",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-3618"
},
{
"cve": "CVE-2023-37453",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-37453"
},
{
"cve": "CVE-2023-3817",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-3817"
},
{
"cve": "CVE-2023-38469",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-38469"
},
{
"cve": "CVE-2023-38470",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-38470"
},
{
"cve": "CVE-2023-38471",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-38471"
},
{
"cve": "CVE-2023-38472",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-38472"
},
{
"cve": "CVE-2023-38473",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-38473"
},
{
"cve": "CVE-2023-38546",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-38546"
},
{
"cve": "CVE-2023-39189",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-39189"
},
{
"cve": "CVE-2023-39193",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-39193"
},
{
"cve": "CVE-2023-39194",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-39194"
},
{
"cve": "CVE-2023-39198",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-39198"
},
{
"cve": "CVE-2023-39326",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-39326"
},
{
"cve": "CVE-2023-40745",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-40745"
},
{
"cve": "CVE-2023-41175",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-41175"
},
{
"cve": "CVE-2023-4133",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-4133"
},
{
"cve": "CVE-2023-42754",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-42754"
},
{
"cve": "CVE-2023-42756",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-42756"
},
{
"cve": "CVE-2023-43785",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-43785"
},
{
"cve": "CVE-2023-43786",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-43786"
},
{
"cve": "CVE-2023-43787",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-43787"
},
{
"cve": "CVE-2023-43788",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-43788"
},
{
"cve": "CVE-2023-43789",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-43789"
},
{
"cve": "CVE-2023-4408",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-4408"
},
{
"cve": "CVE-2023-45286",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-45286"
},
{
"cve": "CVE-2023-45287",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-45287"
},
{
"cve": "CVE-2023-45288",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-45288"
},
{
"cve": "CVE-2023-45289",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-45289"
},
{
"cve": "CVE-2023-45290",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-45290"
},
{
"cve": "CVE-2023-45857",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-45857"
},
{
"cve": "CVE-2023-45863",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-45863"
},
{
"cve": "CVE-2023-46218",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-46218"
},
{
"cve": "CVE-2023-46862",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-46862"
},
{
"cve": "CVE-2023-47038",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-47038"
},
{
"cve": "CVE-2023-48631",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-48631"
},
{
"cve": "CVE-2023-50387",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-50387"
},
{
"cve": "CVE-2023-50868",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-50868"
},
{
"cve": "CVE-2023-51043",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-51043"
},
{
"cve": "CVE-2023-51779",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-51779"
},
{
"cve": "CVE-2023-51780",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-51780"
},
{
"cve": "CVE-2023-52425",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52425"
},
{
"cve": "CVE-2023-52434",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52434"
},
{
"cve": "CVE-2023-52448",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52448"
},
{
"cve": "CVE-2023-52476",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52476"
},
{
"cve": "CVE-2023-52489",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52489"
},
{
"cve": "CVE-2023-52522",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52522"
},
{
"cve": "CVE-2023-52529",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52529"
},
{
"cve": "CVE-2023-52574",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52574"
},
{
"cve": "CVE-2023-52578",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52578"
},
{
"cve": "CVE-2023-52580",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52580"
},
{
"cve": "CVE-2023-52581",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52581"
},
{
"cve": "CVE-2023-52597",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52597"
},
{
"cve": "CVE-2023-52610",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52610"
},
{
"cve": "CVE-2023-52620",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-52620"
},
{
"cve": "CVE-2023-5678",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-5678"
},
{
"cve": "CVE-2023-6040",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6040"
},
{
"cve": "CVE-2023-6121",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6121"
},
{
"cve": "CVE-2023-6129",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6129"
},
{
"cve": "CVE-2023-6176",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6176"
},
{
"cve": "CVE-2023-6228",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6228"
},
{
"cve": "CVE-2023-6237",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6237"
},
{
"cve": "CVE-2023-6240",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6240"
},
{
"cve": "CVE-2023-6531",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6531"
},
{
"cve": "CVE-2023-6546",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6546"
},
{
"cve": "CVE-2023-6622",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6622"
},
{
"cve": "CVE-2023-6915",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6915"
},
{
"cve": "CVE-2023-6931",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6931"
},
{
"cve": "CVE-2023-6932",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-6932"
},
{
"cve": "CVE-2023-7008",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2023-7008"
},
{
"cve": "CVE-2024-0565",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-0565"
},
{
"cve": "CVE-2024-0727",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-0727"
},
{
"cve": "CVE-2024-0841",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-0841"
},
{
"cve": "CVE-2024-1085",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-1085"
},
{
"cve": "CVE-2024-1086",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-1086"
},
{
"cve": "CVE-2024-1394",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-1394"
},
{
"cve": "CVE-2024-1488",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-1488"
},
{
"cve": "CVE-2024-21011",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-21011"
},
{
"cve": "CVE-2024-21012",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-21012"
},
{
"cve": "CVE-2024-21068",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-21068"
},
{
"cve": "CVE-2024-21085",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-21085"
},
{
"cve": "CVE-2024-21094",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-21094"
},
{
"cve": "CVE-2024-22365",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-22365"
},
{
"cve": "CVE-2024-24783",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-24783"
},
{
"cve": "CVE-2024-24784",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-24784"
},
{
"cve": "CVE-2024-24785",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-24785"
},
{
"cve": "CVE-2024-24786",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-24786"
},
{
"cve": "CVE-2024-25062",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-25062"
},
{
"cve": "CVE-2024-25742",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-25742"
},
{
"cve": "CVE-2024-25743",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-25743"
},
{
"cve": "CVE-2024-26582",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26582"
},
{
"cve": "CVE-2024-26583",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26583"
},
{
"cve": "CVE-2024-26584",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26584"
},
{
"cve": "CVE-2024-26585",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26585"
},
{
"cve": "CVE-2024-26586",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26586"
},
{
"cve": "CVE-2024-26593",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26593"
},
{
"cve": "CVE-2024-26602",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26602"
},
{
"cve": "CVE-2024-26609",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26609"
},
{
"cve": "CVE-2024-26633",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-26633"
},
{
"cve": "CVE-2024-27316",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-27316"
},
{
"cve": "CVE-2024-28834",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-28834"
},
{
"cve": "CVE-2024-28835",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-28835"
},
{
"cve": "CVE-2024-28849",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-28849"
},
{
"cve": "CVE-2024-29180",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-29180"
},
{
"cve": "CVE-2024-2961",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-2961"
},
{
"cve": "CVE-2024-33599",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-33599"
},
{
"cve": "CVE-2024-33600",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-33600"
},
{
"cve": "CVE-2024-33601",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-33601"
},
{
"cve": "CVE-2024-33602",
"notes": [
{
"category": "description",
"text": "In Red Hat OpenShift bestehen mehrere Schwachstellen. Diese Schwachstellen bestehen in mehreren Komponenten und Subsystemen wie Oracle Java, dem Linux-Kernel oder dem HTTP/2-Protokoll in der Programmiersprache Go und in der Migration Toolkit Komponente aufgrund mehrerer sicherheitsrelevanter Probleme wie einer Race Condition, einer NULL- Pointer-Dereferenz oder einem Memory Allocation-Problem und mehr. Ein Angreifer kann diese Schwachstellen ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand auszul\u00f6sen, beliebigen Code auszuf\u00fchren, vertrauliche Informationen preiszugeben, seine Privilegien zu erweitern, oder um weitere nicht spezifizierte Angriffe auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"T035034",
"T035142",
"T035047"
]
},
"release_date": "2024-05-22T22:00:00Z",
"title": "CVE-2024-33602"
}
]
}
wid-sec-w-2024-0434
Vulnerability from csaf_certbund
Published
2024-02-20 23:00
Modified
2024-05-27 22:00
Summary
less: Schwachstelle ermöglicht Codeausführung
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
"less" ist ein Kommandozeilen-Textbetrachter für Linux, mit dem der Benutzer den Inhalt einer Datei anzeigen und durch Vor- und Zurückblättern in der Datei navigieren kann.
Angriff
Ein lokaler Angreifer kann eine Schwachstelle in less ausnutzen, um beliebigen Programmcode auszuführen.
Betroffene Betriebssysteme
- Linux
- UNIX
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "\"less\" ist ein Kommandozeilen-Textbetrachter f\u00fcr Linux, mit dem der Benutzer den Inhalt einer Datei anzeigen und durch Vor- und Zur\u00fcckbl\u00e4ttern in der Datei navigieren kann.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann eine Schwachstelle in less ausnutzen, um beliebigen Programmcode auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0434 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0434.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0434 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0434"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-1924 vom 2024-03-05",
"url": "https://alas.aws.amazon.com/ALAS-2024-1924.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2485 vom 2024-03-05",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2485.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6664-1 vom 2024-02-27",
"url": "https://ubuntu.com/security/notices/USN-6664-1"
},
{
"category": "external",
"summary": "Red Hat Bugzilla vom 2024-02-20",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081"
},
{
"category": "external",
"summary": "GitHub less vom 2024-02-20",
"url": "https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1610 vom 2024-04-02",
"url": "https://access.redhat.com/errata/RHSA-2024:1610"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-1610 vom 2024-04-03",
"url": "https://linux.oracle.com/errata/ELSA-2024-1610.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2024:1610 vom 2024-04-05",
"url": "https://errata.build.resf.org/RLSA-2024:1610"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1692 vom 2024-04-08",
"url": "https://access.redhat.com/errata/RHSA-2024:1692"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-1692 vom 2024-04-09",
"url": "https://linux.oracle.com/errata/ELSA-2024-1692.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1190-1 vom 2024-04-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018314.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1192-1 vom 2024-04-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018313.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:1189-1 vom 2024-04-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-April/018315.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1875 vom 2024-04-18",
"url": "https://access.redhat.com/errata/RHSA-2024:1875"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1989 vom 2024-04-23",
"url": "https://access.redhat.com/errata/RHSA-2024:1989"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2092 vom 2024-05-01",
"url": "https://access.redhat.com/errata/RHSA-2024:2092"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:2093 vom 2024-05-01",
"url": "https://access.redhat.com/errata/RHSA-2024:2093"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5679 vom 2024-05-03",
"url": "https://lists.debian.org/debian-security-announce/2024/msg00088.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3823 vom 2024-05-27",
"url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html"
}
],
"source_lang": "en-US",
"title": "less: Schwachstelle erm\u00f6glicht Codeausf\u00fchrung",
"tracking": {
"current_release_date": "2024-05-27T22:00:00.000+00:00",
"generator": {
"date": "2024-05-28T08:01:19.904+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2024-0434",
"initial_release_date": "2024-02-20T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-02-20T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-02-27T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-03-04T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-04-02T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-04-03T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-04-07T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2024-04-08T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-04-09T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-04-17T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-04-23T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-01T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-05-05T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2024-05-27T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Debian aufgenommen"
}
],
"status": "final",
"version": "13"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c606",
"product": {
"name": "Open Source less \u003c606",
"product_id": "T032964",
"product_identification_helper": {
"cpe": "cpe:/a:gnu:less:606"
}
}
}
],
"category": "product_name",
"name": "less"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48624",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in less. Diese ist auf eine Anf\u00e4lligkeit f\u00fcr eine Command Injection aufgrund in \"close_altfile()\" zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um beliebigen Programmcode auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646",
"T000126",
"398363",
"T004914",
"T032255"
]
},
"release_date": "2024-02-20T23:00:00Z",
"title": "CVE-2022-48624"
}
]
}
wid-sec-w-2024-1086
Vulnerability from csaf_certbund
Published
2024-05-09 22:00
Modified
2024-05-09 22:00
Summary
IBM QRadar SIEM: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.
Angriff
Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuführen oder einen nicht spezifizierten Angriff auszuführen.
Betroffene Betriebssysteme
- Linux
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting (XSS)-Angriff durchzuf\u00fchren oder einen nicht spezifizierten Angriff auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-1086 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1086.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-1086 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1086"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7150684 vom 2024-05-09",
"url": "https://www.ibm.com/support/pages/node/7150684"
}
],
"source_lang": "en-US",
"title": "IBM QRadar SIEM: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-05-09T22:00:00.000+00:00",
"generator": {
"date": "2024-05-10T10:02:58.886+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2024-1086",
"initial_release_date": "2024-05-09T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-05-09T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 7.5.0 UP8 IF02",
"product": {
"name": "IBM QRadar SIEM \u003c 7.5.0 UP8 IF02",
"product_id": "T034673",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up8_if02"
}
}
}
],
"category": "product_name",
"name": "QRadar SIEM"
}
],
"category": "vendor",
"name": "IBM"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2007-4559",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2007-4559"
},
{
"cve": "CVE-2014-3146",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2014-3146"
},
{
"cve": "CVE-2018-19787",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2018-19787"
},
{
"cve": "CVE-2019-13224",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2019-13224"
},
{
"cve": "CVE-2019-16163",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2019-16163"
},
{
"cve": "CVE-2019-19012",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2019-19012"
},
{
"cve": "CVE-2019-19203",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2019-19203"
},
{
"cve": "CVE-2019-19204",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2019-19204"
},
{
"cve": "CVE-2019-8675",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2019-8675"
},
{
"cve": "CVE-2019-8696",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2019-8696"
},
{
"cve": "CVE-2020-10001",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2020-10001"
},
{
"cve": "CVE-2020-27783",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2020-27783"
},
{
"cve": "CVE-2020-3898",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2020-3898"
},
{
"cve": "CVE-2021-33631",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2021-33631"
},
{
"cve": "CVE-2021-43618",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2021-43618"
},
{
"cve": "CVE-2021-43818",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2021-43818"
},
{
"cve": "CVE-2021-43975",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2021-43975"
},
{
"cve": "CVE-2022-26691",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-26691"
},
{
"cve": "CVE-2022-28388",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-28388"
},
{
"cve": "CVE-2022-3545",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-3545"
},
{
"cve": "CVE-2022-3594",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-3594"
},
{
"cve": "CVE-2022-3640",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-3640"
},
{
"cve": "CVE-2022-36402",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-36402"
},
{
"cve": "CVE-2022-38096",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-38096"
},
{
"cve": "CVE-2022-38457",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-38457"
},
{
"cve": "CVE-2022-40133",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-40133"
},
{
"cve": "CVE-2022-40982",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-40982"
},
{
"cve": "CVE-2022-41858",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-41858"
},
{
"cve": "CVE-2022-42895",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-42895"
},
{
"cve": "CVE-2022-45869",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-45869"
},
{
"cve": "CVE-2022-45884",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-45884"
},
{
"cve": "CVE-2022-45887",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-45887"
},
{
"cve": "CVE-2022-45919",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-45919"
},
{
"cve": "CVE-2022-4744",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-4744"
},
{
"cve": "CVE-2022-48560",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-48560"
},
{
"cve": "CVE-2022-48564",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-48564"
},
{
"cve": "CVE-2022-48624",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2022-48624"
},
{
"cve": "CVE-2023-0458",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-0458"
},
{
"cve": "CVE-2023-0590",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-0590"
},
{
"cve": "CVE-2023-0597",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-0597"
},
{
"cve": "CVE-2023-1073",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1073"
},
{
"cve": "CVE-2023-1074",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1074"
},
{
"cve": "CVE-2023-1075",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1075"
},
{
"cve": "CVE-2023-1079",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1079"
},
{
"cve": "CVE-2023-1118",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1118"
},
{
"cve": "CVE-2023-1192",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1192"
},
{
"cve": "CVE-2023-1206",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1206"
},
{
"cve": "CVE-2023-1252",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1252"
},
{
"cve": "CVE-2023-1382",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1382"
},
{
"cve": "CVE-2023-1786",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1786"
},
{
"cve": "CVE-2023-1838",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1838"
},
{
"cve": "CVE-2023-1855",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1855"
},
{
"cve": "CVE-2023-1989",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1989"
},
{
"cve": "CVE-2023-1998",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-1998"
},
{
"cve": "CVE-2023-20569",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-20569"
},
{
"cve": "CVE-2023-2162",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-2162"
},
{
"cve": "CVE-2023-2163",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-2163"
},
{
"cve": "CVE-2023-2166",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-2166"
},
{
"cve": "CVE-2023-2176",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-2176"
},
{
"cve": "CVE-2023-23455",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-23455"
},
{
"cve": "CVE-2023-2513",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-2513"
},
{
"cve": "CVE-2023-26545",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-26545"
},
{
"cve": "CVE-2023-27043",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-27043"
},
{
"cve": "CVE-2023-28322",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-28322"
},
{
"cve": "CVE-2023-28328",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-28328"
},
{
"cve": "CVE-2023-28772",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-28772"
},
{
"cve": "CVE-2023-30456",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-30456"
},
{
"cve": "CVE-2023-31084",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-31084"
},
{
"cve": "CVE-2023-3138",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3138"
},
{
"cve": "CVE-2023-3141",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3141"
},
{
"cve": "CVE-2023-31436",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-31436"
},
{
"cve": "CVE-2023-3161",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3161"
},
{
"cve": "CVE-2023-3212",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3212"
},
{
"cve": "CVE-2023-32324",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-32324"
},
{
"cve": "CVE-2023-32360",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-32360"
},
{
"cve": "CVE-2023-3268",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3268"
},
{
"cve": "CVE-2023-33203",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-33203"
},
{
"cve": "CVE-2023-33951",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-33951"
},
{
"cve": "CVE-2023-33952",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-33952"
},
{
"cve": "CVE-2023-34241",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-34241"
},
{
"cve": "CVE-2023-35823",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-35823"
},
{
"cve": "CVE-2023-35824",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-35824"
},
{
"cve": "CVE-2023-3609",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3609"
},
{
"cve": "CVE-2023-3611",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3611"
},
{
"cve": "CVE-2023-3772",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3812",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-3812"
},
{
"cve": "CVE-2023-38546",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-38546"
},
{
"cve": "CVE-2023-40283",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-40283"
},
{
"cve": "CVE-2023-4128",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4132",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4132"
},
{
"cve": "CVE-2023-4155",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4155"
},
{
"cve": "CVE-2023-4206",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4206"
},
{
"cve": "CVE-2023-4207",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4207"
},
{
"cve": "CVE-2023-4208",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4208"
},
{
"cve": "CVE-2023-42753",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-42753"
},
{
"cve": "CVE-2023-45862",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-45862"
},
{
"cve": "CVE-2023-45871",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-45871"
},
{
"cve": "CVE-2023-46218",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-46218"
},
{
"cve": "CVE-2023-4622",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4622"
},
{
"cve": "CVE-2023-4623",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4623"
},
{
"cve": "CVE-2023-46813",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-46813"
},
{
"cve": "CVE-2023-4732",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4732"
},
{
"cve": "CVE-2023-4921",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-4921"
},
{
"cve": "CVE-2023-50387",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-50387"
},
{
"cve": "CVE-2023-50868",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-50868"
},
{
"cve": "CVE-2023-51042",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-51042"
},
{
"cve": "CVE-2023-51043",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-51043"
},
{
"cve": "CVE-2023-5178",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-5178"
},
{
"cve": "CVE-2023-52425",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-52425"
},
{
"cve": "CVE-2023-5633",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-5633"
},
{
"cve": "CVE-2023-5717",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-5717"
},
{
"cve": "CVE-2023-6356",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6356"
},
{
"cve": "CVE-2023-6535",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6535"
},
{
"cve": "CVE-2023-6536",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6536"
},
{
"cve": "CVE-2023-6546",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6546"
},
{
"cve": "CVE-2023-6606",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6606"
},
{
"cve": "CVE-2023-6610",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6610"
},
{
"cve": "CVE-2023-6817",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6817"
},
{
"cve": "CVE-2023-6931",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6931"
},
{
"cve": "CVE-2023-6932",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-6932"
},
{
"cve": "CVE-2023-7192",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2023-7192"
},
{
"cve": "CVE-2024-0565",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2024-0565"
},
{
"cve": "CVE-2024-0646",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2024-0646"
},
{
"cve": "CVE-2024-1086",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2024-1086"
},
{
"cve": "CVE-2024-1488",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2024-1488"
},
{
"cve": "CVE-2024-27269",
"notes": [
{
"category": "description",
"text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Diese bestehen in mehreren Komponenten und Subsystemen wie Oniguruma, Python oder dem Linux-Kernel und sind unter anderem auf mehrere sicherheitsrelevante Probleme wie Use-after-free-Verhalten, unsachgem\u00e4\u00dfe Grenzwert\u00fcberpr\u00fcfung oder unsachgem\u00e4\u00dfe Eingabevalidierung zur\u00fcckzuf\u00fchren. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern, einen Cross-Site-Scripting-Angriff (XSS) durchzuf\u00fchren oder einen nicht n\u00e4her spezifizierten Angriff zu starten. Einige dieser Schwachstellen erfordern Benutzerinteraktion, um erfolgreich ausgenutzt zu werden."
}
],
"release_date": "2024-05-09T22:00:00Z",
"title": "CVE-2024-27269"
}
]
}
ghsa-p647-4jrw-p827
Vulnerability from github
Published
2024-02-19 03:30
Modified
2024-06-10 18:30
Details
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
{
"affected": [],
"aliases": [
"CVE-2022-48624"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-19T01:15:48Z",
"severity": null
},
"details": "close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.",
"id": "GHSA-p647-4jrw-p827",
"modified": "2024-06-10T18:30:52Z",
"published": "2024-02-19T03:30:24Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48624"
},
{
"type": "WEB",
"url": "https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144"
},
{
"type": "WEB",
"url": "https://github.com/gwsw/less/compare/v605...v606"
},
{
"type": "WEB",
"url": "https://greenwoodsoftware.com/less"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240605-0010"
}
],
"schema_version": "1.4.0",
"severity": []
}
gsd-2022-48624
Vulnerability from gsd
Modified
2024-02-19 06:00
Details
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
Aliases
{
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-48624"
],
"details": "close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.",
"id": "GSD-2022-48624",
"modified": "2024-02-19T06:00:31.287082Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-48624",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144",
"refsource": "MISC",
"url": "https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144"
},
{
"name": "https://greenwoodsoftware.com/less/",
"refsource": "MISC",
"url": "https://greenwoodsoftware.com/less/"
},
{
"name": "https://github.com/gwsw/less/compare/v605...v606",
"refsource": "MISC",
"url": "https://github.com/gwsw/less/compare/v605...v606"
}
]
}
},
"nvd.nist.gov": {
"cve": {
"descriptions": [
{
"lang": "en",
"value": "close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE."
},
{
"lang": "es",
"value": "close_altfile en filename.c en less antes de 606 omite las llamadas shell_quote para LESSCLOSE."
}
],
"id": "CVE-2022-48624",
"lastModified": "2024-02-20T19:50:53.960",
"metrics": {},
"published": "2024-02-19T01:15:48.643",
"references": [
{
"source": "cve@mitre.org",
"url": "https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144"
},
{
"source": "cve@mitre.org",
"url": "https://github.com/gwsw/less/compare/v605...v606"
},
{
"source": "cve@mitre.org",
"url": "https://greenwoodsoftware.com/less/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Awaiting Analysis"
}
}
}
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.