RHBA-2024:3778
Vulnerability from csaf_redhat - Published: 2024-06-10 16:00 - Updated: 2026-08-07 12:42Summary
Red Hat Bug Fix Advisory: LVMS 4.13.7 Bug Fix Update
Severity
Moderate
Notes
Topic: Updated container images that fix multiple bugs are now available for LVMS
4.13
Details: Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to
dynamically provision thin and thick local storage on a cluster with
limited resources.
Users of LVMS are advised to upgrade to the latest version of LVMS in
OpenShift Container Platform, which fixes bugs and security
vulnerabilities.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was discovered in Go's net/http standard library package. When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.
5.3 (Medium)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go's crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert.
5.9 (Medium)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
22 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated container images that fix multiple bugs are now available for LVMS\n4.13",
"title": "Topic"
},
{
"category": "general",
"text": "Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to\ndynamically provision thin and thick local storage on a cluster with\nlimited resources.\n\nUsers of LVMS are advised to upgrade to the latest version of LVMS in\nOpenShift Container Platform, which fixes bugs and security\nvulnerabilities.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2024:3778",
"url": "https://access.redhat.com/errata/RHBA-2024:3778"
},
{
"category": "external",
"summary": "OCPBUGS-33086",
"url": "https://issues.redhat.com/browse/OCPBUGS-33086"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_3778.json"
}
],
"title": "Red Hat Bug Fix Advisory: LVMS 4.13.7 Bug Fix Update",
"tracking": {
"current_release_date": "2026-08-07T12:42:31+00:00",
"generator": {
"date": "2026-08-07T12:42:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHBA-2024:3778",
"initial_release_date": "2024-06-10T16:00:00+00:00",
"revision_history": [
{
"date": "2024-06-10T16:00:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-06-10T16:00:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-07T12:42:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "LVMS 4.13 for RHEL 8",
"product": {
"name": "LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:lvms:4.13::el8"
}
}
}
],
"category": "product_family",
"name": "logical volume manager storage"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.7-8"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"product_id": "lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.7-6"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"product_id": "lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.7-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"product_id": "lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a?arch=arm64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.7-5"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.7-8"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"product_id": "lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.7-6"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"product_id": "lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.7-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64",
"product_id": "lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47?arch=amd64\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.7-5"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.7-8"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"product_id": "lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.7-6"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"product_id": "lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.7-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"product_id": "lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f?arch=ppc64le\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.7-5"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"product": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"product_id": "lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-must-gather-rhel8\u0026tag=v4.13.7-8"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"product": {
"name": "lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"product_id": "lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-operator-bundle\u0026tag=v4.13.7-6"
}
}
},
{
"category": "product_version",
"name": "lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"product": {
"name": "lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"product_id": "lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/lvms-rhel8-operator\u0026tag=v4.13.7-7"
}
}
},
{
"category": "product_version",
"name": "lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"product": {
"name": "lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"product_id": "lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"product_identification_helper": {
"purl": "pkg:oci/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169?arch=s390x\u0026repository_url=registry.redhat.io/lvms4/topolvm-rhel8\u0026tag=v4.13.7-5"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64"
},
"product_reference": "lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le"
},
"product_reference": "lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64"
},
"product_reference": "lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"relates_to_product_reference": "8Base-LVMS-4.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64 as a component of LVMS 4.13 for RHEL 8",
"product_id": "8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
},
"product_reference": "lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64",
"relates_to_product_reference": "8Base-LVMS-4.13"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45290",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268017"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in Go\u0027s net/http standard library package. When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45290"
},
{
"category": "external",
"summary": "RHBZ#2268017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268017"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45290",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45290"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4",
"url": "http://www.openwall.com/lists/oss-security/2024/03/08/4"
},
{
"category": "external",
"summary": "https://go.dev/cl/569341",
"url": "https://go.dev/cl/569341"
},
{
"category": "external",
"summary": "https://go.dev/issue/65383",
"url": "https://go.dev/issue/65383"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
"url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2599",
"url": "https://pkg.go.dev/vuln/GO-2024-2599"
},
{
"category": "external",
"summary": "https://security.netapp.com/advisory/ntap-20240329-0004",
"url": "https://security.netapp.com/advisory/ntap-20240329-0004"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-10T16:00:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2024:3778"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm"
},
{
"cve": "CVE-2024-24783",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268019"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24783"
},
{
"category": "external",
"summary": "RHBZ#2268019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268019"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24783",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4",
"url": "http://www.openwall.com/lists/oss-security/2024/03/08/4"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp",
"url": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp"
},
{
"category": "external",
"summary": "https://go.dev/cl/569339",
"url": "https://go.dev/cl/569339"
},
{
"category": "external",
"summary": "https://go.dev/issue/65390",
"url": "https://go.dev/issue/65390"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
"url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2598",
"url": "https://pkg.go.dev/vuln/GO-2024-2598"
},
{
"category": "external",
"summary": "https://security.netapp.com/advisory/ntap-20240329-0005",
"url": "https://security.netapp.com/advisory/ntap-20240329-0005"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-06-10T16:00:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2024:3778"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7729e2a6e0200218d398c81328a909575b32eb7ddc05f28db19d108bcf7f1dae_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:7f550aabc5045192f2a376cea542a3f7af4f91ae38ec92cc88087424c969e79a_s390x",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:b48d244af8d297034cd369bd5030ffce1337c773843faf96a33e08216191afb1_arm64",
"8Base-LVMS-4.13:lvms4/lvms-must-gather-rhel8@sha256:c267a14958a453fe560fda80e513a45e317b1f659e9a95e2806a02352a8146a0_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:16956b691a4962411aa3ba9994c8cc5de7b25c9209801f36b64df5fce6f1c4b2_s390x",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:1cab118b2306a363ec45619b32a104475307b49f6c85f28ca2755193bb33f27f_amd64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:a9da6a7fc468692a0e88927661d04bf0387f502ecdce3142687a2512c80fb26a_arm64",
"8Base-LVMS-4.13:lvms4/lvms-operator-bundle@sha256:b5654e5f8135060d40949758bd115941087f8944ee6db208c401b83913f2c9c3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:3e9350e4929af4869fc1ad2d8a86de45b17d65dc2908b86bc35e4b8fff2620a3_ppc64le",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:5fa67415c5a9c2cb0738c8f675de18bc9af66b99d37f3c9a748f579af89b4e89_amd64",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:6519363c9c198eab1ed7cae058235441f026628daac0c11db33850fcbf020e6c_s390x",
"8Base-LVMS-4.13:lvms4/lvms-rhel8-operator@sha256:e613632e80317068727cc0a0307ef13dfe2ceccf9d2526bbe8d192ddecf53ca1_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:22aed966d91e2f76c1f5b25edabbc87a1ea9b00fb6f0c5cb23873c5cd992b15a_arm64",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:28da801bfedbfdc14b8bbac0990361308f79c0982c8650e9e8d79937c4bab169_s390x",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:8ea239033fc9ae277687b2fd536b64969e77fd4424d61abdab253f9e3c920d9f_ppc64le",
"8Base-LVMS-4.13:lvms4/topolvm-rhel8@sha256:938bdf0178f4bcadc6d7f2c483c5f472746212e88248445c6ceb53aa9341be47_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…