csaf_redhat - rhsa-2020

rhsa-2020_5149

Vulnerability from csaf_redhat

Published

2020-11-18 15:05

Modified

2024-12-17 21:12

Summary

Red Hat Security Advisory: Release of OpenShift Serverless 1.11.0

Notes

Topic

Release of OpenShift Serverless 1.11.0

Details

Red Hat OpenShift Serverless 1.11.0 is a generally available release of the OpenShift Serverless Operator. This version of the OpenShift Serverless Operator is supported on Red Hat OpenShift Container Platform version 4.6. Security Fix(es): * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040) For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Release of OpenShift Serverless 1.11.0",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat OpenShift Serverless 1.11.0 is a generally available release of the\nOpenShift Serverless Operator. This version of the OpenShift Serverless\nOperator is supported on Red Hat OpenShift Container Platform version 4.6.\n\nSecurity Fix(es): \n * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, and other related information, see the CVE page(s) listed in the\nReferences section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:5149",
        "url": "https://access.redhat.com/errata/RHSA-2020:5149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index",
        "url": "https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index"
      },
      {
        "category": "external",
        "summary": "1853652",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853652"
      },
      {
        "category": "external",
        "summary": "1889831",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889831"
      },
      {
        "category": "external",
        "summary": "1889833",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889833"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5149.json"
      }
    ],
    "title": "Red Hat Security Advisory: Release of OpenShift Serverless 1.11.0",
    "tracking": {
      "current_release_date": "2024-12-17T21:12:50+00:00",
      "generator": {
        "date": "2024-12-17T21:12:50+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2020:5149",
      "initial_release_date": "2020-11-18T15:05:44+00:00",
      "revision_history": [
        {
          "date": "2020-11-18T15:05:44+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-11-18T15:05:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-17T21:12:50+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Openshift Serverless 1.11",
                "product": {
                  "name": "Openshift Serverless 1.11",
                  "product_id": "8Base-Openshift-Serverless-1.11",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:serverless:1.11::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Serverless"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64",
                "product": {
                  "name": "openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64",
                  "product_id": "openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/client-kn-rhel8\u0026tag=0.17.3-2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64",
                  "product_id": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64",
                  "product_id": "openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-controller-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64",
                  "product_id": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-in-memory-channel-controller-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64",
                  "product_id": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtbroker-filter-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtbroker-ingress-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtchannel-broker-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64",
                  "product_id": "openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-mtping-rhel8\u0026tag=0.17.2-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64",
                  "product_id": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-storage-version-migration-rhel8\u0026tag=0.17.2-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64",
                  "product_id": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-sugar-controller-rhel8\u0026tag=0.17.2-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64",
                "product": {
                  "name": "openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64",
                  "product_id": "openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/eventing-webhook-rhel8\u0026tag=0.17.2-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64",
                "product": {
                  "name": "openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64",
                  "product_id": "openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/ingress-rhel8-operator\u0026tag=1.11.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64",
                "product": {
                  "name": "openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64",
                  "product_id": "openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/knative-rhel8-operator\u0026tag=1.11.0-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64",
                "product": {
                  "name": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64",
                  "product_id": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/kn-cli-artifacts-rhel8\u0026tag=0.17.3-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64",
                "product": {
                  "name": "openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64",
                  "product_id": "openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/kourier-control-rhel8\u0026tag=0.17.0-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64",
                "product": {
                  "name": "openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64",
                  "product_id": "openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/svls-must-gather-rhel8\u0026tag=1.11.0-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64",
                "product": {
                  "name": "openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64",
                  "product_id": "openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serverless-operator-bundle\u0026tag=1.11.0-9"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64",
                "product": {
                  "name": "openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64",
                  "product_id": "openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serverless-rhel8-operator\u0026tag=1.11.0-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64",
                  "product_id": "openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-activator-rhel8\u0026tag=0.17.3-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64",
                  "product_id": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-autoscaler-hpa-rhel8\u0026tag=0.17.3-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64",
                  "product_id": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-autoscaler-rhel8\u0026tag=0.17.3-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64",
                  "product_id": "openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-controller-rhel8\u0026tag=0.17.3-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64",
                  "product_id": "openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-queue-rhel8\u0026tag=0.17.3-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64",
                  "product_id": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-storage-version-migration-rhel8\u0026tag=0.17.3-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64",
                "product": {
                  "name": "openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64",
                  "product_id": "openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-serverless-1/serving-webhook-rhel8\u0026tag=0.17.3-4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64"
        },
        "product_reference": "openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64"
        },
        "product_reference": "openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64"
        },
        "product_reference": "openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64"
        },
        "product_reference": "openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64"
        },
        "product_reference": "openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64"
        },
        "product_reference": "openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64"
        },
        "product_reference": "openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64"
        },
        "product_reference": "openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64"
        },
        "product_reference": "openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64 as a component of Openshift Serverless 1.11",
          "product_id": "8Base-Openshift-Serverless-1.11:openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64"
        },
        "product_reference": "openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64",
        "relates_to_product_reference": "8Base-Openshift-Serverless-1.11"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-14040",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2020-06-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1853652"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vulnerability. If an attacker is able to supply specific characters or strings to the vulnerable application, there is the potential to cause an infinite loop to occur using more memory, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "* OpenShift ServiceMesh (OSSM) 1.0 is Out Of Support Scope (OOSS) for Moderate and Low impact vulnerabilities. Jaeger was packaged with ServiceMesh in 1.0, and hence is also marked OOSS, but the Jaeger-Operator is a standalone product and is affected by this vulnerability.\n\n* Because Service Telemetry Framework does not directly use unicode.UTF16, no update will be provided at this time for STF\u0027s sg-core-container.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64",
          "8Base-Openshift-Serverless-1.11:openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-14040"
        },
        {
          "category": "external",
          "summary": "RHBZ#1853652",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853652"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-14040",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-14040"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14040",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14040"
        },
        {
          "category": "external",
          "summary": "https://github.com/golang/go/issues/39491",
          "url": "https://github.com/golang/go/issues/39491"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0"
        }
      ],
      "release_date": "2020-06-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-11-18T15:05:44+00:00",
          "details": "See the documentation at:\nhttps://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index",
          "product_ids": [
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:5149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/client-kn-rhel8@sha256:3f419d56adb6a1f5bb43af9989b895943802b54c59d0d46bda7aeb10437c9631_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:913b0faa0044367c6a799a85e7a019374ef893e0725633a9a0613191aa0acdd2_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-controller-rhel8@sha256:ddc51429006713cddea6c8974bc6495e7b89cd32f547e9cc5886d51a61c73b30_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:ad36e4c0090437423b6aedcd810c8081147f4bb97de39feba6e236054bd17a45_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:30f8927c02c8c1f60e77a85653900c072cb20df8062ad5a784231b2dfd606f57_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:855d7eec56b54f50965c992bc18a1afbcdf1daf5e0513503bf703de53131cddd_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:112b46af6fe8cf4e162f33342a4f3e562b6a8e81b312b9305fdbaadf80d2a7db_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:aa142fde5cef75a217f5ce9e48d81550ad41d887c2bd57b2cae3ef82b4ff85f9_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-mtping-rhel8@sha256:77884d76bada6ea22c4e5c98a44e4efae764fc47794b1225bebb34a871727e64_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:2cbc0c20433683576afa61a70202655faf2281c421f0450044757d4b1c9078b4_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:ce65adf0b085be1498cd5cbaf257407d2bb006b21021bfc6b2a9bc098ced1a39_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/eventing-webhook-rhel8@sha256:b5af285977dc8af83aa013fb5b3c71a7a1eb022b2d27aa949c733d483099a810_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/ingress-rhel8-operator@sha256:1e4f1a32bf697f0b0905ac6d2f990b0eb64e60c8bdc46f78ec5f94e533907e92_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:96cc3479579df33c38d64bd923c00b22157e995e6a0c067909398ad98eb64137_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/knative-rhel8-operator@sha256:3240a12f01ad882161271d1574e0f65abfa06f3e4f080e5b23bd4216dc62c1f1_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/kourier-control-rhel8@sha256:58cd8778349c972b353ffb7f3002a68e4ba6bad71b7c17b362bd83439f8a965b_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-operator-bundle@sha256:781665631ab00e0c1a68b932624d84da76b65e3f140cb6561084ce7b5d0b68ca_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serverless-rhel8-operator@sha256:f39ddbf71cad46501520e0ca4f8424d9526bdf9a699fd8a2fb14331a90730ee5_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-activator-rhel8@sha256:7f159de460cfecf94cbbe6326c1dfc2a567ab1843c97d7df02c7237317908b9f_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:ca5a50fbcb4c981de9bea8449961b42d94e5d8cfe9638b2afce895751a03c8f0_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-autoscaler-rhel8@sha256:eb3bcf8ee5743890db8924d723869867f33647c9f0ce689ebb7e13f8768b9267_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-controller-rhel8@sha256:c2a5d1b0fb2d88c246829aff46702999e6c47c5d4d72769718c72906b68a85dc_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-queue-rhel8@sha256:89e5e58ce2c9b553cf21852b12a581cf15fe6be6473a195edd3d04858cbc1e5f_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:4db39d5500d77f8c40e0eea8a935709d3c8d95dce40bd51cd1b0941623246b97_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/serving-webhook-rhel8@sha256:3f8bea5650528bdfe5f9a548a2bdf2ef64e5dec69cff75f84dc398b01cae750d_amd64",
            "8Base-Openshift-Serverless-1.11:openshift-serverless-1/svls-must-gather-rhel8@sha256:7ae2a473ba0d39177175d647de95576405484ca0c4844d25a6ea887bf0c30477_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash"
    }
  ]
}

cve-2020-14040

Vulnerability from cvelistv5

Published

2020-06-17 19:22

Modified

2024-08-04 12:32

Severity ?

Summary

The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String.

References

▼	URL	Tags
	https://groups.google.com/forum/#%21topic/golang-announce/bXVeAmGOqz0	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/	vendor-advisory, x_refsource_FEDORA

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T12:32:14.681Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/forum/#%21topic/golang-announce/bXVeAmGOqz0"
          },
          {
            "name": "FEDORA-2020-a55f130272",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-07T18:06:10",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/forum/#%21topic/golang-announce/bXVeAmGOqz0"
        },
        {
          "name": "FEDORA-2020-a55f130272",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-14040",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an infinite loop if the String function on the Decoder is called, or the Decoder is passed to golang.org/x/text/transform.String."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0",
              "refsource": "MISC",
              "url": "https://groups.google.com/forum/#!topic/golang-announce/bXVeAmGOqz0"
            },
            {
              "name": "FEDORA-2020-a55f130272",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-14040",
    "datePublished": "2020-06-17T19:22:31",
    "dateReserved": "2020-06-12T00:00:00",
    "dateUpdated": "2024-08-04T12:32:14.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted