rhsa-2021_2374
Vulnerability from csaf_redhat
Published
2021-06-14 14:45
Modified
2024-11-13 23:28
Summary
Red Hat Security Advisory: Openshift Logging Bug Fix Release (5.0.5)
Notes
Topic
Openshift Logging Bug Fix Release (5.0.5)
This release includes a security update.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
Openshift Logging Bug Fix Release (5.0.5)
Security Fix(es):
* gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index
validation (CVE-2021-3121)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Openshift Logging Bug Fix Release (5.0.5)\nThis release includes a security update.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Openshift Logging Bug Fix Release (5.0.5)\n\nSecurity Fix(es):\n\n* gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index\nvalidation (CVE-2021-3121)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:2374", "url": "https://access.redhat.com/errata/RHSA-2021:2374" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1921650", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1921650" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2374.json" } ], "title": "Red Hat Security Advisory: Openshift Logging Bug Fix Release (5.0.5)", "tracking": { "current_release_date": "2024-11-13T23:28:58+00:00", "generator": { "date": "2024-11-13T23:28:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2021:2374", "initial_release_date": "2021-06-14T14:45:18+00:00", "revision_history": [ { "date": "2021-06-14T14:45:18+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-06-14T14:45:18+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-13T23:28:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "OpenShift Logging 5.0", "product": { "name": "OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:logging:5.0::el8" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x", "product": { "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x", "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.0.5-6" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x", "product": { "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x", "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x", "product_identification_helper": { "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.0.5-4" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x", "product": { "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x", "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x", "product_identification_helper": { "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x", "product": { "name": "openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x", "product_id": "openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x", "product_identification_helper": { "purl": "pkg:oci/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x", "product": { "name": "openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x", "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x", "product_identification_helper": { "purl": "pkg:oci/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x", "product": { "name": "openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x", "product_id": "openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x", "product_identification_helper": { "purl": "pkg:oci/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v5.0.5-6" } } }, { "category": "product_version", "name": "openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x", "product": { "name": "openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x", "product_id": "openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x", "product_identification_helper": { "purl": "pkg:oci/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x", "product": { "name": "openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x", "product_id": "openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x", "product_identification_helper": { "purl": "pkg:oci/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v5.0.5-3" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64", "product": { "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64", "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.0.5-6" } } }, { "category": "product_version", "name": "openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64", "product": { "name": "openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64", "product_id": "openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=v5.0.5-11" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64", "product": { "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64", "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64", "product_identification_helper": { "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.0.5-4" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64", "product": { "name": "openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64", "product_id": "openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64", "product_identification_helper": { "purl": "pkg:oci/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-operator-bundle\u0026tag=v5.0.5-11" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64", "product": { "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64", "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64", "product_identification_helper": { "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64", "product": { "name": "openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64", "product_id": "openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64", "product_identification_helper": { "purl": "pkg:oci/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64", "product": { "name": "openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64", "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64", "product_identification_helper": { "purl": "pkg:oci/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64", "product": { "name": "openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64", "product_id": "openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64", "product_identification_helper": { "purl": "pkg:oci/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v5.0.5-6" } } }, { "category": "product_version", "name": "openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64", "product": { "name": "openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64", "product_id": "openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64", "product_identification_helper": { "purl": "pkg:oci/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64", "product": { "name": "openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64", "product_id": "openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64", "product_identification_helper": { "purl": "pkg:oci/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v5.0.5-3" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le", "product": { "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le", "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le", "product_identification_helper": { "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.0.5-6" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le", "product": { "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le", "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le", "product_identification_helper": { "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.0.5-4" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le", "product": { "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le", "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le", "product_identification_helper": { "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le", "product": { "name": "openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le", "product_id": "openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le", "product_identification_helper": { "purl": "pkg:oci/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le", "product": { "name": "openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le", "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le", "product_identification_helper": { "purl": "pkg:oci/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le", "product": { "name": "openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le", "product_id": "openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le", "product_identification_helper": { "purl": "pkg:oci/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v5.0.5-6" } } }, { "category": "product_version", "name": "openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le", "product": { "name": "openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le", "product_id": "openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le", "product_identification_helper": { "purl": "pkg:oci/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v5.0.5-5" } } }, { "category": "product_version", "name": "openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le", "product": { "name": "openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le", "product_id": "openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le", "product_identification_helper": { "purl": "pkg:oci/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v5.0.5-3" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64" }, "product_reference": "openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x" }, "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64" }, "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le" }, "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64" }, "product_reference": "openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x" }, "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le" }, "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64" }, "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64" }, "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x" }, "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le" }, "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64" }, "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le" }, "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x" }, "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64" }, "product_reference": "openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x" }, "product_reference": "openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le" }, "product_reference": "openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64" }, "product_reference": "openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le" }, "product_reference": "openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x" }, "product_reference": "openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x" }, "product_reference": "openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le" }, "product_reference": "openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64" }, "product_reference": "openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64 as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64" }, "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le" }, "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x as a component of OpenShift Logging 5.0", "product_id": "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x" }, "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x", "relates_to_product_reference": "8Base-OSE-LOGGING-5.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-3121", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "discovery_date": "2021-01-28T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1921650" } ], "notes": [ { "category": "description", "text": "A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this vulnerability is to availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation", "title": "Vulnerability summary" }, { "category": "other", "text": "OpenShift Container Platform (OCP), OpenShift ServiceMesh (OSSM) and Red Hat OpenShift Jaeger (RHOSJ) all include code generated by github.com/gogo/protobuf to parse protobuf messages. However, no component is known to accept protobuf messages from unauthenticated sources, hence this vulnerability is rated Moderate for OCP, OSSM and RHOSJ.\n\nOpenShift Virtualization includes code generated by github.com/gogo/protobuf to parse protobuf messages. However, no component of OpenShift Virtualization is known to accept protobuf messages from unauthenticated sources, hence this vulnerability is rated Moderate.\n\nRed Hat Advanced Cluster Management for Kubernetes (RHACM) includes code generated by github.com/gogo/protobuf to parse protobuf messages. However, no RHACM component is accepting protobuf messages from unauthenticated sources and are used with a limited scope, hence this vulnerability is rated Moderate for RHACM.\n\nRed Hat Cluster Application Migration (CAM) includes code generated by github.com/gogo/protobuf to parse protobuf messages. However, no CAM component is known to accept protobuf messages from unauthenticated sources, hence this vulnerability is rated Moderate for CAM.\n\nCryostat-2 is affected as it does ship gogo/protobuf library with it\u0027s distribution but the only use for Protobuf would be the Kubernetes/OpenShift API server the operator communicates with and it should be authenticated hence it is affected with Moderate impact.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le" ], "known_not_affected": [ "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-operator-bundle@sha256:297a7e9b2a36541534838bafa19368e5f4cd7adc4bfd1ab140d39d7dd2647948_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:7685c68bd4f75babc49bdc21355a76783a0d491ea822f0e8e18196782d1d853b_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:94154e0a801f1fae1cfa066d54d25f0c4c546f90d0dc046a82686baf86c42e74_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/cluster-logging-rhel8-operator@sha256:ccb22284e690d0dbb0af40284280e7b00158d033d9287bfae450bf984255c8b3_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-operator-bundle@sha256:1a6b4f1be227f571759f876db9bc36b666fe68a483a13f528d0320049f6ee901_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:0ac9d89768328ce1ccd84a4990ec3d9d60ecb24fc66768bcfc9f339dbc638d56_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:4e84688f238acf5e825755ca7cd207be5acdfb32b5170d953b28f701e91e90ba_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch6-rhel8@sha256:71ded2f1e101f2923c69674539315b451a8681ab57e5abd0a229f92e20994beb_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:0456624422a8650cee6c8de543fbd7f1530d6da6b50d99092d39234fa0458dd1_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:bf864441bb68d14f15664c65faaaee903e786029ee68ead6ebda8cb203238965_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/fluentd-rhel8@sha256:d8efc65639a2a842ee680a578114cfb922983560decb55c0bdd13a7bc74372b8_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:afe3b06d108fbc97146c41d197c8cddf228b09c8bd57ebec2ee51a58947e3841_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:b75c70b35c82c16de7601a33279015eeba7761ebb711ec06d69b78ad8149e805_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/kibana6-rhel8@sha256:eda620237ee7a618c3860a0ad0e324f5cbceab9b34cc9459d94fbaa5ae230058_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:0e6c825a9293da7a08bb5b5a3392180538b5ab2061dee71cbbe30cd2aa2489f1_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:50ccadbd384309168c7a206589999290996a718ccd14a215ad8d4af20981cbe5_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/logging-curator5-rhel8@sha256:a6dc03375da21d1ed813f37c7f771239158a57dc58a390de8d98386feabfe993_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3121" }, { "category": "external", "summary": "RHBZ#1921650", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1921650" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3121", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3121" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3121", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3121" } ], "release_date": "2021-01-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-06-14T14:45:18+00:00", "details": "For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html\n\nFor Red Hat OpenShift Logging 5.0, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html", "product_ids": [ "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:2374" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:1dd810b5075962e53770270445ff4c662fbf6a0a3715ef0be3871f273918ad67_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:2943ccb31270125c9b10d192ed04d8a12c03d0e7f6fcada6a709db3875b8cef9_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-proxy-rhel8@sha256:30ec4fd6183546eb21aa127141d14ed00803ae0146b72574dfda15bffb415bf9_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:58bbef34524a297c0c05e90e2dd83dd85c2dd6bdd5336de5d9df4144a87ec303_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:b9c66020f8f7e18576b584198d184b2eb7f9b071005148b6e9bad733f55c48a5_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/elasticsearch-rhel8-operator@sha256:c31a1ac738f6e92e263b5ade3b621ecd11d38aaf0c2214919ab94acb1bb6321f_ppc64le", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:2b44bfc85dee9ef15572882dd2eb370ffc11000779403196f958cb0e1d80cdf7_amd64", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:8574980309e3da1d1246c9158fe0d85e5a3ec1f6496e9f8c1779bd36d18d68a6_s390x", "8Base-OSE-LOGGING-5.0:openshift-logging/eventrouter-rhel8@sha256:9021aa06db8e33c1aae2c0077f25e86c03e31f52a0cfd2500b1eaf3fb40446b2_ppc64le" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation" } ] }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.