rhsa-2022_0044
Vulnerability from csaf_redhat
Published
2022-01-10 07:28
Modified
2024-11-15 10:43
Summary
Red Hat Security Advisory: Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.2)

Notes

Topic
An update is now available for OpenShift Logging (5.3.2) Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenShift Logging Bug Fix Release (5.3.2) Security Fix(es): * rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327) * log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern (CVE-2021-45105) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for OpenShift Logging (5.3.2)\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Logging Bug Fix Release (5.3.2)\n\nSecurity Fix(es):\n\n* rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source (CVE-2020-36327)\n\n* log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern (CVE-2021-45105)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0044",
        "url": "https://access.redhat.com/errata/RHSA-2022:0044"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1958999",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1958999"
      },
      {
        "category": "external",
        "summary": "2034067",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034067"
      },
      {
        "category": "external",
        "summary": "LOG-1975",
        "url": "https://issues.redhat.com/browse/LOG-1975"
      },
      {
        "category": "external",
        "summary": "LOG-2046",
        "url": "https://issues.redhat.com/browse/LOG-2046"
      },
      {
        "category": "external",
        "summary": "LOG-2051",
        "url": "https://issues.redhat.com/browse/LOG-2051"
      },
      {
        "category": "external",
        "summary": "LOG-2074",
        "url": "https://issues.redhat.com/browse/LOG-2074"
      },
      {
        "category": "external",
        "summary": "LOG-2088",
        "url": "https://issues.redhat.com/browse/LOG-2088"
      },
      {
        "category": "external",
        "summary": "LOG-2110",
        "url": "https://issues.redhat.com/browse/LOG-2110"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0044.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.2)",
    "tracking": {
      "current_release_date": "2024-11-15T10:43:35+00:00",
      "generator": {
        "date": "2024-11-15T10:43:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2022:0044",
      "initial_release_date": "2022-01-10T07:28:57+00:00",
      "revision_history": [
        {
          "date": "2022-01-10T07:28:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-01-10T07:28:57+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-15T10:43:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "OpenShift Logging 5.3",
                "product": {
                  "name": "OpenShift Logging 5.3",
                  "product_id": "8Base-OSE-LOGGING-5.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:logging:5.3::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64",
                "product": {
                  "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64",
                  "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.3.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64",
                "product": {
                  "name": "openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64",
                  "product_id": "openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=v5.3.2-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64",
                  "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.3.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64",
                  "product_id": "openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-operator-bundle\u0026tag=v5.3.2-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64",
                  "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-89"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64",
                "product": {
                  "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64",
                  "product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.0.0-59"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64",
                "product": {
                  "name": "openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64",
                  "product_id": "openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-61"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
                "product": {
                  "name": "openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
                  "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64",
                "product": {
                  "name": "openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64",
                  "product_id": "openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.3.0-83"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64",
                "product": {
                  "name": "openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64",
                  "product_id": "openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.7.4-89"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64",
                "product": {
                  "name": "openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64",
                  "product_id": "openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-95"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le",
                "product": {
                  "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le",
                  "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.3.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le",
                "product": {
                  "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le",
                  "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.3.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le",
                "product": {
                  "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le",
                  "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-89"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le",
                "product": {
                  "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le",
                  "product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.0.0-59"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le",
                "product": {
                  "name": "openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le",
                  "product_id": "openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-61"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
                "product": {
                  "name": "openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
                  "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le",
                "product": {
                  "name": "openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le",
                  "product_id": "openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.3.0-83"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le",
                "product": {
                  "name": "openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le",
                  "product_id": "openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.7.4-89"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le",
                "product": {
                  "name": "openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le",
                  "product_id": "openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-95"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x",
                "product": {
                  "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x",
                  "product_id": "openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator\u0026tag=v5.3.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x",
                "product": {
                  "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x",
                  "product_id": "openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-rhel8-operator\u0026tag=v5.3.2-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x",
                "product": {
                  "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x",
                  "product_id": "openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch-proxy-rhel8\u0026tag=v1.0.0-89"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x",
                "product": {
                  "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x",
                  "product_id": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel8\u0026tag=v1.0.0-59"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x",
                "product": {
                  "name": "openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x",
                  "product_id": "openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-curator5-rhel8\u0026tag=v5.8.1-61"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x",
                "product": {
                  "name": "openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x",
                  "product_id": "openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/elasticsearch6-rhel8\u0026tag=v6.8.1-84"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x",
                "product": {
                  "name": "openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x",
                  "product_id": "openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel8\u0026tag=v0.3.0-83"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x",
                "product": {
                  "name": "openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x",
                  "product_id": "openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel8\u0026tag=v1.7.4-89"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x",
                "product": {
                  "name": "openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x",
                  "product_id": "openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/kibana6-rhel8\u0026tag=v6.8.1-95"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64"
        },
        "product_reference": "openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le"
        },
        "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64"
        },
        "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x"
        },
        "product_reference": "openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le"
        },
        "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x"
        },
        "product_reference": "openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le"
        },
        "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x"
        },
        "product_reference": "openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64"
        },
        "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le"
        },
        "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x"
        },
        "product_reference": "openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le"
        },
        "product_reference": "openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64"
        },
        "product_reference": "openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x"
        },
        "product_reference": "openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x"
        },
        "product_reference": "openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64"
        },
        "product_reference": "openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le"
        },
        "product_reference": "openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64"
        },
        "product_reference": "openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le"
        },
        "product_reference": "openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x"
        },
        "product_reference": "openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x"
        },
        "product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le"
        },
        "product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64"
        },
        "product_reference": "openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x"
        },
        "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le"
        },
        "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64 as a component of OpenShift Logging 5.3",
          "product_id": "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64"
        },
        "product_reference": "openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64",
        "relates_to_product_reference": "8Base-OSE-LOGGING-5.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-45105",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2021-12-19T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034067"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input data can craft malicious input data that contains a recursive lookup and can cause Denial of Service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has performed an analysis of this flaw and has classified the Attack Complexity(AC) as High because there are multiple factors involved which are beyond attacker\u0027s control:\n\n- The application has to use the logging configuration using a Context Map Lookup (for example, $${ctx:loginId}) which is a non-default Pattern Layout.\n- The application developer has to use the map org.apache.logging.log4j.ThreadContext in the application code and save at-least one key (for example, ThreadContext.put(\"loginId\", \"myId\");) in the ThreadContext map object.\n- Attackers must also know this saved key name in order to exploit this flaw.\n\nNote that saving keys in this map is a non-essential usage of log4j and just an optional feature provided. Refer to https://logging.apache.org/log4j/2.x/manual/lookups.html#ContextMapLookup to know more about the Context Map Lookup feature of Log4j.\n\nLog4j 1.x is not impacted by this vulnerability. Note that only the log4j-core JAR file is impacted by this vulnerability. Applications using ONLY the log4j-api JAR file without the log4j-core JAR file are NOT impacted by this vulnerability.\n\n\nDespite including a vulnerable version of Log4j 2.x, this vulnerability is not exploitable in Elasticsearch[0], as shipped in OpenShift Container Platform and OpenShift Logging. OpenShift 3.11 specifically does not contain any context lookups:\n\nhttps://github.com/openshift/openshift-ansible/blob/release-3.11/roles/openshift_logging_elasticsearch/templates/log4j2.properties.j2\n\nThis vulnerability is therefore rated Low for Elasticsearch in OpenShift Container Platform and OpenShift Logging.\n\n[0] https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476#update-december-18-4",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x"
        ],
        "known_not_affected": [
          "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64",
          "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x",
          "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le",
          "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-45105"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034067",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034067"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-45105",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-45105"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-45105",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45105"
        },
        {
          "category": "external",
          "summary": "https://issues.apache.org/jira/browse/LOG4J2-3230",
          "url": "https://issues.apache.org/jira/browse/LOG4J2-3230"
        },
        {
          "category": "external",
          "summary": "https://logging.apache.org/log4j/2.x/security.html",
          "url": "https://logging.apache.org/log4j/2.x/security.html"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2021/12/19/1",
          "url": "https://www.openwall.com/lists/oss-security/2021/12/19/1"
        }
      ],
      "release_date": "2021-12-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-01-10T07:28:57+00:00",
          "details": "For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html\n\nFor Red Hat OpenShift Logging 5.3, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html",
          "product_ids": [
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0044"
        },
        {
          "category": "workaround",
          "details": "For Log4j 2 versions up to and including 2.16.0, this flaw can be mitigated by:\n- In PatternLayout in the Log4j logging configuration, replace Context Lookups like ${ctx:loginId} or $${ctx:loginId} with Thread Context Map patterns (%X, %mdc, or %MDC) like %X{loginId}.\n- Otherwise, in the Log4j logging configuration, remove references to Context Lookups like ${ctx:loginId} or $${ctx:loginId} where they originate from sources external to the application such as HTTP headers or user input.",
          "product_ids": [
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-operator-bundle@sha256:01a657ad4ab264e03ad1610dcadc81a51b748fdb1da0b0e46c654d143e2015a4_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3290bdf452a8f12350dee6507514de4f5c53f8954dd94187d6fda1aaf82f6f70_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:3aa8b24cb2d0475ef7a9e58444efb47a175807b59120f52d879cb32a2ffe5d5e_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/cluster-logging-rhel8-operator@sha256:9b60cec9c2b4261e2191b52f5b592e00a12858471f9490e4ccc15725d3ec2318_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-operator-bundle@sha256:1774a33f5067badf8cef710e366ec8ea430c9e5eb5ddfd694680cf7d04b6f201_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d53bc175c9ad37f97f331141210182687040713eda5fc5c41cf74e4bf7117414_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:d645f2d1e1d9a2b80dc1ee94ebfab49f8ec5491ebcd2d6a7c9cd97912132b3fb_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-proxy-rhel8@sha256:f634b1460d55a64b259607f09a18ca948bd6d5892cd84ac422bbb8c04f7d1821_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:65e25c2abd42d2646fbe26eeb6d8e9573c05b5655444d4c8bdd0c98ab514215d_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:816dee1ae29453420b378fb2bb603cba2489f92567423092fecd55ded31d9bd5_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch-rhel8-operator@sha256:e060849bd17fc0cc9854f6fdaaed47f24f5d7c8ed3b89d4153cea07ff06f0d25_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:541613e046cdee1c59e80b9e56f3bd68d0743951b919bac392f6d4f023915e1a_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:a00b1dfb84681bd5b33587eb21adea2fcfea882dd5a78523c85022f16986c367_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/eventrouter-rhel8@sha256:bb2af0e77ec0a93b1030df0cbf689bbd4abd0079b801c0ae9f65f85a96c828ed_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:308e875b3b1a76c77f5fc6dbb11d78bd97fe63613fe52f89224a0497d3b2fbc0_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:7d074118836ac50edfae7d5d086908515d42d0a34539620822ea845fa7c48523_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/fluentd-rhel8@sha256:af2150d0617141547ffb4b8bfcbf006150f84f3dabf0d4247cadfbfcb9dd95e7_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:391edf452d53bbadd9bdde53f29d376bec925cca035a49e31c637fcc305b6ba7_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:735715dc558536f3d7cbf5c803433398267b0b66d18cb2de6b160b6e96aeb2dc_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/kibana6-rhel8@sha256:a8941764c298bddf04667504279493809989b16b207cae9dd12251ccbe1a973e_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:c73a00684c4a0315a77f1932014afa2855b1e29089fb31a6209ed7a444e19d7f_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:d96928202c725b5ff8c9626c2ee7ee41be398b5b8b9b9c1f79bee04ea6342149_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/log-file-metric-exporter-rhel8@sha256:f4b36efa840b0d4bb4ac86732c1a4acfa41a062a41c0c2643b000ae450f9378d_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:4dfea0a96d39daee51c9220bc562fd610e5f9bebc1d0b27dde8e4e80e7396669_s390x",
            "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:e21c35bb4968d1b1e90b9a53f09778d1a78017d7538a8857eea85a3a1a0be12b_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/logging-curator5-rhel8@sha256:fd332245d026a70c22523a63486c344acb1c5eb96568e53aad11ca31693edfba_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:2208f64bdb5b79cd18bdc79ad9d788a0063581b8e60bed0f914ea3bd19011fc5_amd64",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:d927a7bc1d652d75fa215cd9beceb1ccd6798acf85aeebd1e1c7d16c33f2dfa8_ppc64le",
            "8Base-OSE-LOGGING-5.3:openshift-logging/elasticsearch6-rhel8@sha256:ea2783491c18252fe152eeb2799dfee17700cbc613b0a519ea8e69c6dcbb7984_s390x"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.