rhsa-2022_5602
Vulnerability from csaf_redhat
Published
2022-07-19 13:06
Modified
2024-11-06 01:12
Summary
Red Hat Security Advisory: RHUI 4.1.1 release - Security Fixes and Enhancement Update
Notes
Topic
An updated version of Red Hat Update Infrastructure (RHUI) is now available. RHUI 4.1.1 introduces important enhancements and fixes several security bugs.
Details
Red Hat Update Infrastructure (RHUI) offers a highly scalable, highly redundant framework that enables you to manage repositories and content. It also enables cloud providers to deliver content and updates to Red Hat Enterprise Linux (RHEL) instances.
Security Fix(es):
* Django: SQL injection via QuerySet's annotate, aggregate, and extra functions (CVE-2022-28346)
* Django: SQL injection via QuerySet's explain function on PostgreSQL (CVE-2022-28347)
This update fixes the following bugs:
* Previously, when a path for a non-RHUI repository was used in the entitlement certificate, RHUI Manager logged the following error message in the `/var/log/messages` file:
...
Invalid entitlement path %s found
...
With this update, the error message has been clarified and reworded to the following message:
...
Invalid repository download URL: %s provided
...
In addition, this RHUI update introduces the following enhancements:
* With this update, containers are now supported on RHUI. You can perform the following operations:
** Add containers to RHUI
** Synchronize these containers regularly along with containers from `registry.redhat.io` or any other registry of your choice
** Offer the containers to client virtual machines using a special client configuration RPM. You can create the configuration RPM using the `rhui-manager` text user interface.
* With this update, the repository synchronization status, the validity status of the RHUI CA certificate, and the statuses of services running on the RHUA, CDS, and HAProxy nodes are now available. In the case of services running on the nodes, you can view the statuses by running the `rhui-manager status` command on the RHUA node.(BZ#1636435)
* With this update, you can specify the following certificates and keys during RHUI installation:
** Custom CA certificates and keys on the RHUA node
** Custom CA certificate and key that will be used to generate client entitlement certificates
** Custom CA certificate and key that will be used to generate client SSL certificates
** Custom SSL certificate and key for the web server when adding a CDS node. Note that this certificate must be usable for all the load balancers and CDS host names that you are using with your RHUI installation(BZ#2010343)
* Previously, you could only access repositories by using paths with the `/pulp/content` prefix. With this update, you can now access repositories using paths containing other predefined prefixes. In addition, you can also configure protected and unprotected custom repositories to use custom prefixes.(BZ#2079376)
Users of RHUI are advised to upgrade to these updated packages that fix
these bugs and add these enhancements.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated version of Red Hat Update Infrastructure (RHUI) is now available. RHUI 4.1.1 introduces important enhancements and fixes several security bugs.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Update Infrastructure (RHUI) offers a highly scalable, highly redundant framework that enables you to manage repositories and content. It also enables cloud providers to deliver content and updates to Red Hat Enterprise Linux (RHEL) instances.\n\nSecurity Fix(es):\n* Django: SQL injection via QuerySet\u0027s annotate, aggregate, and extra functions (CVE-2022-28346)\n* Django: SQL injection via QuerySet\u0027s explain function on PostgreSQL (CVE-2022-28347)\n\nThis update fixes the following bugs:\n\n* Previously, when a path for a non-RHUI repository was used in the entitlement certificate, RHUI Manager logged the following error message in the `/var/log/messages` file:\n...\nInvalid entitlement path %s found\n...\n\nWith this update, the error message has been clarified and reworded to the following message:\n...\nInvalid repository download URL: %s provided\n...\n\nIn addition, this RHUI update introduces the following enhancements:\n\n* With this update, containers are now supported on RHUI. You can perform the following operations:\n** Add containers to RHUI\n** Synchronize these containers regularly along with containers from `registry.redhat.io` or any other registry of your choice\n** Offer the containers to client virtual machines using a special client configuration RPM. You can create the configuration RPM using the `rhui-manager` text user interface.\n\n* With this update, the repository synchronization status, the validity status of the RHUI CA certificate, and the statuses of services running on the RHUA, CDS, and HAProxy nodes are now available. In the case of services running on the nodes, you can view the statuses by running the `rhui-manager status` command on the RHUA node.(BZ#1636435)\n\n* With this update, you can specify the following certificates and keys during RHUI installation:\n** Custom CA certificates and keys on the RHUA node\n** Custom CA certificate and key that will be used to generate client entitlement certificates\n** Custom CA certificate and key that will be used to generate client SSL certificates\n** Custom SSL certificate and key for the web server when adding a CDS node. Note that this certificate must be usable for all the load balancers and CDS host names that you are using with your RHUI installation(BZ#2010343)\n\n* Previously, you could only access repositories by using paths with the `/pulp/content` prefix. With this update, you can now access repositories using paths containing other predefined prefixes. In addition, you can also configure protected and unprotected custom repositories to use custom prefixes.(BZ#2079376)\n\nUsers of RHUI are advised to upgrade to these updated packages that fix\nthese bugs and add these enhancements.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2022:5602",
"url": "https://access.redhat.com/errata/RHSA-2022:5602"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1636435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1636435"
},
{
"category": "external",
"summary": "1890389",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1890389"
},
{
"category": "external",
"summary": "2010343",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2010343"
},
{
"category": "external",
"summary": "2072447",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072447"
},
{
"category": "external",
"summary": "2072459",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072459"
},
{
"category": "external",
"summary": "2079376",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2079376"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5602.json"
}
],
"title": "Red Hat Security Advisory: RHUI 4.1.1 release - Security Fixes and Enhancement Update",
"tracking": {
"current_release_date": "2024-11-06T01:12:54+00:00",
"generator": {
"date": "2024-11-06T01:12:54+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2022:5602",
"initial_release_date": "2022-07-19T13:06:09+00:00",
"revision_history": [
{
"date": "2022-07-19T13:06:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2022-07-19T13:06:10+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T01:12:54+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHUI 4 for RHEL 8",
"product": {
"name": "RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhui:4::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Update Infrastructure"
},
{
"branches": [
{
"category": "product_version",
"name": "rhui-installer-0:4.1.1.8-1.el8ui.src",
"product": {
"name": "rhui-installer-0:4.1.1.8-1.el8ui.src",
"product_id": "rhui-installer-0:4.1.1.8-1.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-installer@4.1.1.8-1.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"product": {
"name": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"product_id": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-cds-plugin-authorizer-cert@1.0.5-1.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-django-0:3.2.13-2.el8ui.src",
"product": {
"name": "python-django-0:3.2.13-2.el8ui.src",
"product_id": "python-django-0:3.2.13-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-django@3.2.13-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"product": {
"name": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"product_id": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-cds-plugin-fetcher@1.0.5-1.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulpcore-0:3.17.6-3.el8ui.src",
"product": {
"name": "python-pulpcore-0:3.17.6-3.el8ui.src",
"product_id": "python-pulpcore-0:3.17.6-3.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulpcore@3.17.6-3.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"product": {
"name": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"product_id": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-collection-community-crypto@1.7.0-4.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-rpm-0:3.17.5-2.el8ui.src",
"product": {
"name": "python-pulp-rpm-0:3.17.5-2.el8ui.src",
"product_id": "python-pulp-rpm-0:3.17.5-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-rpm@3.17.5-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "createrepo_c-0:0.20.0-2.el8ui.src",
"product": {
"name": "createrepo_c-0:0.20.0-2.el8ui.src",
"product_id": "createrepo_c-0:0.20.0-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/createrepo_c@0.20.0-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-future-0:0.18.2-5.el8ui.src",
"product": {
"name": "python-future-0:0.18.2-5.el8ui.src",
"product_id": "python-future-0:0.18.2-5.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-future@0.18.2-5.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-container-0:2.10.3-2.el8ui.src",
"product": {
"name": "python-pulp-container-0:2.10.3-2.el8ui.src",
"product_id": "python-pulp-container-0:2.10.3-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-container@2.10.3-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pycryptodomex-0:3.14.1-2.el8ui.src",
"product": {
"name": "python-pycryptodomex-0:3.14.1-2.el8ui.src",
"product_id": "python-pycryptodomex-0:3.14.1-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pycryptodomex@3.14.1-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-url-normalize-0:1.4.3-4.el8ui.src",
"product": {
"name": "python-url-normalize-0:1.4.3-4.el8ui.src",
"product_id": "python-url-normalize-0:1.4.3-4.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-url-normalize@1.4.3-4.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-ecdsa-0:0.14.1-2.el8ui.src",
"product": {
"name": "python-ecdsa-0:0.14.1-2.el8ui.src",
"product_id": "python-ecdsa-0:0.14.1-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-ecdsa@0.14.1-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pyjwt-0:1.7.1-8.el8ui.src",
"product": {
"name": "python-pyjwt-0:1.7.1-8.el8ui.src",
"product_id": "python-pyjwt-0:1.7.1-8.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pyjwt@1.7.1-8.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pyjwkest-0:1.4.2-6.el8ui.src",
"product": {
"name": "python-pyjwkest-0:1.4.2-6.el8ui.src",
"product_id": "python-pyjwkest-0:1.4.2-6.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pyjwkest@1.4.2-6.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-container-client-0:2.7.1-6.el8ui.src",
"product": {
"name": "python-pulp-container-client-0:2.7.1-6.el8ui.src",
"product_id": "python-pulp-container-client-0:2.7.1-6.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-container-client@2.7.1-6.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-requests-0:2.27.1-2.el8ui.src",
"product": {
"name": "python-requests-0:2.27.1-2.el8ui.src",
"product_id": "python-requests-0:2.27.1-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-requests@2.27.1-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-cryptography-0:3.1.1-2.el8ui.src",
"product": {
"name": "python-cryptography-0:3.1.1-2.el8ui.src",
"product_id": "python-cryptography-0:3.1.1-2.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-cryptography@3.1.1-2.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"product": {
"name": "python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"product_id": "python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pyOpenSSL@19.1.0-3.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "pulpcore-selinux-0:1.3.0-1.el8ui.src",
"product": {
"name": "pulpcore-selinux-0:1.3.0-1.el8ui.src",
"product_id": "pulpcore-selinux-0:1.3.0-1.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-selinux@1.3.0-1.el8ui?arch=src"
}
}
},
{
"category": "product_version",
"name": "rhui-tools-0:4.1.1.16-1.el8ui.src",
"product": {
"name": "rhui-tools-0:4.1.1.16-1.el8ui.src",
"product_id": "rhui-tools-0:4.1.1.16-1.el8ui.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-tools@4.1.1.16-1.el8ui?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"product": {
"name": "rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"product_id": "rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-installer@4.1.1.8-1.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"product": {
"name": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"product_id": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-cds-plugin-authorizer-cert@1.0.5-1.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-django-0:3.2.13-2.el8ui.noarch",
"product": {
"name": "python38-django-0:3.2.13-2.el8ui.noarch",
"product_id": "python38-django-0:3.2.13-2.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-django@3.2.13-2.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"product": {
"name": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"product_id": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-cds-plugin-fetcher@1.0.5-1.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-pulpcore-0:3.17.6-3.el8ui.noarch",
"product": {
"name": "python38-pulpcore-0:3.17.6-3.el8ui.noarch",
"product_id": "python38-pulpcore-0:3.17.6-3.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pulpcore@3.17.6-3.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"product": {
"name": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"product_id": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-collection-community-crypto@1.7.0-4.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"product": {
"name": "python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"product_id": "python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pulp-rpm@3.17.5-2.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-future-0:0.18.2-5.el8ui.noarch",
"product": {
"name": "python38-future-0:0.18.2-5.el8ui.noarch",
"product_id": "python38-future-0:0.18.2-5.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-future@0.18.2-5.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"product": {
"name": "python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"product_id": "python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pulp-container@2.10.3-2.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"product": {
"name": "python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"product_id": "python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-url-normalize@1.4.3-4.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"product": {
"name": "python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"product_id": "python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-ecdsa@0.14.1-2.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"product": {
"name": "python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"product_id": "python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pyjwt@1.7.1-8.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"product": {
"name": "python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"product_id": "python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pyjwkest@1.4.2-6.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"product": {
"name": "python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"product_id": "python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pulp-container-client@2.7.1-6.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-requests-0:2.27.1-2.el8ui.noarch",
"product": {
"name": "python38-requests-0:2.27.1-2.el8ui.noarch",
"product_id": "python38-requests-0:2.27.1-2.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-requests@2.27.1-2.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"product": {
"name": "python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"product_id": "python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pyOpenSSL@19.1.0-3.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"product": {
"name": "rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"product_id": "rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-tools@4.1.1.16-1.el8ui?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch",
"product": {
"name": "rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch",
"product_id": "rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhui-tools-libs@4.1.1.16-1.el8ui?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"product_id": "createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/createrepo_c-libs@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"product_id": "python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-createrepo_c@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"product_id": "python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-createrepo_c@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"product_id": "createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/createrepo_c-debugsource@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_id": "createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/createrepo_c-debuginfo@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_id": "createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/createrepo_c-libs-debuginfo@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_id": "python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-createrepo_c-debuginfo@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product": {
"name": "python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_id": "python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-createrepo_c-debuginfo@0.20.0-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"product": {
"name": "python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"product_id": "python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pycryptodomex@3.14.1-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"product": {
"name": "python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"product_id": "python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pycryptodomex-debugsource@3.14.1-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"product": {
"name": "python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"product_id": "python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-pycryptodomex-debuginfo@3.14.1-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"product": {
"name": "python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"product_id": "python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-cryptography@3.1.1-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"product": {
"name": "python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"product_id": "python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.1.1-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"product": {
"name": "python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"product_id": "python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python38-cryptography-debuginfo@3.1.1-2.el8ui?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"product": {
"name": "pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"product_id": "pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-selinux@1.3.0-1.el8ui?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch"
},
"product_reference": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.src"
},
"product_reference": "ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "createrepo_c-0:0.20.0-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:createrepo_c-0:0.20.0-2.el8ui.src"
},
"product_reference": "createrepo_c-0:0.20.0-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "createrepo_c-libs-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:createrepo_c-libs-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-selinux-0:1.3.0-1.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.src"
},
"product_reference": "pulpcore-selinux-0:1.3.0-1.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-selinux-0:1.3.0-1.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.x86_64"
},
"product_reference": "pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cryptography-0:3.1.1-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-cryptography-0:3.1.1-2.el8ui.src"
},
"product_reference": "python-cryptography-0:3.1.1-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64"
},
"product_reference": "python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-django-0:3.2.13-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-django-0:3.2.13-2.el8ui.src"
},
"product_reference": "python-django-0:3.2.13-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-ecdsa-0:0.14.1-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-ecdsa-0:0.14.1-2.el8ui.src"
},
"product_reference": "python-ecdsa-0:0.14.1-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-future-0:0.18.2-5.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-future-0:0.18.2-5.el8ui.src"
},
"product_reference": "python-future-0:0.18.2-5.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.10.3-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pulp-container-0:2.10.3-2.el8ui.src"
},
"product_reference": "python-pulp-container-0:2.10.3-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-client-0:2.7.1-6.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pulp-container-client-0:2.7.1-6.el8ui.src"
},
"product_reference": "python-pulp-container-client-0:2.7.1-6.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-rpm-0:3.17.5-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pulp-rpm-0:3.17.5-2.el8ui.src"
},
"product_reference": "python-pulp-rpm-0:3.17.5-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulpcore-0:3.17.6-3.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pulpcore-0:3.17.6-3.el8ui.src"
},
"product_reference": "python-pulpcore-0:3.17.6-3.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyOpenSSL-0:19.1.0-3.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pyOpenSSL-0:19.1.0-3.el8ui.src"
},
"product_reference": "python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pycryptodomex-0:3.14.1-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pycryptodomex-0:3.14.1-2.el8ui.src"
},
"product_reference": "python-pycryptodomex-0:3.14.1-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64"
},
"product_reference": "python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyjwkest-0:1.4.2-6.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pyjwkest-0:1.4.2-6.el8ui.src"
},
"product_reference": "python-pyjwkest-0:1.4.2-6.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyjwt-0:1.7.1-8.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-pyjwt-0:1.7.1-8.el8ui.src"
},
"product_reference": "python-pyjwt-0:1.7.1-8.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-requests-0:2.27.1-2.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-requests-0:2.27.1-2.el8ui.src"
},
"product_reference": "python-requests-0:2.27.1-2.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-url-normalize-0:1.4.3-4.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python-url-normalize-0:1.4.3-4.el8ui.src"
},
"product_reference": "python-url-normalize-0:1.4.3-4.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-createrepo_c-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python3-createrepo_c-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pulp-container-client-0:2.7.1-6.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python3-pulp-container-client-0:2.7.1-6.el8ui.noarch"
},
"product_reference": "python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-createrepo_c-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-createrepo_c-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64"
},
"product_reference": "python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-0:3.1.1-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-cryptography-0:3.1.1-2.el8ui.x86_64"
},
"product_reference": "python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64"
},
"product_reference": "python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-django-0:3.2.13-2.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-django-0:3.2.13-2.el8ui.noarch"
},
"product_reference": "python38-django-0:3.2.13-2.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-ecdsa-0:0.14.1-2.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-ecdsa-0:0.14.1-2.el8ui.noarch"
},
"product_reference": "python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-future-0:0.18.2-5.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-future-0:0.18.2-5.el8ui.noarch"
},
"product_reference": "python38-future-0:0.18.2-5.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pulp-container-0:2.10.3-2.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pulp-container-0:2.10.3-2.el8ui.noarch"
},
"product_reference": "python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pulp-rpm-0:3.17.5-2.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pulp-rpm-0:3.17.5-2.el8ui.noarch"
},
"product_reference": "python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pulpcore-0:3.17.6-3.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pulpcore-0:3.17.6-3.el8ui.noarch"
},
"product_reference": "python38-pulpcore-0:3.17.6-3.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch"
},
"product_reference": "python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64"
},
"product_reference": "python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64 as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64"
},
"product_reference": "python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pyjwkest-0:1.4.2-6.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pyjwkest-0:1.4.2-6.el8ui.noarch"
},
"product_reference": "python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-pyjwt-0:1.7.1-8.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-pyjwt-0:1.7.1-8.el8ui.noarch"
},
"product_reference": "python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-requests-0:2.27.1-2.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-requests-0:2.27.1-2.el8ui.noarch"
},
"product_reference": "python38-requests-0:2.27.1-2.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python38-url-normalize-0:1.4.3-4.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:python38-url-normalize-0:1.4.3-4.el8ui.noarch"
},
"product_reference": "python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch"
},
"product_reference": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src"
},
"product_reference": "rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch"
},
"product_reference": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src"
},
"product_reference": "rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-installer-0:4.1.1.8-1.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.noarch"
},
"product_reference": "rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-installer-0:4.1.1.8-1.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.src"
},
"product_reference": "rhui-installer-0:4.1.1.8-1.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-tools-0:4.1.1.16-1.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.noarch"
},
"product_reference": "rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-tools-0:4.1.1.16-1.el8ui.src as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.src"
},
"product_reference": "rhui-tools-0:4.1.1.16-1.el8ui.src",
"relates_to_product_reference": "8Base-RHUI-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch as a component of RHUI 4 for RHEL 8",
"product_id": "8Base-RHUI-4:rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch"
},
"product_reference": "rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch",
"relates_to_product_reference": "8Base-RHUI-4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-28346",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2022-04-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"8Base-RHUI-4:createrepo_c-0:0.20.0-2.el8ui.src",
"8Base-RHUI-4:createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.src",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"8Base-RHUI-4:python-cryptography-0:3.1.1-2.el8ui.src",
"8Base-RHUI-4:python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-ecdsa-0:0.14.1-2.el8ui.src",
"8Base-RHUI-4:python-future-0:0.18.2-5.el8ui.src",
"8Base-RHUI-4:python-pulp-container-0:2.10.3-2.el8ui.src",
"8Base-RHUI-4:python-pulp-container-client-0:2.7.1-6.el8ui.src",
"8Base-RHUI-4:python-pulp-rpm-0:3.17.5-2.el8ui.src",
"8Base-RHUI-4:python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-0:3.14.1-2.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-pyjwkest-0:1.4.2-6.el8ui.src",
"8Base-RHUI-4:python-pyjwt-0:1.7.1-8.el8ui.src",
"8Base-RHUI-4:python-requests-0:2.27.1-2.el8ui.src",
"8Base-RHUI-4:python-url-normalize-0:1.4.3-4.el8ui.src",
"8Base-RHUI-4:python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"8Base-RHUI-4:python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-django-0:3.2.13-2.el8ui.noarch",
"8Base-RHUI-4:python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-future-0:0.18.2-5.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"8Base-RHUI-4:python38-pulpcore-0:3.17.6-3.el8ui.noarch",
"8Base-RHUI-4:python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"8Base-RHUI-4:python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"8Base-RHUI-4:python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"8Base-RHUI-4:python38-requests-0:2.27.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2072447"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Django: SQL injection in QuerySet.annotate(),aggregate() and extra()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack does ship the affected version of Django, however, vulnerability is not exposed in the product as it does not make use of vulnerable code. We may update Django in a future release of OpenStack.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHUI-4:python-django-0:3.2.13-2.el8ui.src",
"8Base-RHUI-4:python-pulpcore-0:3.17.6-3.el8ui.src"
],
"known_not_affected": [
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"8Base-RHUI-4:createrepo_c-0:0.20.0-2.el8ui.src",
"8Base-RHUI-4:createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.src",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"8Base-RHUI-4:python-cryptography-0:3.1.1-2.el8ui.src",
"8Base-RHUI-4:python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-ecdsa-0:0.14.1-2.el8ui.src",
"8Base-RHUI-4:python-future-0:0.18.2-5.el8ui.src",
"8Base-RHUI-4:python-pulp-container-0:2.10.3-2.el8ui.src",
"8Base-RHUI-4:python-pulp-container-client-0:2.7.1-6.el8ui.src",
"8Base-RHUI-4:python-pulp-rpm-0:3.17.5-2.el8ui.src",
"8Base-RHUI-4:python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-0:3.14.1-2.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-pyjwkest-0:1.4.2-6.el8ui.src",
"8Base-RHUI-4:python-pyjwt-0:1.7.1-8.el8ui.src",
"8Base-RHUI-4:python-requests-0:2.27.1-2.el8ui.src",
"8Base-RHUI-4:python-url-normalize-0:1.4.3-4.el8ui.src",
"8Base-RHUI-4:python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"8Base-RHUI-4:python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-django-0:3.2.13-2.el8ui.noarch",
"8Base-RHUI-4:python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-future-0:0.18.2-5.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"8Base-RHUI-4:python38-pulpcore-0:3.17.6-3.el8ui.noarch",
"8Base-RHUI-4:python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"8Base-RHUI-4:python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"8Base-RHUI-4:python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"8Base-RHUI-4:python38-requests-0:2.27.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-28346"
},
{
"category": "external",
"summary": "RHBZ#2072447",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072447"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-28346",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28346"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-28346",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28346"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2022/apr/11/security-releases/",
"url": "https://www.djangoproject.com/weblog/2022/apr/11/security-releases/"
}
],
"release_date": "2022-04-11T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-07-19T13:06:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor detailed instructions on how to apply this update, see:\nhttps://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure\n\nFor other information, consult the product documentation at:\nhttps://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4",
"product_ids": [
"8Base-RHUI-4:python-django-0:3.2.13-2.el8ui.src",
"8Base-RHUI-4:python-pulpcore-0:3.17.6-3.el8ui.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:5602"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"8Base-RHUI-4:python-django-0:3.2.13-2.el8ui.src",
"8Base-RHUI-4:python-pulpcore-0:3.17.6-3.el8ui.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Django: SQL injection in QuerySet.annotate(),aggregate() and extra()"
},
{
"cve": "CVE-2022-28347",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2022-04-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"8Base-RHUI-4:createrepo_c-0:0.20.0-2.el8ui.src",
"8Base-RHUI-4:createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.src",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"8Base-RHUI-4:python-cryptography-0:3.1.1-2.el8ui.src",
"8Base-RHUI-4:python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-ecdsa-0:0.14.1-2.el8ui.src",
"8Base-RHUI-4:python-future-0:0.18.2-5.el8ui.src",
"8Base-RHUI-4:python-pulp-container-0:2.10.3-2.el8ui.src",
"8Base-RHUI-4:python-pulp-container-client-0:2.7.1-6.el8ui.src",
"8Base-RHUI-4:python-pulp-rpm-0:3.17.5-2.el8ui.src",
"8Base-RHUI-4:python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-0:3.14.1-2.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-pyjwkest-0:1.4.2-6.el8ui.src",
"8Base-RHUI-4:python-pyjwt-0:1.7.1-8.el8ui.src",
"8Base-RHUI-4:python-requests-0:2.27.1-2.el8ui.src",
"8Base-RHUI-4:python-url-normalize-0:1.4.3-4.el8ui.src",
"8Base-RHUI-4:python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"8Base-RHUI-4:python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-django-0:3.2.13-2.el8ui.noarch",
"8Base-RHUI-4:python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-future-0:0.18.2-5.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"8Base-RHUI-4:python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"8Base-RHUI-4:python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"8Base-RHUI-4:python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"8Base-RHUI-4:python38-requests-0:2.27.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2072459"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Django package, leading to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Django: SQL injection via QuerySet.explain(options) on PostgreSQL",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack does ship the affected version of Django. However, the product is not vulnerable since it does not implement the vulnerable method QuerySet.explain() introduced in Django 2.1.x onward.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHUI-4:python-django-0:3.2.13-2.el8ui.src",
"8Base-RHUI-4:python-pulpcore-0:3.17.6-3.el8ui.src",
"8Base-RHUI-4:python38-pulpcore-0:3.17.6-3.el8ui.noarch"
],
"known_not_affected": [
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.noarch",
"8Base-RHUI-4:ansible-collection-community-crypto-0:1.7.0-4.el8ui.src",
"8Base-RHUI-4:createrepo_c-0:0.20.0-2.el8ui.src",
"8Base-RHUI-4:createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-debugsource-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:createrepo_c-libs-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.src",
"8Base-RHUI-4:pulpcore-selinux-0:1.3.0-1.el8ui.x86_64",
"8Base-RHUI-4:python-cryptography-0:3.1.1-2.el8ui.src",
"8Base-RHUI-4:python-cryptography-debugsource-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-ecdsa-0:0.14.1-2.el8ui.src",
"8Base-RHUI-4:python-future-0:0.18.2-5.el8ui.src",
"8Base-RHUI-4:python-pulp-container-0:2.10.3-2.el8ui.src",
"8Base-RHUI-4:python-pulp-container-client-0:2.7.1-6.el8ui.src",
"8Base-RHUI-4:python-pulp-rpm-0:3.17.5-2.el8ui.src",
"8Base-RHUI-4:python-pyOpenSSL-0:19.1.0-3.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-0:3.14.1-2.el8ui.src",
"8Base-RHUI-4:python-pycryptodomex-debugsource-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python-pyjwkest-0:1.4.2-6.el8ui.src",
"8Base-RHUI-4:python-pyjwt-0:1.7.1-8.el8ui.src",
"8Base-RHUI-4:python-requests-0:2.27.1-2.el8ui.src",
"8Base-RHUI-4:python-url-normalize-0:1.4.3-4.el8ui.src",
"8Base-RHUI-4:python3-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python3-pulp-container-client-0:2.7.1-6.el8ui.noarch",
"8Base-RHUI-4:python38-createrepo_c-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-createrepo_c-debuginfo-0:0.20.0-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-cryptography-debuginfo-0:3.1.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-django-0:3.2.13-2.el8ui.noarch",
"8Base-RHUI-4:python38-ecdsa-0:0.14.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-future-0:0.18.2-5.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-container-0:2.10.3-2.el8ui.noarch",
"8Base-RHUI-4:python38-pulp-rpm-0:3.17.5-2.el8ui.noarch",
"8Base-RHUI-4:python38-pyOpenSSL-0:19.1.0-3.el8ui.noarch",
"8Base-RHUI-4:python38-pycryptodomex-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pycryptodomex-debuginfo-0:3.14.1-2.el8ui.x86_64",
"8Base-RHUI-4:python38-pyjwkest-0:1.4.2-6.el8ui.noarch",
"8Base-RHUI-4:python38-pyjwt-0:1.7.1-8.el8ui.noarch",
"8Base-RHUI-4:python38-requests-0:2.27.1-2.el8ui.noarch",
"8Base-RHUI-4:python38-url-normalize-0:1.4.3-4.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-authorizer-cert-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.noarch",
"8Base-RHUI-4:rhui-cds-plugin-fetcher-0:1.0.5-1.el8ui.src",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.noarch",
"8Base-RHUI-4:rhui-installer-0:4.1.1.8-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.noarch",
"8Base-RHUI-4:rhui-tools-0:4.1.1.16-1.el8ui.src",
"8Base-RHUI-4:rhui-tools-libs-0:4.1.1.16-1.el8ui.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-28347"
},
{
"category": "external",
"summary": "RHBZ#2072459",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2072459"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-28347",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28347"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-28347",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28347"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2022/apr/11/security-releases/",
"url": "https://www.djangoproject.com/weblog/2022/apr/11/security-releases/"
}
],
"release_date": "2022-04-11T08:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-07-19T13:06:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor detailed instructions on how to apply this update, see:\nhttps://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure\n\nFor other information, consult the product documentation at:\nhttps://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4",
"product_ids": [
"8Base-RHUI-4:python-django-0:3.2.13-2.el8ui.src",
"8Base-RHUI-4:python-pulpcore-0:3.17.6-3.el8ui.src",
"8Base-RHUI-4:python38-pulpcore-0:3.17.6-3.el8ui.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:5602"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"8Base-RHUI-4:python-django-0:3.2.13-2.el8ui.src",
"8Base-RHUI-4:python-pulpcore-0:3.17.6-3.el8ui.src",
"8Base-RHUI-4:python38-pulpcore-0:3.17.6-3.el8ui.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Django: SQL injection via QuerySet.explain(options) on PostgreSQL"
}
]
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.