rhsa-2022_6801
Vulnerability from csaf_redhat
Published
2022-10-13 07:44
Modified
2024-09-18 14:41
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.8.51 packages and security update
Notes
Topic
Red Hat OpenShift Container Platform release 4.8.51 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.8.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.8.51. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2022:6800
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html
Security Fix(es):
* go-getter: command injection vulnerability (CVE-2022-26945)
* go-getter: unsafe download (issue 1 of 3) (CVE-2022-30321)
* go-getter: unsafe download (issue 2 of 3) (CVE-2022-30322)
* go-getter: unsafe download (issue 3 of 3) (CVE-2022-30323)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.
You may download the oc tool and use it to inspect release image metadata as follows:
(For x86_64 architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-x86_64
The image digest is sha256:ade848f9796f3938f8bd540ff5d94ef2791982b4f8c93929758efa0693c7a2db
(For s390x architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-s390x
The image digest is sha256:acea62267cf0598be3a4fbf42f143d99afea181f6f27be5f892e4cfd88a110fc
(For ppc64le architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-ppc64le
The image digest is sha256:5bbff649e25932816bdbc95e72e0b22e83c16c29f87809bea9d54b0b8886d363
All OpenShift Container Platform 4.8 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available
at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.8.51 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.8.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.8.51. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2022:6800\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nSecurity Fix(es):\n\n* go-getter: command injection vulnerability (CVE-2022-26945)\n* go-getter: unsafe download (issue 1 of 3) (CVE-2022-30321)\n* go-getter: unsafe download (issue 2 of 3) (CVE-2022-30322)\n* go-getter: unsafe download (issue 3 of 3) (CVE-2022-30323)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s)\nlisted in the References section.\n\nYou may download the oc tool and use it to inspect release image metadata as follows:\n\n(For x86_64 architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-x86_64\n\nThe image digest is sha256:ade848f9796f3938f8bd540ff5d94ef2791982b4f8c93929758efa0693c7a2db\n\n(For s390x architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-s390x\n\nThe image digest is sha256:acea62267cf0598be3a4fbf42f143d99afea181f6f27be5f892e4cfd88a110fc\n\n(For ppc64le architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-ppc64le\n\nThe image digest is sha256:5bbff649e25932816bdbc95e72e0b22e83c16c29f87809bea9d54b0b8886d363\n\nAll OpenShift Container Platform 4.8 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available\nat https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2022:6801",
"url": "https://access.redhat.com/errata/RHSA-2022:6801"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2091495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2091495"
},
{
"category": "external",
"summary": "2092918",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092918"
},
{
"category": "external",
"summary": "2092923",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092923"
},
{
"category": "external",
"summary": "2092925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092925"
},
{
"category": "external",
"summary": "2092928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092928"
},
{
"category": "external",
"summary": "OCPBUGS-1098",
"url": "https://issues.redhat.com/browse/OCPBUGS-1098"
},
{
"category": "external",
"summary": "OCPBUGS-1230",
"url": "https://issues.redhat.com/browse/OCPBUGS-1230"
},
{
"category": "external",
"summary": "OCPBUGS-1314",
"url": "https://issues.redhat.com/browse/OCPBUGS-1314"
},
{
"category": "external",
"summary": "OCPBUGS-1455",
"url": "https://issues.redhat.com/browse/OCPBUGS-1455"
},
{
"category": "external",
"summary": "OCPBUGS-1461",
"url": "https://issues.redhat.com/browse/OCPBUGS-1461"
},
{
"category": "external",
"summary": "OCPBUGS-1519",
"url": "https://issues.redhat.com/browse/OCPBUGS-1519"
},
{
"category": "external",
"summary": "OCPBUGS-895",
"url": "https://issues.redhat.com/browse/OCPBUGS-895"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2022/rhsa-2022_6801.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.8.51 packages and security update",
"tracking": {
"current_release_date": "2024-09-18T14:41:51+00:00",
"generator": {
"date": "2024-09-18T14:41:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2022:6801",
"initial_release_date": "2022-10-13T07:44:51+00:00",
"revision_history": [
{
"date": "2022-10-13T07:44:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2022-10-13T07:44:51+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-18T14:41:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.8",
"product": {
"name": "Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"product": {
"name": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"product_id": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-machine-controllers\u0026tag=v4.8.0-202209302037.p0.g03dc426.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"product": {
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"product_id": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator\u0026tag=v4.8.0-202209211357.p0.gac8dcd9.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"product": {
"name": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"product_id": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-monitoring-operator\u0026tag=v4.8.0-202209141316.p0.g2c4ac8d.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"product": {
"name": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"product_id": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-console\u0026tag=v4.8.0-202209291426.p0.gafa51a7.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"product": {
"name": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"product_id": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-hyperkube\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x",
"product": {
"name": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x",
"product_id": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-pod\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"product": {
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8\u0026tag=v4.8.0-202210040817.p0.gd568517.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"product": {
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"product_id": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel8\u0026tag=v4.8.0-202209200547.p0.gc50d793.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"product": {
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"product_id": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-baremetal-operator-rhel8\u0026tag=v4.8.0-202209291426.p0.g117d47a.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"product": {
"name": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"product_id": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"product": {
"name": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"product_id": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-maven\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"product": {
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"product_id": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-nodejs-12-rhel8\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"product": {
"name": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"product_id": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-machine-controllers\u0026tag=v4.8.0-202209302037.p0.g03dc426.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"product": {
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"product_id": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator\u0026tag=v4.8.0-202209211357.p0.gac8dcd9.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"product": {
"name": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"product_id": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-monitoring-operator\u0026tag=v4.8.0-202209141316.p0.g2c4ac8d.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"product": {
"name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"product_id": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8\u0026tag=v4.8.0-202210040817.p0.g583088e.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"product": {
"name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"product_id": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel8\u0026tag=v4.8.0-202210040817.p0.gdceaf13.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"product": {
"name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"product_id": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-static-ip-manager-rhel8\u0026tag=v4.8.0-202210040817.p0.gd2e40e3.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"product": {
"name": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"product_id": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-console\u0026tag=v4.8.0-202209291426.p0.gafa51a7.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"product": {
"name": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"product_id": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-hyperkube\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"product": {
"name": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"product_id": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-pod\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"product": {
"name": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"product_id": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-machine-controllers\u0026tag=v4.8.0-202209190937.p0.g1a6124f.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"product": {
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8\u0026tag=v4.8.0-202210040817.p0.gd568517.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"product": {
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"product_id": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel8\u0026tag=v4.8.0-202209200547.p0.gc50d793.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"product": {
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"product_id": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-baremetal-operator-rhel8\u0026tag=v4.8.0-202209291426.p0.g117d47a.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"product": {
"name": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"product_id": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"product": {
"name": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"product_id": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-maven\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"product": {
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"product_id": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-nodejs-12-rhel8\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"product": {
"name": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"product_id": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-machine-controllers\u0026tag=v4.8.0-202209302037.p0.g03dc426.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"product": {
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"product_id": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator\u0026tag=v4.8.0-202209211357.p0.gac8dcd9.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"product": {
"name": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"product_id": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-monitoring-operator\u0026tag=v4.8.0-202209141316.p0.g2c4ac8d.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"product": {
"name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"product_id": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8\u0026tag=v4.8.0-202210040817.p0.g583088e.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"product": {
"name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"product_id": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel8\u0026tag=v4.8.0-202210040817.p0.gdceaf13.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"product": {
"name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"product_id": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-static-ip-manager-rhel8\u0026tag=v4.8.0-202210040817.p0.gd2e40e3.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"product": {
"name": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"product_id": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-console\u0026tag=v4.8.0-202209291426.p0.gafa51a7.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"product": {
"name": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"product_id": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-hyperkube\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"product": {
"name": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"product_id": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-pod\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"product": {
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8\u0026tag=v4.8.0-202210040817.p0.gd568517.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"product": {
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"product_id": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel8\u0026tag=v4.8.0-202209200547.p0.gc50d793.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"product": {
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"product_id": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-baremetal-operator-rhel8\u0026tag=v4.8.0-202209291426.p0.g117d47a.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"product": {
"name": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"product_id": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"product": {
"name": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"product_id": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-maven\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
},
{
"category": "product_version",
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"product": {
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"product_id": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-nodejs-12-rhel8\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64"
},
"product_reference": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x"
},
"product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64"
},
"product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le"
},
"product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64"
},
"product_reference": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le"
},
"product_reference": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x"
},
"product_reference": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64"
},
"product_reference": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le"
},
"product_reference": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x"
},
"product_reference": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le"
},
"product_reference": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64"
},
"product_reference": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
},
"product_reference": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64"
},
"product_reference": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x"
},
"product_reference": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le"
},
"product_reference": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le"
},
"product_reference": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64"
},
"product_reference": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x"
},
"product_reference": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64"
},
"product_reference": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x"
},
"product_reference": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le"
},
"product_reference": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le"
},
"product_reference": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64"
},
"product_reference": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x"
},
"product_reference": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le"
},
"product_reference": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64"
},
"product_reference": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64"
},
"product_reference": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le"
},
"product_reference": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le"
},
"product_reference": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64"
},
"product_reference": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le"
},
"product_reference": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64"
},
"product_reference": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x"
},
"product_reference": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64"
},
"product_reference": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le"
},
"product_reference": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x"
},
"product_reference": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le"
},
"product_reference": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x"
},
"product_reference": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64"
},
"product_reference": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le"
},
"product_reference": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64 as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64"
},
"product_reference": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"relates_to_product_reference": "8Base-RHOSE-4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x as a component of Red Hat OpenShift Container Platform 4.8",
"product_id": "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
},
"product_reference": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x",
"relates_to_product_reference": "8Base-RHOSE-4.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-26945",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"discovery_date": "2022-05-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2092928"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in go-getter. This flaw allows an attacker to misuse go-getter to execute commands on the host. This action may be possible when symlink processing and path traversal are allowed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go-getter: command injection vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"known_not_affected": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-26945"
},
{
"category": "external",
"summary": "RHBZ#2092928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092928"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-26945",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26945"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-26945",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26945"
},
{
"category": "external",
"summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930",
"url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930"
}
],
"release_date": "2022-05-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:6801"
},
{
"category": "workaround",
"details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "go-getter: command injection vulnerability"
},
{
"cve": "CVE-2022-30321",
"cwe": {
"id": "CWE-229",
"name": "Improper Handling of Values"
},
"discovery_date": "2022-05-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2092918"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in go-getter. Several vulnerabilities were identified in the way go-getter processes HTTP responses, response headers, and password-protected ZIP files. This flaw allows an attacker to bypass certain configuration settings and may lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go-getter: unsafe download (issue 1 of 3)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"known_not_affected": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-30321"
},
{
"category": "external",
"summary": "RHBZ#2092918",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092918"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-30321",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30321"
},
{
"category": "external",
"summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930",
"url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930"
}
],
"release_date": "2022-05-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:6801"
},
{
"category": "workaround",
"details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "go-getter: unsafe download (issue 1 of 3)"
},
{
"cve": "CVE-2022-30322",
"cwe": {
"id": "CWE-229",
"name": "Improper Handling of Values"
},
"discovery_date": "2022-05-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2092923"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in go-getter. Several vulnerabilities were identified in the way go-getter processes HTTP responses, response headers, and password-protected ZIP files. This flaw allows an attacker to bypass certain configuration settings and may lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go-getter: unsafe download (issue 2 of 3)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"known_not_affected": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-30322"
},
{
"category": "external",
"summary": "RHBZ#2092923",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092923"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-30322",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30322"
},
{
"category": "external",
"summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930",
"url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930"
}
],
"release_date": "2022-05-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:6801"
},
{
"category": "workaround",
"details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "go-getter: unsafe download (issue 2 of 3)"
},
{
"cve": "CVE-2022-30323",
"cwe": {
"id": "CWE-229",
"name": "Improper Handling of Values"
},
"discovery_date": "2022-05-25T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2092925"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in go-getter. Several vulnerabilities were identified in how go-getter processes HTTP responses, response headers, and password-protected ZIP files. This flaw allows an attacker to bypass certain configuration settings and may lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "go-getter: unsafe download (issue 3 of 3)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"known_not_affected": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-30323"
},
{
"category": "external",
"summary": "RHBZ#2092925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-30323",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30323"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30323",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30323"
},
{
"category": "external",
"summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930",
"url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930"
}
],
"release_date": "2022-05-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:6801"
},
{
"category": "workaround",
"details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.",
"product_ids": [
"8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x",
"8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x",
"8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x",
"8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64",
"8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64",
"8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "go-getter: unsafe download (issue 3 of 3)"
}
]
}
Loading...