rhsa-2022_6801
Vulnerability from csaf_redhat
Published
2022-10-13 07:44
Modified
2024-12-17 22:03
Summary
Red Hat Security Advisory: OpenShift Container Platform 4.8.51 packages and security update
Notes
Topic
Red Hat OpenShift Container Platform release 4.8.51 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.8.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.8.51. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2022:6800
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html
Security Fix(es):
* go-getter: command injection vulnerability (CVE-2022-26945)
* go-getter: unsafe download (issue 1 of 3) (CVE-2022-30321)
* go-getter: unsafe download (issue 2 of 3) (CVE-2022-30322)
* go-getter: unsafe download (issue 3 of 3) (CVE-2022-30323)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.
You may download the oc tool and use it to inspect release image metadata as follows:
(For x86_64 architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-x86_64
The image digest is sha256:ade848f9796f3938f8bd540ff5d94ef2791982b4f8c93929758efa0693c7a2db
(For s390x architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-s390x
The image digest is sha256:acea62267cf0598be3a4fbf42f143d99afea181f6f27be5f892e4cfd88a110fc
(For ppc64le architecture)
$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-ppc64le
The image digest is sha256:5bbff649e25932816bdbc95e72e0b22e83c16c29f87809bea9d54b0b8886d363
All OpenShift Container Platform 4.8 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available
at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Container Platform release 4.8.51 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.8.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.8.51. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2022:6800\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nSecurity Fix(es):\n\n* go-getter: command injection vulnerability (CVE-2022-26945)\n* go-getter: unsafe download (issue 1 of 3) (CVE-2022-30321)\n* go-getter: unsafe download (issue 2 of 3) (CVE-2022-30322)\n* go-getter: unsafe download (issue 3 of 3) (CVE-2022-30323)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s)\nlisted in the References section.\n\nYou may download the oc tool and use it to inspect release image metadata as follows:\n\n(For x86_64 architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-x86_64\n\nThe image digest is sha256:ade848f9796f3938f8bd540ff5d94ef2791982b4f8c93929758efa0693c7a2db\n\n(For s390x architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-s390x\n\nThe image digest is sha256:acea62267cf0598be3a4fbf42f143d99afea181f6f27be5f892e4cfd88a110fc\n\n(For ppc64le architecture)\n\n $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.8.51-ppc64le\n\nThe image digest is sha256:5bbff649e25932816bdbc95e72e0b22e83c16c29f87809bea9d54b0b8886d363\n\nAll OpenShift Container Platform 4.8 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available\nat https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2022:6801", "url": "https://access.redhat.com/errata/RHSA-2022:6801" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2091495", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2091495" }, { "category": "external", "summary": "2092918", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092918" }, { "category": "external", "summary": "2092923", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092923" }, { "category": "external", "summary": "2092925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092925" }, { "category": "external", "summary": "2092928", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092928" }, { "category": "external", "summary": "OCPBUGS-1098", "url": "https://issues.redhat.com/browse/OCPBUGS-1098" }, { "category": "external", "summary": "OCPBUGS-1230", "url": "https://issues.redhat.com/browse/OCPBUGS-1230" }, { "category": "external", "summary": "OCPBUGS-1314", "url": "https://issues.redhat.com/browse/OCPBUGS-1314" }, { "category": "external", "summary": "OCPBUGS-1455", "url": "https://issues.redhat.com/browse/OCPBUGS-1455" }, { "category": "external", "summary": "OCPBUGS-1461", "url": "https://issues.redhat.com/browse/OCPBUGS-1461" }, { "category": "external", "summary": "OCPBUGS-1519", "url": "https://issues.redhat.com/browse/OCPBUGS-1519" }, { "category": "external", "summary": "OCPBUGS-895", "url": "https://issues.redhat.com/browse/OCPBUGS-895" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6801.json" } ], "title": "Red Hat Security Advisory: OpenShift Container Platform 4.8.51 packages and security update", "tracking": { "current_release_date": "2024-12-17T22:03:37+00:00", "generator": { "date": "2024-12-17T22:03:37+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.3" } }, "id": "RHSA-2022:6801", "initial_release_date": "2022-10-13T07:44:51+00:00", "revision_history": [ { "date": "2022-10-13T07:44:51+00:00", "number": "1", "summary": "Initial version" }, { "date": "2022-10-13T07:44:51+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-12-17T22:03:37+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Container Platform 4.8", "product": { "name": "Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4.8::el8" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "product": { "name": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "product_id": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-machine-controllers\u0026tag=v4.8.0-202209302037.p0.g03dc426.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "product": { "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "product_id": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator\u0026tag=v4.8.0-202209211357.p0.gac8dcd9.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "product": { "name": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "product_id": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-monitoring-operator\u0026tag=v4.8.0-202209141316.p0.g2c4ac8d.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "product": { "name": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "product_id": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-console\u0026tag=v4.8.0-202209291426.p0.gafa51a7.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "product": { "name": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "product_id": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-hyperkube\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x", "product": { "name": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x", "product_id": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-pod\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "product": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8\u0026tag=v4.8.0-202210040817.p0.gd568517.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "product": { "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "product_id": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel8\u0026tag=v4.8.0-202209200547.p0.gc50d793.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "product": { "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "product_id": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-baremetal-operator-rhel8\u0026tag=v4.8.0-202209291426.p0.g117d47a.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "product_id": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "product": { "name": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "product_id": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-maven\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "product": { "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "product_id": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-nodejs-12-rhel8\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "product": { "name": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "product_id": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-machine-controllers\u0026tag=v4.8.0-202209302037.p0.g03dc426.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "product": { "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "product_id": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator\u0026tag=v4.8.0-202209211357.p0.gac8dcd9.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "product": { "name": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "product_id": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-monitoring-operator\u0026tag=v4.8.0-202209141316.p0.g2c4ac8d.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "product": { "name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "product_id": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8\u0026tag=v4.8.0-202210040817.p0.g583088e.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "product": { "name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "product_id": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel8\u0026tag=v4.8.0-202210040817.p0.gdceaf13.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "product": { "name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "product_id": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-static-ip-manager-rhel8\u0026tag=v4.8.0-202210040817.p0.gd2e40e3.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "product": { "name": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "product_id": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-console\u0026tag=v4.8.0-202209291426.p0.gafa51a7.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "product": { "name": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "product_id": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-hyperkube\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "product": { "name": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "product_id": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-pod\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "product": { "name": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "product_id": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-aws-machine-controllers\u0026tag=v4.8.0-202209190937.p0.g1a6124f.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "product": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8\u0026tag=v4.8.0-202210040817.p0.gd568517.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "product": { "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "product_id": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel8\u0026tag=v4.8.0-202209200547.p0.gc50d793.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "product": { "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "product_id": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-baremetal-operator-rhel8\u0026tag=v4.8.0-202209291426.p0.g117d47a.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "product_id": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "product": { "name": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "product_id": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-maven\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "product": { "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "product_id": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-nodejs-12-rhel8\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "product": { "name": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "product_id": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-machine-controllers\u0026tag=v4.8.0-202209302037.p0.g03dc426.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "product": { "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "product_id": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator\u0026tag=v4.8.0-202209211357.p0.gac8dcd9.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "product": { "name": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "product_id": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-monitoring-operator\u0026tag=v4.8.0-202209141316.p0.g2c4ac8d.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "product": { "name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "product_id": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-csi-driver-nfs-rhel8\u0026tag=v4.8.0-202210040817.p0.g583088e.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "product": { "name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "product_id": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel8\u0026tag=v4.8.0-202210040817.p0.gdceaf13.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "product": { "name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "product_id": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-static-ip-manager-rhel8\u0026tag=v4.8.0-202210040817.p0.gd2e40e3.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "product": { "name": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "product_id": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-console\u0026tag=v4.8.0-202209291426.p0.gafa51a7.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "product": { "name": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "product_id": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-hyperkube\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "product": { "name": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "product_id": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-pod\u0026tag=v4.8.0-202209201817.p0.g5cc9227.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "product": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "product_id": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-installer-rhel8\u0026tag=v4.8.0-202210040817.p0.gd568517.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "product": { "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "product_id": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel8\u0026tag=v4.8.0-202209200547.p0.gc50d793.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "product": { "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "product_id": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-baremetal-operator-rhel8\u0026tag=v4.8.0-202209291426.p0.g117d47a.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "product": { "name": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "product_id": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-base\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "product": { "name": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "product_id": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-maven\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } }, { "category": "product_version", "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "product": { "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "product_id": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "product_identification_helper": { "purl": "pkg:oci/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-jenkins-agent-nodejs-12-rhel8\u0026tag=v4.8.0-202210040817.p0.gca99ee6.assembly.stream" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64" }, "product_reference": "openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x" }, "product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64" }, "product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le" }, "product_reference": "openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64" }, "product_reference": "openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le" }, "product_reference": "openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x" }, "product_reference": "openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64" }, "product_reference": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le" }, "product_reference": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x" }, "product_reference": "openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le" }, "product_reference": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64" }, "product_reference": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" }, "product_reference": "openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64" }, "product_reference": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x" }, "product_reference": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le" }, "product_reference": "openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le" }, "product_reference": "openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64" }, "product_reference": "openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x" }, "product_reference": "openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64" }, "product_reference": "openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x" }, "product_reference": "openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le" }, "product_reference": "openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le" }, "product_reference": "openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64" }, "product_reference": "openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x" }, "product_reference": "openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le" }, "product_reference": "openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64" }, "product_reference": "openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64" }, "product_reference": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le" }, "product_reference": "openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le" }, "product_reference": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64" }, "product_reference": "openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x" }, "product_reference": "openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le" }, "product_reference": "openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x" }, "product_reference": "openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le" }, "product_reference": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x" }, "product_reference": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64" }, "product_reference": "openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le" }, "product_reference": "openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64 as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64" }, "product_reference": "openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "relates_to_product_reference": "8Base-RHOSE-4.8" }, { "category": "default_component_of", "full_product_name": { "name": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x as a component of Red Hat OpenShift Container Platform 4.8", "product_id": "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" }, "product_reference": "openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x", "relates_to_product_reference": "8Base-RHOSE-4.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-26945", "cwe": { "id": "CWE-77", "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)" }, "discovery_date": "2022-05-25T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2092928" } ], "notes": [ { "category": "description", "text": "A flaw was found in go-getter. This flaw allows an attacker to misuse go-getter to execute commands on the host. This action may be possible when symlink processing and path traversal are allowed.", "title": "Vulnerability description" }, { "category": "summary", "text": "go-getter: command injection vulnerability", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "known_not_affected": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-26945" }, { "category": "external", "summary": "RHBZ#2092928", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092928" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-26945", "url": "https://www.cve.org/CVERecord?id=CVE-2022-26945" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-26945", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26945" }, { "category": "external", "summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930", "url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930" } ], "release_date": "2022-05-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-10-13T07:44:51+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:6801" }, { "category": "workaround", "details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "go-getter: command injection vulnerability" }, { "cve": "CVE-2022-30321", "cwe": { "id": "CWE-229", "name": "Improper Handling of Values" }, "discovery_date": "2022-05-25T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2092918" } ], "notes": [ { "category": "description", "text": "A flaw was found in go-getter. Several vulnerabilities were identified in the way go-getter processes HTTP responses, response headers, and password-protected ZIP files. This flaw allows an attacker to bypass certain configuration settings and may lead to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "go-getter: unsafe download (issue 1 of 3)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "known_not_affected": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-30321" }, { "category": "external", "summary": "RHBZ#2092918", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092918" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-30321", "url": "https://www.cve.org/CVERecord?id=CVE-2022-30321" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30321", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30321" }, { "category": "external", "summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930", "url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930" } ], "release_date": "2022-05-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-10-13T07:44:51+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:6801" }, { "category": "workaround", "details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "go-getter: unsafe download (issue 1 of 3)" }, { "cve": "CVE-2022-30322", "cwe": { "id": "CWE-229", "name": "Improper Handling of Values" }, "discovery_date": "2022-05-25T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2092923" } ], "notes": [ { "category": "description", "text": "A flaw was found in go-getter. Several vulnerabilities were identified in the way go-getter processes HTTP responses, response headers, and password-protected ZIP files. This flaw allows an attacker to bypass certain configuration settings and may lead to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "go-getter: unsafe download (issue 2 of 3)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "known_not_affected": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-30322" }, { "category": "external", "summary": "RHBZ#2092923", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092923" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-30322", "url": "https://www.cve.org/CVERecord?id=CVE-2022-30322" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30322", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30322" }, { "category": "external", "summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930", "url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930" } ], "release_date": "2022-05-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-10-13T07:44:51+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:6801" }, { "category": "workaround", "details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "go-getter: unsafe download (issue 2 of 3)" }, { "cve": "CVE-2022-30323", "cwe": { "id": "CWE-229", "name": "Improper Handling of Values" }, "discovery_date": "2022-05-25T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2092925" } ], "notes": [ { "category": "description", "text": "A flaw was found in go-getter. Several vulnerabilities were identified in how go-getter processes HTTP responses, response headers, and password-protected ZIP files. This flaw allows an attacker to bypass certain configuration settings and may lead to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "go-getter: unsafe download (issue 3 of 3)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "known_not_affected": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-30323" }, { "category": "external", "summary": "RHBZ#2092925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-30323", "url": "https://www.cve.org/CVERecord?id=CVE-2022-30323" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30323", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30323" }, { "category": "external", "summary": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930", "url": "https://discuss.hashicorp.com/t/hcsec-2022-13-multiple-vulnerabilities-in-go-getter-library/39930" } ], "release_date": "2022-05-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-10-13T07:44:51+00:00", "details": "For OpenShift Container Platform 4.8 see the following documentation, which\nwill be updated shortly for this release, for important instructions on how\nto upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html\n\nDetails on how to access this content are available at\nhttps://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:6801" }, { "category": "workaround", "details": "The fix includes new configuration options to help limit the security exposure and have more secure defaults.", "product_ids": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "8Base-RHOSE-4.8:openshift4/ose-aws-machine-controllers@sha256:dc0172319aa0e9c41a23e7ea7488048391408fb7da03034fad5f78010a29445d_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:677b83ce159a04b1336db5e4dee19e556cf155312951f10231e444d6d26cdf5f_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:6896d63e1a8cfc1955e4d65d691cb9983a4b1792eff6b59832f68f737db6363f_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-installer-rhel8@sha256:e5896ac4427c59aad907601e423798d07163749cf4e70a1b7ff019d179bfa8cc_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:0c368ec77345e9a976ae46e9a7866559133c0dd2e7e23781ad6eedd965de879c_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:311951ad737cb0cf038803ca11ad26e7815186c840794e65b8a5f57a1a62291a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-machine-controllers@sha256:b8a74564d812ec3dc085a93252f7638a68ad8eb60ac6a90f4a38c1006fbf0fe6_s390x", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:420e898f1726d2588ef0aa4adec4d5f9bcdba8bfaf108be993b4ceb9a890c618_amd64", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:7956894f011cb850ff02bf9731ecba6c58e9873f1c564cf89a3f8967b14086dd_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-baremetal-runtimecfg-rhel8@sha256:fedb08b6d61aac48dc46d104b2a05606f9982c83d6d79069d69b2dd77083d770_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:1bc949bd7dd0cf14d9bc8e96476f3d90210d176dee41b1480e50ff6b62f94988_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:618b9d6adbf32cbe61ddbf1051f1eecc89b1b68308cebe028cf274f5163281ea_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-baremetal-operator-rhel8@sha256:78a2197cc3bd3e63b0ed2c7d6224b65650848aa4e19aa9a264d775cb68e6f34f_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:2e23d362f26072fed42f43163cbe4f3103a6c9df2e447edf67de2c3b15700b2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:3323d41850d4c2d3708228c338b110a836d8b6f977f4de71c61ec1dfff5f227c_s390x", "8Base-RHOSE-4.8:openshift4/ose-cluster-etcd-rhel8-operator@sha256:94766c7792bb27fe59c95eb5e717e607852ab68253bcfd978869be0d53b045f8_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:2d8d608c790581be9a2c5fb2fe15efc4233151dadfd34d7eb2f5a1783e57ce7a_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:6f3c2d35c634eb2636d5ca9de5d7b0c180150691d9565b1aacc2f1dc5f86ca8c_amd64", "8Base-RHOSE-4.8:openshift4/ose-cluster-monitoring-operator@sha256:a2614db88ebaa9bbf7944eec21ea939f05baac3267730cdbd2c99321e0868e4a_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:9deb18e262073e8f4d25813d051d70f109ac4a98a27b364176f5e1aa5b3e1546_amd64", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:ce8996bd61561b6eb84db238b0a24bb30ae4a4bf28fba41abc52f5ecc779fcae_s390x", "8Base-RHOSE-4.8:openshift4/ose-console@sha256:d6a64d0f4973cdb2e6ac1475d5925e76d851359b7ca8599452e05bbee3cdbed1_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:38184cded177c0831f933ff761f5f6e7cb12a873a5ddef8b217c2a077a213230_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-csi-driver-nfs-rhel8@sha256:dc0ff0b4013b08532376e02fb9c840d7b8ab840ea3e8b4e839165d1640c75d91_amd64", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:5ecb06f5d97192d3240d248fb5ffb103ce34c50cce18a96b397b41cb6fea38e0_s390x", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:7f27808dfa598909ba71a8981edc119f0060ff06dcb71b834777ab9875c8c313_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-hyperkube@sha256:a52a1297e0016e60da9bc70d8232520ab961a524e735ff59decf35d5f99d9424_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:9f93eeaa9f80f225f1647e3c3d74d990e57dc84434ca346f16340c469fa5ad2f_amd64", "8Base-RHOSE-4.8:openshift4/ose-ironic-machine-os-downloader-rhel8@sha256:a57a26445f102adf8eb909472855c5640d95a9720c0704acd60b7eccec96077c_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:037a10d640fca84b6cd4fbf099ed95cc275bce1375fb4463796a9bc792570ae3_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-ironic-static-ip-manager-rhel8@sha256:e00973468b0a11d7ae74d253161d57d22d18e0e9a8c4a8a1b7b9c7695df557a9_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1066771f5daddd5f986de718b69ee73b32b53b8a693398dee935d66c48ab0a56_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:1529065e76cbec778c38ca74e2591aa65ec73e5bbd746940dbba33f19436451f_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-base@sha256:9cbf6d3411b7b1c99da18baf745536f2d3d322cbe88461f853f8da20389701b2_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:52319884e7bbfc112b10f16036950a0473740af8d51f94702157198f442a3ebe_amd64", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:96e5b8b8589d3986c165d59d0026f2051a300cd8a17ea0c0cae3b9756f2c148e_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-maven@sha256:a577da407ea13557d373fb8fd388eb2413a236289d520ab74f405825fe236a65_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:09a3d9d9e08deb1d756ff60278c3a24ce2f23395ce8f2ef9bd8d8011a6741e8b_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:6121cb8041ad9759b0cd76935567390f779750792c75557e03145590bd2801f6_s390x", "8Base-RHOSE-4.8:openshift4/ose-jenkins-agent-nodejs-12-rhel8@sha256:cc0363d990bfff60a4d2735d0f8aeb2c1c27febf3af0e421f84fcd62fea7317a_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:0a46c0e2318afa641ff73046e5ec1586d65391be43258a93fba8e12f3850b1f4_ppc64le", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:d45d02c3a6f9bcaee28ba7232a9d054ae8ec9bfccd1a504a00c597997e75e126_amd64", "8Base-RHOSE-4.8:openshift4/ose-pod@sha256:f088051d11d1d4e0530a4cc7f0251f24322747bcc658b330517fdfccd44d48c3_s390x" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "go-getter: unsafe download (issue 3 of 3)" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.