rhsa-2022_8750
Vulnerability from csaf_redhat
Published
2022-12-01 21:09
Modified
2024-11-13 23:51
Summary
Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update
Notes
Topic
Red Hat OpenShift Virtualization release 4.11.1 is now available with updates to packages and images that fix several bugs and add enhancements.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
Security Fix(es):
* golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)
* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)
* golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)
* golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)
* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Cloning a Block DV to VM with Filesystem with not big enough size comes to endless loop - using pvc api (BZ#2033191)
* Restart of VM Pod causes SSH keys to be regenerated within VM (BZ#2087177)
* Import gzipped raw file causes image to be downloaded and uncompressed to TMPDIR (BZ#2089391)
* [4.11] VM Snapshot Restore hangs indefinitely when backed by a snapshotclass (BZ#2098225)
* Fedora version in DataImportCrons is not 'latest' (BZ#2102694)
* [4.11] Cloned VM's snapshot restore fails if the source VM disk is deleted (BZ#2109407)
* CNV introduces a compliance check fail in "ocp4-moderate" profile - routes-protected-by-tls (BZ#2110562)
* Nightly build: v4.11.0-578: index format was changed in 4.11 to file-based instead of sqlite-based (BZ#2112643)
* Unable to start windows VMs on PSI setups (BZ#2115371)
* [4.11.1]virt-launcher cannot be started on OCP 4.12 due to PodSecurity restricted:v1.24 (BZ#2128997)
* Mark Windows 11 as TechPreview (BZ#2129013)
* 4.11.1 rpms (BZ#2139453)
This advisory contains the following OpenShift Virtualization 4.11.1 images.
RHEL-8-CNV-4.11
virt-cdi-operator-container-v4.11.1-5
virt-cdi-uploadserver-container-v4.11.1-5
virt-cdi-apiserver-container-v4.11.1-5
virt-cdi-importer-container-v4.11.1-5
virt-cdi-controller-container-v4.11.1-5
virt-cdi-cloner-container-v4.11.1-5
virt-cdi-uploadproxy-container-v4.11.1-5
checkup-framework-container-v4.11.1-3
kubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.1-7
kubevirt-tekton-tasks-create-datavolume-container-v4.11.1-7
kubevirt-template-validator-container-v4.11.1-4
virt-handler-container-v4.11.1-5
hostpath-provisioner-operator-container-v4.11.1-4
virt-api-container-v4.11.1-5
vm-network-latency-checkup-container-v4.11.1-3
cluster-network-addons-operator-container-v4.11.1-5
virtio-win-container-v4.11.1-4
virt-launcher-container-v4.11.1-5
ovs-cni-marker-container-v4.11.1-5
hyperconverged-cluster-webhook-container-v4.11.1-7
virt-controller-container-v4.11.1-5
virt-artifacts-server-container-v4.11.1-5
kubevirt-tekton-tasks-modify-vm-template-container-v4.11.1-7
kubevirt-tekton-tasks-disk-virt-customize-container-v4.11.1-7
libguestfs-tools-container-v4.11.1-5
hostpath-provisioner-container-v4.11.1-4
kubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.1-7
kubevirt-tekton-tasks-copy-template-container-v4.11.1-7
cnv-containernetworking-plugins-container-v4.11.1-5
bridge-marker-container-v4.11.1-5
virt-operator-container-v4.11.1-5
hostpath-csi-driver-container-v4.11.1-4
kubevirt-tekton-tasks-create-vm-from-template-container-v4.11.1-7
kubemacpool-container-v4.11.1-5
hyperconverged-cluster-operator-container-v4.11.1-7
kubevirt-ssp-operator-container-v4.11.1-4
ovs-cni-plugin-container-v4.11.1-5
kubevirt-tekton-tasks-cleanup-vm-container-v4.11.1-7
kubevirt-tekton-tasks-operator-container-v4.11.1-2
cnv-must-gather-container-v4.11.1-8
kubevirt-console-plugin-container-v4.11.1-9
hco-bundle-registry-container-v4.11.1-49
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Virtualization release 4.11.1 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nSecurity Fix(es):\n\n* golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)\n\n* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)\n\n* golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)\n\n* golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)\n\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Cloning a Block DV to VM with Filesystem with not big enough size comes to endless loop - using pvc api (BZ#2033191)\n\n* Restart of VM Pod causes SSH keys to be regenerated within VM (BZ#2087177)\n\n* Import gzipped raw file causes image to be downloaded and uncompressed to TMPDIR (BZ#2089391)\n\n* [4.11] VM Snapshot Restore hangs indefinitely when backed by a snapshotclass (BZ#2098225)\n\n* Fedora version in DataImportCrons is not \u0027latest\u0027 (BZ#2102694)\n\n* [4.11] Cloned VM\u0027s snapshot restore fails if the source VM disk is deleted (BZ#2109407)\n\n* CNV introduces a compliance check fail in \"ocp4-moderate\" profile - routes-protected-by-tls (BZ#2110562)\n\n* Nightly build: v4.11.0-578: index format was changed in 4.11 to file-based instead of sqlite-based (BZ#2112643)\n\n* Unable to start windows VMs on PSI setups (BZ#2115371)\n\n* [4.11.1]virt-launcher cannot be started on OCP 4.12 due to PodSecurity restricted:v1.24 (BZ#2128997)\n\n* Mark Windows 11 as TechPreview (BZ#2129013)\n\n* 4.11.1 rpms (BZ#2139453)\n\nThis advisory contains the following OpenShift Virtualization 4.11.1 images.\n\nRHEL-8-CNV-4.11\n\nvirt-cdi-operator-container-v4.11.1-5\nvirt-cdi-uploadserver-container-v4.11.1-5\nvirt-cdi-apiserver-container-v4.11.1-5\nvirt-cdi-importer-container-v4.11.1-5\nvirt-cdi-controller-container-v4.11.1-5\nvirt-cdi-cloner-container-v4.11.1-5\nvirt-cdi-uploadproxy-container-v4.11.1-5\ncheckup-framework-container-v4.11.1-3\nkubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.1-7\nkubevirt-tekton-tasks-create-datavolume-container-v4.11.1-7\nkubevirt-template-validator-container-v4.11.1-4\nvirt-handler-container-v4.11.1-5\nhostpath-provisioner-operator-container-v4.11.1-4\nvirt-api-container-v4.11.1-5\nvm-network-latency-checkup-container-v4.11.1-3\ncluster-network-addons-operator-container-v4.11.1-5\nvirtio-win-container-v4.11.1-4\nvirt-launcher-container-v4.11.1-5\novs-cni-marker-container-v4.11.1-5\nhyperconverged-cluster-webhook-container-v4.11.1-7\nvirt-controller-container-v4.11.1-5\nvirt-artifacts-server-container-v4.11.1-5\nkubevirt-tekton-tasks-modify-vm-template-container-v4.11.1-7\nkubevirt-tekton-tasks-disk-virt-customize-container-v4.11.1-7\nlibguestfs-tools-container-v4.11.1-5\nhostpath-provisioner-container-v4.11.1-4\nkubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.1-7\nkubevirt-tekton-tasks-copy-template-container-v4.11.1-7\ncnv-containernetworking-plugins-container-v4.11.1-5\nbridge-marker-container-v4.11.1-5\nvirt-operator-container-v4.11.1-5\nhostpath-csi-driver-container-v4.11.1-4\nkubevirt-tekton-tasks-create-vm-from-template-container-v4.11.1-7\nkubemacpool-container-v4.11.1-5\nhyperconverged-cluster-operator-container-v4.11.1-7\nkubevirt-ssp-operator-container-v4.11.1-4\novs-cni-plugin-container-v4.11.1-5\nkubevirt-tekton-tasks-cleanup-vm-container-v4.11.1-7\nkubevirt-tekton-tasks-operator-container-v4.11.1-2\ncnv-must-gather-container-v4.11.1-8\nkubevirt-console-plugin-container-v4.11.1-9\nhco-bundle-registry-container-v4.11.1-49", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2022:8750", "url": "https://access.redhat.com/errata/RHSA-2022:8750" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "2033191", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2033191" }, { "category": "external", "summary": "2064857", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064857" }, { "category": "external", "summary": "2070772", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2070772" }, { "category": "external", "summary": "2077688", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077688" }, { "category": "external", "summary": "2077689", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077689" }, { "category": "external", "summary": "2087177", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2087177" }, { "category": "external", "summary": "2089391", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2089391" }, { "category": "external", "summary": "2091856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2091856" }, { "category": "external", "summary": "2092793", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092793" }, { "category": "external", "summary": "2098225", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2098225" }, { "category": "external", "summary": "2100495", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100495" }, { "category": "external", "summary": "2102694", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2102694" }, { "category": "external", "summary": "2109407", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2109407" }, { "category": "external", "summary": "2110562", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2110562" }, { "category": "external", "summary": "2112643", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2112643" }, { "category": "external", "summary": "2115371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2115371" }, { "category": "external", "summary": "2119613", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2119613" }, { "category": "external", "summary": "2128554", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128554" }, { "category": "external", "summary": "2128872", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128872" }, { "category": "external", "summary": "2128997", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128997" }, { "category": "external", "summary": "2129013", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129013" }, { "category": "external", "summary": "2129235", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129235" }, { "category": "external", "summary": "2134668", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2134668" }, { "category": "external", "summary": "2139453", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2139453" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8750.json" } ], "title": "Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update", "tracking": { "current_release_date": "2024-11-13T23:51:40+00:00", "generator": { "date": "2024-11-13T23:51:40+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2022:8750", "initial_release_date": "2022-12-01T21:09:40+00:00", "revision_history": [ { "date": "2022-12-01T21:09:40+00:00", "number": "1", "summary": "Initial version" }, { "date": "2022-12-01T21:09:40+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-13T23:51:40+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "CNV 4.11 for RHEL 8", "product": { "name": "CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11", "product_identification_helper": { "cpe": "cpe:/a:redhat:container_native_virtualization:4.11::el8" } } } ], "category": "product_family", "name": "OpenShift Virtualization" }, { "branches": [ { "category": "product_version", "name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "product": { "name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "product_id": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "product_identification_helper": { "purl": "pkg:oci/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker\u0026tag=v4.11.1-8" } } }, { "category": "product_version", "name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "product": { "name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "product_id": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "product_identification_helper": { "purl": "pkg:oci/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/checkup-framework\u0026tag=v4.11.1-8" } } }, { "category": "product_version", "name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "product": { "name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "product_id": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "product_identification_helper": { "purl": "pkg:oci/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator\u0026tag=v4.11.1-8" } } }, { "category": "product_version", "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "product": { "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "product_id": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "product_identification_helper": { "purl": "pkg:oci/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins\u0026tag=v4.11.1-8" } } }, { "category": "product_version", "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "product": { "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "product_id": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "product_identification_helper": { "purl": "pkg:oci/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-must-gather-rhel8\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "product": { "name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "product_id": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "product_identification_helper": { "purl": "pkg:oci/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hco-bundle-registry\u0026tag=v4.11.1-92" } } }, { "category": "product_version", "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "product": { "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "product_id": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "product_identification_helper": { "purl": "pkg:oci/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver-rhel8\u0026tag=v4.11.1-5" } } }, { "category": "product_version", "name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "product": { "name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "product_id": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "product_identification_helper": { "purl": "pkg:oci/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver\u0026tag=v4.11.1-5" } } }, { "category": "product_version", "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "product": { "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "product_id": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "product_identification_helper": { "purl": "pkg:oci/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8\u0026tag=v4.11.1-5" } } }, { "category": "product_version", "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "product": { "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "product_id": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "product_identification_helper": { "purl": "pkg:oci/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8-operator\u0026tag=v4.11.1-6" } } }, { "category": "product_version", "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "product": { "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "product_id": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "product_identification_helper": { "purl": "pkg:oci/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-operator\u0026tag=v4.11.1-10" } } }, { "category": "product_version", "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "product": { "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "product_id": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "product_identification_helper": { "purl": "pkg:oci/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-webhook-rhel8\u0026tag=v4.11.1-10" } } }, { "category": "product_version", "name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "product": { "name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "product_id": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "product_identification_helper": { "purl": "pkg:oci/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool\u0026tag=v4.11.1-8" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "product": { "name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "product_id": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin\u0026tag=v4.11.1-17" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "product": { "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "product_id": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ssp-operator\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-copy-template\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-datavolume\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-operator\u0026tag=v4.11.1-4" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "product": { "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "product_id": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status\u0026tag=v4.11.1-15" } } }, { "category": "product_version", "name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "product": { "name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "product_id": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "product_identification_helper": { "purl": "pkg:oci/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-template-validator\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "product": { "name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "product_id": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "product_identification_helper": { "purl": "pkg:oci/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools\u0026tag=v4.11.1-11" } } }, { "category": "product_version", "name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "product": { "name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "product_id": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "product_identification_helper": { "purl": "pkg:oci/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-marker\u0026tag=v4.11.1-8" } } }, { "category": "product_version", "name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "product": { "name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "product_id": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "product_identification_helper": { "purl": "pkg:oci/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin\u0026tag=v4.11.1-8" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "product": { "name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "product_id": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api\u0026tag=v4.11.1-11" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "product": { "name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "product_id": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server\u0026tag=v4.11.1-11" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "product": { "name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "product_id": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "product": { "name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "product_id": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "product": { "name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "product_id": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "product": { "name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "product_id": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "product": { "name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "product_id": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "product": { "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "product_id": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "product": { "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "product_id": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver\u0026tag=v4.11.1-7" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "product": { "name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "product_id": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller\u0026tag=v4.11.1-11" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "product": { "name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "product_id": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler\u0026tag=v4.11.1-11" } } }, { "category": "product_version", "name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "product": { "name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "product_id": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "product_identification_helper": { "purl": "pkg:oci/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virtio-win\u0026tag=v4.11.1-6" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "product": { "name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "product_id": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher\u0026tag=v4.11.1-11" } } }, { "category": "product_version", "name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "product": { "name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "product_id": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "product_identification_helper": { "purl": "pkg:oci/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator\u0026tag=v4.11.1-11" } } }, { "category": "product_version", "name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64", "product": { "name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64", "product_id": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64", "product_identification_helper": { "purl": "pkg:oci/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/vm-network-latency-checkup\u0026tag=v4.11.1-8" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64" }, "product_reference": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64" }, "product_reference": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64" }, "product_reference": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64" }, "product_reference": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64" }, "product_reference": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64" }, "product_reference": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64" }, "product_reference": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64" }, "product_reference": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64" }, "product_reference": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64" }, "product_reference": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64" }, "product_reference": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64" }, "product_reference": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64" }, "product_reference": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64" }, "product_reference": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64" }, "product_reference": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64" }, "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64" }, "product_reference": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64" }, "product_reference": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64" }, "product_reference": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64" }, "product_reference": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64" }, "product_reference": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64" }, "product_reference": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64" }, "product_reference": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64" }, "product_reference": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64" }, "product_reference": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64" }, "product_reference": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64" }, "product_reference": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64" }, "product_reference": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64" }, "product_reference": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64" }, "product_reference": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64" }, "product_reference": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64" }, "product_reference": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64" }, "product_reference": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64" }, "product_reference": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "relates_to_product_reference": "8Base-CNV-4.11" }, { "category": "default_component_of", "full_product_name": { "name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64 as a component of CNV 4.11 for RHEL 8", "product_id": "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" }, "product_reference": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64", "relates_to_product_reference": "8Base-CNV-4.11" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-38561", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2022-06-23T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2100495" } ], "notes": [ { "category": "description", "text": "A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: out-of-bounds read in golang.org/x/text/language leads to DoS", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw may be triggered only by accepting untrusted user input to the vulnerable golang\u0027s library. The overall DoS attack vector depends directly on how the library\u0027s input is exposed by the consuming application, thus Red Hat rates impact as Moderate.\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) 2.5 version, the registration-operator, lighthouse-coredns, lighthouse-agent, gatekeeper-operator, and discovery-operator components are affected by this flaw, but the rest of the components are using an already patched version and are unaffected. For 2.4 and previous versions of Red Hat Advanced Cluster Management for Kubernetes (RHACM), most of the components are affected.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64" ], "known_not_affected": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-38561" }, { "category": "external", "summary": "RHBZ#2100495", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100495" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-38561", "url": "https://www.cve.org/CVERecord?id=CVE-2021-38561" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561" }, { "category": "external", "summary": "https://pkg.go.dev/vuln/GO-2021-0113", "url": "https://pkg.go.dev/vuln/GO-2021-0113" } ], "release_date": "2021-08-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-12-01T21:09:40+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:8750" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: out-of-bounds read in golang.org/x/text/language leads to DoS" }, { "cve": "CVE-2022-24675", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2022-04-21T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2077688" } ], "notes": [ { "category": "description", "text": "A buffer overflow flaw was found in Golang\u0027s library encoding/pem. This flaw allows an attacker to use a large PEM input (more than 5 MB), causing a stack overflow in Decode, which leads to a loss of availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: encoding/pem: fix stack overflow in Decode", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 7, 8 and 9 are affected, because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 7, hence, marked as Out-of-Support-Scope.\n\nRed Hat Developer Tools - Compilers (go-toolset-1.16-golang \u0026 go-toolset-1.17-golang), ships the vulnerable code and affected by this vulnerability.\n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ], "known_not_affected": [ "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-24675" }, { "category": "external", "summary": "RHBZ#2077688", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077688" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24675", "url": "https://www.cve.org/CVERecord?id=CVE-2022-24675" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24675", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24675" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8", "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8" } ], "release_date": "2022-04-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-12-01T21:09:40+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:8750" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: encoding/pem: fix stack overflow in Decode" }, { "cve": "CVE-2022-24921", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2022-03-16T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2064857" } ], "notes": [ { "category": "description", "text": "A stack overflow flaw was found in Golang\u0027s regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large regexps with deep nesting to the application. Triggering this flaw leads to a crash of the runtime, which causes a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: regexp: stack exhaustion via a deeply nested expression", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has been rated as a Moderate impact flaw because the exploitation of this flaw requires that an affected application accept arbitrarily long regexps from untrusted sources, which has inherent risks (even without this flaw), especially involving impacts to application availability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64" ], "known_not_affected": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-24921" }, { "category": "external", "summary": "RHBZ#2064857", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064857" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24921", "url": "https://www.cve.org/CVERecord?id=CVE-2022-24921" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24921", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24921" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk", "url": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk" } ], "release_date": "2022-03-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-12-01T21:09:40+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:8750" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: regexp: stack exhaustion via a deeply nested expression" }, { "cve": "CVE-2022-28327", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2022-04-21T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2077689" } ], "notes": [ { "category": "description", "text": "An integer overflow flaw was found in Golang\u0027s crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256().ScalarMult or P256().ScalarBaseMult to panic, leading to a loss of availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: crypto/elliptic: panic caused by oversized scalar", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 7, 8 and 9 are affected, because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 7, hence, marked as Out-of-Support-Scope. \n\nRed Hat Developer Tools - Compilers (go-toolset-1.16-golang \u0026 go-toolset-1.17-golang), ships the vulnerable code and affected by this vulnerability.\n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ], "known_not_affected": [ "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-28327" }, { "category": "external", "summary": "RHBZ#2077689", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077689" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-28327", "url": "https://www.cve.org/CVERecord?id=CVE-2022-28327" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-28327", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28327" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8", "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8" } ], "release_date": "2022-04-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-12-01T21:09:40+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:8750" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "golang: crypto/elliptic: panic caused by oversized scalar" }, { "cve": "CVE-2022-30629", "cwe": { "id": "CWE-331", "name": "Insufficient Entropy" }, "discovery_date": "2022-06-02T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2092793" } ], "notes": [ { "category": "description", "text": "A flaw was found in the crypto/tls golang package. When session tickets are generated by crypto/tls, it is missing the ticket expiration. This issue may allow an attacker to observe the TLS handshakes to correlate successive connections during session resumption.", "title": "Vulnerability description" }, { "category": "summary", "text": "golang: crypto/tls: session tickets lack random ticket_age_add", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64" ], "known_not_affected": [ "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64", "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64", "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64", "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64", "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64", "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64", "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64", "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-30629" }, { "category": "external", "summary": "RHBZ#2092793", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092793" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-30629", "url": "https://www.cve.org/CVERecord?id=CVE-2022-30629" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30629", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30629" }, { "category": "external", "summary": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg", "url": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg" } ], "release_date": "2022-06-02T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-12-01T21:09:40+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:8750" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64", "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64", "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64", "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64", "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64", "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "golang: crypto/tls: session tickets lack random ticket_age_add" } ] }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.