rhsa-2022_8750
Vulnerability from csaf_redhat
Published
2022-12-01 21:09
Modified
2024-12-17 22:07
Summary
Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update
Notes
Topic
Red Hat OpenShift Virtualization release 4.11.1 is now available with updates to packages and images that fix several bugs and add enhancements.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
Security Fix(es):
* golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)
* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)
* golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)
* golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)
* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Cloning a Block DV to VM with Filesystem with not big enough size comes to endless loop - using pvc api (BZ#2033191)
* Restart of VM Pod causes SSH keys to be regenerated within VM (BZ#2087177)
* Import gzipped raw file causes image to be downloaded and uncompressed to TMPDIR (BZ#2089391)
* [4.11] VM Snapshot Restore hangs indefinitely when backed by a snapshotclass (BZ#2098225)
* Fedora version in DataImportCrons is not 'latest' (BZ#2102694)
* [4.11] Cloned VM's snapshot restore fails if the source VM disk is deleted (BZ#2109407)
* CNV introduces a compliance check fail in "ocp4-moderate" profile - routes-protected-by-tls (BZ#2110562)
* Nightly build: v4.11.0-578: index format was changed in 4.11 to file-based instead of sqlite-based (BZ#2112643)
* Unable to start windows VMs on PSI setups (BZ#2115371)
* [4.11.1]virt-launcher cannot be started on OCP 4.12 due to PodSecurity restricted:v1.24 (BZ#2128997)
* Mark Windows 11 as TechPreview (BZ#2129013)
* 4.11.1 rpms (BZ#2139453)
This advisory contains the following OpenShift Virtualization 4.11.1 images.
RHEL-8-CNV-4.11
virt-cdi-operator-container-v4.11.1-5
virt-cdi-uploadserver-container-v4.11.1-5
virt-cdi-apiserver-container-v4.11.1-5
virt-cdi-importer-container-v4.11.1-5
virt-cdi-controller-container-v4.11.1-5
virt-cdi-cloner-container-v4.11.1-5
virt-cdi-uploadproxy-container-v4.11.1-5
checkup-framework-container-v4.11.1-3
kubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.1-7
kubevirt-tekton-tasks-create-datavolume-container-v4.11.1-7
kubevirt-template-validator-container-v4.11.1-4
virt-handler-container-v4.11.1-5
hostpath-provisioner-operator-container-v4.11.1-4
virt-api-container-v4.11.1-5
vm-network-latency-checkup-container-v4.11.1-3
cluster-network-addons-operator-container-v4.11.1-5
virtio-win-container-v4.11.1-4
virt-launcher-container-v4.11.1-5
ovs-cni-marker-container-v4.11.1-5
hyperconverged-cluster-webhook-container-v4.11.1-7
virt-controller-container-v4.11.1-5
virt-artifacts-server-container-v4.11.1-5
kubevirt-tekton-tasks-modify-vm-template-container-v4.11.1-7
kubevirt-tekton-tasks-disk-virt-customize-container-v4.11.1-7
libguestfs-tools-container-v4.11.1-5
hostpath-provisioner-container-v4.11.1-4
kubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.1-7
kubevirt-tekton-tasks-copy-template-container-v4.11.1-7
cnv-containernetworking-plugins-container-v4.11.1-5
bridge-marker-container-v4.11.1-5
virt-operator-container-v4.11.1-5
hostpath-csi-driver-container-v4.11.1-4
kubevirt-tekton-tasks-create-vm-from-template-container-v4.11.1-7
kubemacpool-container-v4.11.1-5
hyperconverged-cluster-operator-container-v4.11.1-7
kubevirt-ssp-operator-container-v4.11.1-4
ovs-cni-plugin-container-v4.11.1-5
kubevirt-tekton-tasks-cleanup-vm-container-v4.11.1-7
kubevirt-tekton-tasks-operator-container-v4.11.1-2
cnv-must-gather-container-v4.11.1-8
kubevirt-console-plugin-container-v4.11.1-9
hco-bundle-registry-container-v4.11.1-49
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Virtualization release 4.11.1 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nSecurity Fix(es):\n\n* golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)\n\n* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)\n\n* golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)\n\n* golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)\n\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Cloning a Block DV to VM with Filesystem with not big enough size comes to endless loop - using pvc api (BZ#2033191)\n\n* Restart of VM Pod causes SSH keys to be regenerated within VM (BZ#2087177)\n\n* Import gzipped raw file causes image to be downloaded and uncompressed to TMPDIR (BZ#2089391)\n\n* [4.11] VM Snapshot Restore hangs indefinitely when backed by a snapshotclass (BZ#2098225)\n\n* Fedora version in DataImportCrons is not \u0027latest\u0027 (BZ#2102694)\n\n* [4.11] Cloned VM\u0027s snapshot restore fails if the source VM disk is deleted (BZ#2109407)\n\n* CNV introduces a compliance check fail in \"ocp4-moderate\" profile - routes-protected-by-tls (BZ#2110562)\n\n* Nightly build: v4.11.0-578: index format was changed in 4.11 to file-based instead of sqlite-based (BZ#2112643)\n\n* Unable to start windows VMs on PSI setups (BZ#2115371)\n\n* [4.11.1]virt-launcher cannot be started on OCP 4.12 due to PodSecurity restricted:v1.24 (BZ#2128997)\n\n* Mark Windows 11 as TechPreview (BZ#2129013)\n\n* 4.11.1 rpms (BZ#2139453)\n\nThis advisory contains the following OpenShift Virtualization 4.11.1 images.\n\nRHEL-8-CNV-4.11\n\nvirt-cdi-operator-container-v4.11.1-5\nvirt-cdi-uploadserver-container-v4.11.1-5\nvirt-cdi-apiserver-container-v4.11.1-5\nvirt-cdi-importer-container-v4.11.1-5\nvirt-cdi-controller-container-v4.11.1-5\nvirt-cdi-cloner-container-v4.11.1-5\nvirt-cdi-uploadproxy-container-v4.11.1-5\ncheckup-framework-container-v4.11.1-3\nkubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.1-7\nkubevirt-tekton-tasks-create-datavolume-container-v4.11.1-7\nkubevirt-template-validator-container-v4.11.1-4\nvirt-handler-container-v4.11.1-5\nhostpath-provisioner-operator-container-v4.11.1-4\nvirt-api-container-v4.11.1-5\nvm-network-latency-checkup-container-v4.11.1-3\ncluster-network-addons-operator-container-v4.11.1-5\nvirtio-win-container-v4.11.1-4\nvirt-launcher-container-v4.11.1-5\novs-cni-marker-container-v4.11.1-5\nhyperconverged-cluster-webhook-container-v4.11.1-7\nvirt-controller-container-v4.11.1-5\nvirt-artifacts-server-container-v4.11.1-5\nkubevirt-tekton-tasks-modify-vm-template-container-v4.11.1-7\nkubevirt-tekton-tasks-disk-virt-customize-container-v4.11.1-7\nlibguestfs-tools-container-v4.11.1-5\nhostpath-provisioner-container-v4.11.1-4\nkubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.1-7\nkubevirt-tekton-tasks-copy-template-container-v4.11.1-7\ncnv-containernetworking-plugins-container-v4.11.1-5\nbridge-marker-container-v4.11.1-5\nvirt-operator-container-v4.11.1-5\nhostpath-csi-driver-container-v4.11.1-4\nkubevirt-tekton-tasks-create-vm-from-template-container-v4.11.1-7\nkubemacpool-container-v4.11.1-5\nhyperconverged-cluster-operator-container-v4.11.1-7\nkubevirt-ssp-operator-container-v4.11.1-4\novs-cni-plugin-container-v4.11.1-5\nkubevirt-tekton-tasks-cleanup-vm-container-v4.11.1-7\nkubevirt-tekton-tasks-operator-container-v4.11.1-2\ncnv-must-gather-container-v4.11.1-8\nkubevirt-console-plugin-container-v4.11.1-9\nhco-bundle-registry-container-v4.11.1-49",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2022:8750",
"url": "https://access.redhat.com/errata/RHSA-2022:8750"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2033191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2033191"
},
{
"category": "external",
"summary": "2064857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064857"
},
{
"category": "external",
"summary": "2070772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2070772"
},
{
"category": "external",
"summary": "2077688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077688"
},
{
"category": "external",
"summary": "2077689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077689"
},
{
"category": "external",
"summary": "2087177",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2087177"
},
{
"category": "external",
"summary": "2089391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2089391"
},
{
"category": "external",
"summary": "2091856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2091856"
},
{
"category": "external",
"summary": "2092793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092793"
},
{
"category": "external",
"summary": "2098225",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2098225"
},
{
"category": "external",
"summary": "2100495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100495"
},
{
"category": "external",
"summary": "2102694",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2102694"
},
{
"category": "external",
"summary": "2109407",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2109407"
},
{
"category": "external",
"summary": "2110562",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2110562"
},
{
"category": "external",
"summary": "2112643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2112643"
},
{
"category": "external",
"summary": "2115371",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2115371"
},
{
"category": "external",
"summary": "2119613",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2119613"
},
{
"category": "external",
"summary": "2128554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128554"
},
{
"category": "external",
"summary": "2128872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128872"
},
{
"category": "external",
"summary": "2128997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128997"
},
{
"category": "external",
"summary": "2129013",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129013"
},
{
"category": "external",
"summary": "2129235",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129235"
},
{
"category": "external",
"summary": "2134668",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2134668"
},
{
"category": "external",
"summary": "2139453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2139453"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8750.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update",
"tracking": {
"current_release_date": "2024-12-17T22:07:19+00:00",
"generator": {
"date": "2024-12-17T22:07:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2022:8750",
"initial_release_date": "2022-12-01T21:09:40+00:00",
"revision_history": [
{
"date": "2022-12-01T21:09:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2022-12-01T21:09:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-17T22:07:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "CNV 4.11 for RHEL 8",
"product": {
"name": "CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:container_native_virtualization:4.11::el8"
}
}
}
],
"category": "product_family",
"name": "OpenShift Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"product": {
"name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"product_id": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker\u0026tag=v4.11.1-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"product": {
"name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"product_id": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"product_identification_helper": {
"purl": "pkg:oci/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/checkup-framework\u0026tag=v4.11.1-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"product": {
"name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"product_id": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator\u0026tag=v4.11.1-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"product": {
"name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"product_id": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins\u0026tag=v4.11.1-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"product": {
"name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"product_id": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-must-gather-rhel8\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"product": {
"name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"product_id": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hco-bundle-registry\u0026tag=v4.11.1-92"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"product": {
"name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"product_id": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver-rhel8\u0026tag=v4.11.1-5"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"product": {
"name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"product_id": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver\u0026tag=v4.11.1-5"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"product": {
"name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"product_id": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8\u0026tag=v4.11.1-5"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"product": {
"name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"product_id": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8-operator\u0026tag=v4.11.1-6"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"product": {
"name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"product_id": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-operator\u0026tag=v4.11.1-10"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"product": {
"name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"product_id": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-webhook-rhel8\u0026tag=v4.11.1-10"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"product": {
"name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"product_id": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool\u0026tag=v4.11.1-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"product_id": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin\u0026tag=v4.11.1-17"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"product_id": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ssp-operator\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-copy-template\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-datavolume\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-operator\u0026tag=v4.11.1-4"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"product_id": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status\u0026tag=v4.11.1-15"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"product": {
"name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"product_id": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-template-validator\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"product": {
"name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"product_id": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools\u0026tag=v4.11.1-11"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"product": {
"name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"product_id": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-marker\u0026tag=v4.11.1-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"product": {
"name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"product_id": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin\u0026tag=v4.11.1-8"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"product": {
"name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"product_id": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api\u0026tag=v4.11.1-11"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"product": {
"name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"product_id": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server\u0026tag=v4.11.1-11"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"product": {
"name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"product_id": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"product": {
"name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"product_id": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"product": {
"name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"product_id": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"product": {
"name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"product_id": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"product": {
"name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"product_id": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"product": {
"name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"product_id": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"product": {
"name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"product_id": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver\u0026tag=v4.11.1-7"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"product": {
"name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"product_id": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller\u0026tag=v4.11.1-11"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"product": {
"name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"product_id": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler\u0026tag=v4.11.1-11"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"product": {
"name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"product_id": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virtio-win\u0026tag=v4.11.1-6"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"product": {
"name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"product_id": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher\u0026tag=v4.11.1-11"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"product": {
"name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"product_id": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator\u0026tag=v4.11.1-11"
}
}
},
{
"category": "product_version",
"name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
"product": {
"name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
"product_id": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/vm-network-latency-checkup\u0026tag=v4.11.1-8"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64"
},
"product_reference": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64"
},
"product_reference": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64"
},
"product_reference": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64"
},
"product_reference": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64"
},
"product_reference": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64"
},
"product_reference": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64"
},
"product_reference": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64"
},
"product_reference": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64"
},
"product_reference": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64"
},
"product_reference": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64"
},
"product_reference": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64"
},
"product_reference": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64"
},
"product_reference": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64"
},
"product_reference": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64"
},
"product_reference": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64"
},
"product_reference": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64"
},
"product_reference": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64"
},
"product_reference": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64"
},
"product_reference": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64"
},
"product_reference": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64"
},
"product_reference": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64"
},
"product_reference": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64"
},
"product_reference": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64"
},
"product_reference": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64"
},
"product_reference": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64"
},
"product_reference": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64"
},
"product_reference": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64"
},
"product_reference": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64"
},
"product_reference": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64"
},
"product_reference": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64"
},
"product_reference": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64 as a component of CNV 4.11 for RHEL 8",
"product_id": "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
},
"product_reference": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
"relates_to_product_reference": "8Base-CNV-4.11"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-38561",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2022-06-23T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2100495"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: out-of-bounds read in golang.org/x/text/language leads to DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw may be triggered only by accepting untrusted user input to the vulnerable golang\u0027s library. The overall DoS attack vector depends directly on how the library\u0027s input is exposed by the consuming application, thus Red Hat rates impact as Moderate.\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) 2.5 version, the registration-operator, lighthouse-coredns, lighthouse-agent, gatekeeper-operator, and discovery-operator components are affected by this flaw, but the rest of the components are using an already patched version and are unaffected. For 2.4 and previous versions of Red Hat Advanced Cluster Management for Kubernetes (RHACM), most of the components are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64"
],
"known_not_affected": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2021-38561"
},
{
"category": "external",
"summary": "RHBZ#2100495",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100495"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2021-38561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-38561"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2021-0113",
"url": "https://pkg.go.dev/vuln/GO-2021-0113"
}
],
"release_date": "2021-08-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-12-01T21:09:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:8750"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: out-of-bounds read in golang.org/x/text/language leads to DoS"
},
{
"cve": "CVE-2022-24675",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2022-04-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2077688"
}
],
"notes": [
{
"category": "description",
"text": "A buffer overflow flaw was found in Golang\u0027s library encoding/pem. This flaw allows an attacker to use a large PEM input (more than 5 MB), causing a stack overflow in Decode, which leads to a loss of availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: encoding/pem: fix stack overflow in Decode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 7, 8 and 9 are affected, because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 7, hence, marked as Out-of-Support-Scope.\n\nRed Hat Developer Tools - Compilers (go-toolset-1.16-golang \u0026 go-toolset-1.17-golang), ships the vulnerable code and affected by this vulnerability.\n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
],
"known_not_affected": [
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-24675"
},
{
"category": "external",
"summary": "RHBZ#2077688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-24675",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24675"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24675",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24675"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8",
"url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
}
],
"release_date": "2022-04-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-12-01T21:09:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:8750"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: encoding/pem: fix stack overflow in Decode"
},
{
"cve": "CVE-2022-24921",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2022-03-16T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2064857"
}
],
"notes": [
{
"category": "description",
"text": "A stack overflow flaw was found in Golang\u0027s regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large regexps with deep nesting to the application. Triggering this flaw leads to a crash of the runtime, which causes a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: regexp: stack exhaustion via a deeply nested expression",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has been rated as a Moderate impact flaw because the exploitation of this flaw requires that an affected application accept arbitrarily long regexps from untrusted sources, which has inherent risks (even without this flaw), especially involving impacts to application availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64"
],
"known_not_affected": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-24921"
},
{
"category": "external",
"summary": "RHBZ#2064857",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064857"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-24921",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24921"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24921",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24921"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk",
"url": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk"
}
],
"release_date": "2022-03-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-12-01T21:09:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:8750"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: regexp: stack exhaustion via a deeply nested expression"
},
{
"cve": "CVE-2022-28327",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2022-04-21T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2077689"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Golang\u0027s crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256().ScalarMult or P256().ScalarBaseMult to panic, leading to a loss of availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/elliptic: panic caused by oversized scalar",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Enterprise Linux 7, 8 and 9 are affected, because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 7, hence, marked as Out-of-Support-Scope. \n\nRed Hat Developer Tools - Compilers (go-toolset-1.16-golang \u0026 go-toolset-1.17-golang), ships the vulnerable code and affected by this vulnerability.\n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
],
"known_not_affected": [
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-28327"
},
{
"category": "external",
"summary": "RHBZ#2077689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-28327",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28327"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-28327",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28327"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8",
"url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
}
],
"release_date": "2022-04-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-12-01T21:09:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:8750"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: crypto/elliptic: panic caused by oversized scalar"
},
{
"cve": "CVE-2022-30629",
"cwe": {
"id": "CWE-331",
"name": "Insufficient Entropy"
},
"discovery_date": "2022-06-02T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2092793"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls golang package. When session tickets are generated by crypto/tls, it is missing the ticket expiration. This issue may allow an attacker to observe the TLS handshakes to correlate successive connections during session resumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/tls: session tickets lack random ticket_age_add",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64"
],
"known_not_affected": [
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-30629"
},
{
"category": "external",
"summary": "RHBZ#2092793",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092793"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-30629",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30629"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30629",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30629"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg",
"url": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg"
}
],
"release_date": "2022-06-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2022-12-01T21:09:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2022:8750"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
"8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
"8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
"8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
"8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
"8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
"8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
"8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
"8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
"8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
"8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
"8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
"8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "golang: crypto/tls: session tickets lack random ticket_age_add"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.