Vulnerability-Lookup

RHSA-2022_8750

Vulnerability from csaf_redhat - Published: 2022-12-01 21:09 - Updated: 2024-12-17 22:07

Summary

Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update

Severity

Moderate

Notes

Topic: Red Hat OpenShift Virtualization release 4.11.1 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. Security Fix(es): * golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561) * golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675) * golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921) * golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327) * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Cloning a Block DV to VM with Filesystem with not big enough size comes to endless loop - using pvc api (BZ#2033191) * Restart of VM Pod causes SSH keys to be regenerated within VM (BZ#2087177) * Import gzipped raw file causes image to be downloaded and uncompressed to TMPDIR (BZ#2089391) * [4.11] VM Snapshot Restore hangs indefinitely when backed by a snapshotclass (BZ#2098225) * Fedora version in DataImportCrons is not 'latest' (BZ#2102694) * [4.11] Cloned VM's snapshot restore fails if the source VM disk is deleted (BZ#2109407) * CNV introduces a compliance check fail in "ocp4-moderate" profile - routes-protected-by-tls (BZ#2110562) * Nightly build: v4.11.0-578: index format was changed in 4.11 to file-based instead of sqlite-based (BZ#2112643) * Unable to start windows VMs on PSI setups (BZ#2115371) * [4.11.1]virt-launcher cannot be started on OCP 4.12 due to PodSecurity restricted:v1.24 (BZ#2128997) * Mark Windows 11 as TechPreview (BZ#2129013) * 4.11.1 rpms (BZ#2139453) This advisory contains the following OpenShift Virtualization 4.11.1 images. RHEL-8-CNV-4.11 virt-cdi-operator-container-v4.11.1-5 virt-cdi-uploadserver-container-v4.11.1-5 virt-cdi-apiserver-container-v4.11.1-5 virt-cdi-importer-container-v4.11.1-5 virt-cdi-controller-container-v4.11.1-5 virt-cdi-cloner-container-v4.11.1-5 virt-cdi-uploadproxy-container-v4.11.1-5 checkup-framework-container-v4.11.1-3 kubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.1-7 kubevirt-tekton-tasks-create-datavolume-container-v4.11.1-7 kubevirt-template-validator-container-v4.11.1-4 virt-handler-container-v4.11.1-5 hostpath-provisioner-operator-container-v4.11.1-4 virt-api-container-v4.11.1-5 vm-network-latency-checkup-container-v4.11.1-3 cluster-network-addons-operator-container-v4.11.1-5 virtio-win-container-v4.11.1-4 virt-launcher-container-v4.11.1-5 ovs-cni-marker-container-v4.11.1-5 hyperconverged-cluster-webhook-container-v4.11.1-7 virt-controller-container-v4.11.1-5 virt-artifacts-server-container-v4.11.1-5 kubevirt-tekton-tasks-modify-vm-template-container-v4.11.1-7 kubevirt-tekton-tasks-disk-virt-customize-container-v4.11.1-7 libguestfs-tools-container-v4.11.1-5 hostpath-provisioner-container-v4.11.1-4 kubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.1-7 kubevirt-tekton-tasks-copy-template-container-v4.11.1-7 cnv-containernetworking-plugins-container-v4.11.1-5 bridge-marker-container-v4.11.1-5 virt-operator-container-v4.11.1-5 hostpath-csi-driver-container-v4.11.1-4 kubevirt-tekton-tasks-create-vm-from-template-container-v4.11.1-7 kubemacpool-container-v4.11.1-5 hyperconverged-cluster-operator-container-v4.11.1-7 kubevirt-ssp-operator-container-v4.11.1-4 ovs-cni-plugin-container-v4.11.1-5 kubevirt-tekton-tasks-cleanup-vm-container-v4.11.1-7 kubevirt-tekton-tasks-operator-container-v4.11.1-2 cnv-must-gather-container-v4.11.1-8 kubevirt-console-plugin-container-v4.11.1-9 hco-bundle-registry-container-v4.11.1-49

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2021-38561

A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64		—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64		—	Vendor Fix fix

Known not affected 41 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64		—

Threats

Impact Moderate

CVE-2022-24675

A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a large PEM input (more than 5 MB), causing a stack overflow in Decode, which leads to a loss of availability.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 39 products

Product	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64	—	Vendor Fix fix

Known not affected 4 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64		—

Threats

Impact Moderate

CVE-2022-24921

A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large regexps with deep nesting to the application. Triggering this flaw leads to a crash of the runtime, which causes a denial of service.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64	—	Vendor Fix fix

Known not affected 35 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64		—

Threats

Impact Moderate

CVE-2022-28327

An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256().ScalarMult or P256().ScalarBaseMult to panic, leading to a loss of availability.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 42 products

Product	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64	—	Vendor Fix fix

Known not affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64		—

Threats

Impact Moderate

CVE-2022-30629

A flaw was found in the crypto/tls golang package. When session tickets are generated by crypto/tls, it is missing the ticket expiration. This issue may allow an attacker to observe the TLS handshakes to correlate successive connections during session resumption.

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-331 - Insufficient Entropy

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64	—	Vendor Fix fix
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64	—	Vendor Fix fix

Known not affected 36 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64		—
Unresolved product id: 8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64		—

Threats

Impact Low

References

51 references

URL	Category
https://access.redhat.com/errata/RHSA-2022:8750	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2033191	external
https://bugzilla.redhat.com/show_bug.cgi?id=2064857	external
https://bugzilla.redhat.com/show_bug.cgi?id=2070772	external
https://bugzilla.redhat.com/show_bug.cgi?id=2077688	external
https://bugzilla.redhat.com/show_bug.cgi?id=2077689	external
https://bugzilla.redhat.com/show_bug.cgi?id=2087177	external
https://bugzilla.redhat.com/show_bug.cgi?id=2089391	external
https://bugzilla.redhat.com/show_bug.cgi?id=2091856	external
https://bugzilla.redhat.com/show_bug.cgi?id=2092793	external
https://bugzilla.redhat.com/show_bug.cgi?id=2098225	external
https://bugzilla.redhat.com/show_bug.cgi?id=2100495	external
https://bugzilla.redhat.com/show_bug.cgi?id=2102694	external
https://bugzilla.redhat.com/show_bug.cgi?id=2109407	external
https://bugzilla.redhat.com/show_bug.cgi?id=2110562	external
https://bugzilla.redhat.com/show_bug.cgi?id=2112643	external
https://bugzilla.redhat.com/show_bug.cgi?id=2115371	external
https://bugzilla.redhat.com/show_bug.cgi?id=2119613	external
https://bugzilla.redhat.com/show_bug.cgi?id=2128554	external
https://bugzilla.redhat.com/show_bug.cgi?id=2128872	external
https://bugzilla.redhat.com/show_bug.cgi?id=2128997	external
https://bugzilla.redhat.com/show_bug.cgi?id=2129013	external
https://bugzilla.redhat.com/show_bug.cgi?id=2129235	external
https://bugzilla.redhat.com/show_bug.cgi?id=2134668	external
https://bugzilla.redhat.com/show_bug.cgi?id=2139453	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2021-38561	self
https://bugzilla.redhat.com/show_bug.cgi?id=2100495	external
https://www.cve.org/CVERecord?id=CVE-2021-38561	external
https://nvd.nist.gov/vuln/detail/CVE-2021-38561	external
https://pkg.go.dev/vuln/GO-2021-0113	external
https://access.redhat.com/security/cve/CVE-2022-24675	self
https://bugzilla.redhat.com/show_bug.cgi?id=2077688	external
https://www.cve.org/CVERecord?id=CVE-2022-24675	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24675	external
https://groups.google.com/g/golang-announce/c/oec…	external
https://access.redhat.com/security/cve/CVE-2022-24921	self
https://bugzilla.redhat.com/show_bug.cgi?id=2064857	external
https://www.cve.org/CVERecord?id=CVE-2022-24921	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24921	external
https://groups.google.com/g/golang-announce/c/RP1…	external
https://access.redhat.com/security/cve/CVE-2022-28327	self
https://bugzilla.redhat.com/show_bug.cgi?id=2077689	external
https://www.cve.org/CVERecord?id=CVE-2022-28327	external
https://nvd.nist.gov/vuln/detail/CVE-2022-28327	external
https://access.redhat.com/security/cve/CVE-2022-30629	self
https://bugzilla.redhat.com/show_bug.cgi?id=2092793	external
https://www.cve.org/CVERecord?id=CVE-2022-30629	external
https://nvd.nist.gov/vuln/detail/CVE-2022-30629	external
https://groups.google.com/g/golang-announce/c/TzI…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat OpenShift Virtualization release 4.11.1 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenShift Virtualization is Red Hat\u0027s virtualization solution designed for Red Hat OpenShift Container Platform.\n\nSecurity Fix(es):\n\n* golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)\n\n* golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)\n\n* golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)\n\n* golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)\n\n* golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Cloning a Block DV to VM with Filesystem with not big enough size comes to endless loop - using pvc api (BZ#2033191)\n\n* Restart of VM Pod causes SSH keys to be regenerated within VM (BZ#2087177)\n\n* Import gzipped raw file causes image to be downloaded and uncompressed to TMPDIR (BZ#2089391)\n\n* [4.11] VM Snapshot Restore hangs indefinitely when backed by a snapshotclass (BZ#2098225)\n\n* Fedora version in DataImportCrons is not \u0027latest\u0027 (BZ#2102694)\n\n* [4.11] Cloned VM\u0027s snapshot restore fails if the source VM disk is deleted (BZ#2109407)\n\n* CNV introduces a compliance check fail in \"ocp4-moderate\" profile - routes-protected-by-tls (BZ#2110562)\n\n* Nightly build: v4.11.0-578: index format was changed in 4.11 to file-based instead of sqlite-based (BZ#2112643)\n\n* Unable to start windows VMs on PSI setups (BZ#2115371)\n\n* [4.11.1]virt-launcher cannot be started on OCP 4.12 due to PodSecurity restricted:v1.24 (BZ#2128997)\n\n* Mark Windows 11 as TechPreview (BZ#2129013)\n\n* 4.11.1 rpms (BZ#2139453)\n\nThis advisory contains the following OpenShift Virtualization 4.11.1 images.\n\nRHEL-8-CNV-4.11\n\nvirt-cdi-operator-container-v4.11.1-5\nvirt-cdi-uploadserver-container-v4.11.1-5\nvirt-cdi-apiserver-container-v4.11.1-5\nvirt-cdi-importer-container-v4.11.1-5\nvirt-cdi-controller-container-v4.11.1-5\nvirt-cdi-cloner-container-v4.11.1-5\nvirt-cdi-uploadproxy-container-v4.11.1-5\ncheckup-framework-container-v4.11.1-3\nkubevirt-tekton-tasks-wait-for-vmi-status-container-v4.11.1-7\nkubevirt-tekton-tasks-create-datavolume-container-v4.11.1-7\nkubevirt-template-validator-container-v4.11.1-4\nvirt-handler-container-v4.11.1-5\nhostpath-provisioner-operator-container-v4.11.1-4\nvirt-api-container-v4.11.1-5\nvm-network-latency-checkup-container-v4.11.1-3\ncluster-network-addons-operator-container-v4.11.1-5\nvirtio-win-container-v4.11.1-4\nvirt-launcher-container-v4.11.1-5\novs-cni-marker-container-v4.11.1-5\nhyperconverged-cluster-webhook-container-v4.11.1-7\nvirt-controller-container-v4.11.1-5\nvirt-artifacts-server-container-v4.11.1-5\nkubevirt-tekton-tasks-modify-vm-template-container-v4.11.1-7\nkubevirt-tekton-tasks-disk-virt-customize-container-v4.11.1-7\nlibguestfs-tools-container-v4.11.1-5\nhostpath-provisioner-container-v4.11.1-4\nkubevirt-tekton-tasks-disk-virt-sysprep-container-v4.11.1-7\nkubevirt-tekton-tasks-copy-template-container-v4.11.1-7\ncnv-containernetworking-plugins-container-v4.11.1-5\nbridge-marker-container-v4.11.1-5\nvirt-operator-container-v4.11.1-5\nhostpath-csi-driver-container-v4.11.1-4\nkubevirt-tekton-tasks-create-vm-from-template-container-v4.11.1-7\nkubemacpool-container-v4.11.1-5\nhyperconverged-cluster-operator-container-v4.11.1-7\nkubevirt-ssp-operator-container-v4.11.1-4\novs-cni-plugin-container-v4.11.1-5\nkubevirt-tekton-tasks-cleanup-vm-container-v4.11.1-7\nkubevirt-tekton-tasks-operator-container-v4.11.1-2\ncnv-must-gather-container-v4.11.1-8\nkubevirt-console-plugin-container-v4.11.1-9\nhco-bundle-registry-container-v4.11.1-49",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:8750",
        "url": "https://access.redhat.com/errata/RHSA-2022:8750"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2033191",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2033191"
      },
      {
        "category": "external",
        "summary": "2064857",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064857"
      },
      {
        "category": "external",
        "summary": "2070772",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2070772"
      },
      {
        "category": "external",
        "summary": "2077688",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077688"
      },
      {
        "category": "external",
        "summary": "2077689",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077689"
      },
      {
        "category": "external",
        "summary": "2087177",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2087177"
      },
      {
        "category": "external",
        "summary": "2089391",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2089391"
      },
      {
        "category": "external",
        "summary": "2091856",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2091856"
      },
      {
        "category": "external",
        "summary": "2092793",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092793"
      },
      {
        "category": "external",
        "summary": "2098225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2098225"
      },
      {
        "category": "external",
        "summary": "2100495",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100495"
      },
      {
        "category": "external",
        "summary": "2102694",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2102694"
      },
      {
        "category": "external",
        "summary": "2109407",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2109407"
      },
      {
        "category": "external",
        "summary": "2110562",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2110562"
      },
      {
        "category": "external",
        "summary": "2112643",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2112643"
      },
      {
        "category": "external",
        "summary": "2115371",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2115371"
      },
      {
        "category": "external",
        "summary": "2119613",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2119613"
      },
      {
        "category": "external",
        "summary": "2128554",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128554"
      },
      {
        "category": "external",
        "summary": "2128872",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128872"
      },
      {
        "category": "external",
        "summary": "2128997",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128997"
      },
      {
        "category": "external",
        "summary": "2129013",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129013"
      },
      {
        "category": "external",
        "summary": "2129235",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2129235"
      },
      {
        "category": "external",
        "summary": "2134668",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2134668"
      },
      {
        "category": "external",
        "summary": "2139453",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2139453"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8750.json"
      }
    ],
    "title": "Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update",
    "tracking": {
      "current_release_date": "2024-12-17T22:07:19+00:00",
      "generator": {
        "date": "2024-12-17T22:07:19+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2022:8750",
      "initial_release_date": "2022-12-01T21:09:40+00:00",
      "revision_history": [
        {
          "date": "2022-12-01T21:09:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-12-01T21:09:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-17T22:07:19+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "CNV 4.11 for RHEL 8",
                "product": {
                  "name": "CNV 4.11 for RHEL 8",
                  "product_id": "8Base-CNV-4.11",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:container_native_virtualization:4.11::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "OpenShift Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
                "product": {
                  "name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
                  "product_id": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/bridge-marker\u0026tag=v4.11.1-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
                "product": {
                  "name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
                  "product_id": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/checkup-framework\u0026tag=v4.11.1-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
                "product": {
                  "name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
                  "product_id": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cluster-network-addons-operator\u0026tag=v4.11.1-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
                "product": {
                  "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
                  "product_id": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-containernetworking-plugins\u0026tag=v4.11.1-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
                "product": {
                  "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
                  "product_id": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/cnv-must-gather-rhel8\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
                "product": {
                  "name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
                  "product_id": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hco-bundle-registry\u0026tag=v4.11.1-92"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
                  "product_id": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver-rhel8\u0026tag=v4.11.1-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
                  "product_id": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-csi-driver\u0026tag=v4.11.1-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
                  "product_id": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8\u0026tag=v4.11.1-5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
                "product": {
                  "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
                  "product_id": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hostpath-provisioner-rhel8-operator\u0026tag=v4.11.1-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
                "product": {
                  "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
                  "product_id": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-operator\u0026tag=v4.11.1-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
                "product": {
                  "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
                  "product_id": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/hyperconverged-cluster-webhook-rhel8\u0026tag=v4.11.1-10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
                "product": {
                  "name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
                  "product_id": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubemacpool\u0026tag=v4.11.1-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
                  "product_id": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-console-plugin\u0026tag=v4.11.1-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
                  "product_id": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-ssp-operator\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-copy-template\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-datavolume\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-operator\u0026tag=v4.11.1-4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
                  "product_id": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status\u0026tag=v4.11.1-15"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
                "product": {
                  "name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
                  "product_id": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/kubevirt-template-validator\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
                "product": {
                  "name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
                  "product_id": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/libguestfs-tools\u0026tag=v4.11.1-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
                "product": {
                  "name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
                  "product_id": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-marker\u0026tag=v4.11.1-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
                "product": {
                  "name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
                  "product_id": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/ovs-cni-plugin\u0026tag=v4.11.1-8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
                  "product_id": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-api\u0026tag=v4.11.1-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
                  "product_id": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-artifacts-server\u0026tag=v4.11.1-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-apiserver\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-cloner\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-controller\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-importer\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-operator\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadproxy\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
                  "product_id": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-cdi-uploadserver\u0026tag=v4.11.1-7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
                  "product_id": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-controller\u0026tag=v4.11.1-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
                  "product_id": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-handler\u0026tag=v4.11.1-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
                "product": {
                  "name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
                  "product_id": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virtio-win\u0026tag=v4.11.1-6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
                  "product_id": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-launcher\u0026tag=v4.11.1-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
                "product": {
                  "name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
                  "product_id": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/virt-operator\u0026tag=v4.11.1-11"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
                "product": {
                  "name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
                  "product_id": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700?arch=amd64\u0026repository_url=registry.redhat.io/container-native-virtualization/vm-network-latency-checkup\u0026tag=v4.11.1-8"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64"
        },
        "product_reference": "container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64"
        },
        "product_reference": "container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64"
        },
        "product_reference": "container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64"
        },
        "product_reference": "container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64"
        },
        "product_reference": "container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64"
        },
        "product_reference": "container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64"
        },
        "product_reference": "container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64"
        },
        "product_reference": "container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64"
        },
        "product_reference": "container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64"
        },
        "product_reference": "container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64"
        },
        "product_reference": "container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64"
        },
        "product_reference": "container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64"
        },
        "product_reference": "container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64"
        },
        "product_reference": "container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64"
        },
        "product_reference": "container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64"
        },
        "product_reference": "container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64"
        },
        "product_reference": "container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64"
        },
        "product_reference": "container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64"
        },
        "product_reference": "container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64"
        },
        "product_reference": "container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64"
        },
        "product_reference": "container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64"
        },
        "product_reference": "container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64 as a component of CNV 4.11 for RHEL 8",
          "product_id": "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
        },
        "product_reference": "container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64",
        "relates_to_product_reference": "8Base-CNV-4.11"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-38561",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2022-06-23T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2100495"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang. The language package for go language can panic due to an out-of-bounds read when an incorrectly formatted language tag is being parsed. This flaw allows an attacker to cause applications using this package to parse untrusted input data to crash, leading to a denial of service of the affected component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: out-of-bounds read in golang.org/x/text/language leads to DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw may be triggered only by accepting untrusted user input to the vulnerable golang\u0027s library. The overall DoS attack vector depends directly on how the library\u0027s input is exposed by the consuming application, thus Red Hat rates impact as Moderate.\n\nIn Red Hat Advanced Cluster Management for Kubernetes (RHACM) 2.5 version, the registration-operator, lighthouse-coredns, lighthouse-agent, gatekeeper-operator, and discovery-operator components are affected by this flaw, but the rest of the components are using an already patched version and are unaffected. For 2.4 and previous versions of Red Hat Advanced Cluster Management for Kubernetes (RHACM), most of the components are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-38561"
        },
        {
          "category": "external",
          "summary": "RHBZ#2100495",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2100495"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-38561",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-38561"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-38561"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2021-0113",
          "url": "https://pkg.go.dev/vuln/GO-2021-0113"
        }
      ],
      "release_date": "2021-08-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-12-01T21:09:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:8750"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: out-of-bounds read in golang.org/x/text/language leads to DoS"
    },
    {
      "cve": "CVE-2022-24675",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-04-21T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2077688"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in Golang\u0027s library encoding/pem. This flaw allows an attacker to use a large PEM input (more than 5 MB), causing a stack overflow in Decode, which leads to a loss of availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: encoding/pem: fix stack overflow in Decode",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 7, 8 and 9 are affected, because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 7, hence, marked as Out-of-Support-Scope.\n\nRed Hat Developer Tools - Compilers (go-toolset-1.16-golang \u0026 go-toolset-1.17-golang), ships the vulnerable code and affected by this vulnerability.\n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24675"
        },
        {
          "category": "external",
          "summary": "RHBZ#2077688",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077688"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24675",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24675"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24675",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24675"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8",
          "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
        }
      ],
      "release_date": "2022-04-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-12-01T21:09:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:8750"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: encoding/pem: fix stack overflow in Decode"
    },
    {
      "cve": "CVE-2022-24921",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2022-03-16T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2064857"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A stack overflow flaw was found in Golang\u0027s regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large regexps with deep nesting to the application. Triggering this flaw leads to a crash of the runtime, which causes a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: regexp: stack exhaustion via a deeply nested expression",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has been rated as a Moderate impact flaw because the exploitation of this flaw requires that an affected application accept arbitrarily long regexps from untrusted sources, which has inherent risks (even without this flaw), especially involving impacts to application availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24921"
        },
        {
          "category": "external",
          "summary": "RHBZ#2064857",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064857"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24921",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24921"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24921",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24921"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk",
          "url": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk"
        }
      ],
      "release_date": "2022-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-12-01T21:09:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:8750"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: regexp: stack exhaustion via a deeply nested expression"
    },
    {
      "cve": "CVE-2022-28327",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-04-21T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2077689"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow flaw was found in Golang\u0027s crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256().ScalarMult or P256().ScalarBaseMult to panic, leading to a loss of availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: crypto/elliptic: panic caused by oversized scalar",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 7, 8 and 9 are affected, because the code-base is affected by this vulnerability.\n\nRed Hat Product Security has rated this issue as having Moderate security impact, and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 7, hence, marked as Out-of-Support-Scope. \n\nRed Hat Developer Tools - Compilers (go-toolset-1.16-golang \u0026 go-toolset-1.17-golang), ships the vulnerable code and affected by this vulnerability.\n\nFor additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/ and Red Hat Enterprise Linux Life Cycle \u0026 Updates Policy: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-28327"
        },
        {
          "category": "external",
          "summary": "RHBZ#2077689",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2077689"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-28327",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-28327"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-28327",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28327"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8",
          "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
        }
      ],
      "release_date": "2022-04-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-12-01T21:09:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:8750"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "golang: crypto/elliptic: panic caused by oversized scalar"
    },
    {
      "cve": "CVE-2022-30629",
      "cwe": {
        "id": "CWE-331",
        "name": "Insufficient Entropy"
      },
      "discovery_date": "2022-06-02T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2092793"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the crypto/tls golang package. When session tickets are generated by crypto/tls, it is missing the ticket expiration. This issue may allow an attacker to observe the TLS handshakes to correlate successive connections during session resumption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang: crypto/tls: session tickets lack random ticket_age_add",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64"
        ],
        "known_not_affected": [
          "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
          "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
          "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
          "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
          "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
          "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-30629"
        },
        {
          "category": "external",
          "summary": "RHBZ#2092793",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092793"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-30629",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-30629"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30629",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30629"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg",
          "url": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg"
        }
      ],
      "release_date": "2022-06-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-12-01T21:09:40+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:8750"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "8Base-CNV-4.11:container-native-virtualization/bridge-marker@sha256:59e80e29aef53d75cd40d526a2f033fb7aa1ac649da1a9e76b64d466257176cd_amd64",
            "8Base-CNV-4.11:container-native-virtualization/checkup-framework@sha256:2370dd32b3e15b4261ed6267d5233ff549bd58bf5700edecc4062cce4a2bc302_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cluster-network-addons-operator@sha256:62bc5bdbecd1c2b15d254ef0f6754c155a3dff53178e3b7e48b0e064d82e0ebe_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-containernetworking-plugins@sha256:37cbda49804ccc5626216e3a4f0fde8d94d93111e49b2b9256cd9da07985681e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/cnv-must-gather-rhel8@sha256:288403025b7d6f5e1ee9d32bf23efc07d63ab90ad4f9f558949dfac44f6c3abc_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hco-bundle-registry@sha256:2ed82d656fb357c2eafdbf5e3436a27c6c27e81ff9a78e6108d624b0e5ac4df2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver-rhel8@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-csi-driver@sha256:db4873121d15ac4ac438a101a7b7c347769922311d53e8d06b02c41e3b62ecac_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8-operator@sha256:42ed6288a8444726a7addb617bdb53ccff36090d2b22f4499d4b2ccc51009b17_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hostpath-provisioner-rhel8@sha256:f8f67f5e67ea99dda1445257ceba9e68614efe9c8d2fc257d88ce6bcf56ec40f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-operator@sha256:98be2c9b4d41c8e35067318d01a76a747513652fcbd41ba38070b49ab1858e6c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/hyperconverged-cluster-webhook-rhel8@sha256:45c90ed991c655126f8a9acb909d1e5607e224ec6412a015308794e5b02fe320_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubemacpool@sha256:6f4c35e008f158160a28419568a1db2ce9bb3a2e1d3d2eb882fa0499be7dedd0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-console-plugin@sha256:12f988f14cd8a4f7d5fa175a488435ad571091e2544670a0509fe1027ba71cfb_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-ssp-operator@sha256:b2c001156b0abeb4e2c890927fb935bc43c20300125b7add856302dfcea7052c_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-cleanup-vm@sha256:f80bccd1ba7d922113f9f3a1506d01dd7d07ac8d70ef7c72eae497a368b6c303_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-copy-template@sha256:295767815690a79bb3b08895ab8937e322769773ad4cf7a305229ab29ccea897_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-datavolume@sha256:3e3a30a00b367480d3182820ba11e366d87b44ff1e626f9025ddd2c612d78e47_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-create-vm-from-template@sha256:4a5362a1fa6fc22344231321616b0f5e1cec7152c73bf0d00a36df62448076ee_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize@sha256:fffeced76624d73cb2fd19919726886d28fd1bf4ce22549ce0ca84ed972b9e73_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-disk-virt-sysprep@sha256:4e0d47644f1f44e1f01902691edce9e27acfa1aeb5f2de98439acfea7596c2e9_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-modify-vm-template@sha256:53e110e700707e9f876d08a68240b6841ba5932e32b18ace1f9b8be1e575d954_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-operator@sha256:f854b68b7443c4ed87e50132aa776e1b60bd71e888cee4e181840667858b7a90_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-tekton-tasks-wait-for-vmi-status@sha256:b55e6949adf047224f78d0eba66a5b64c787719f4236a4b4feab268071f0c015_amd64",
            "8Base-CNV-4.11:container-native-virtualization/kubevirt-template-validator@sha256:f3b8bdc5905143bcfe825ceb633ed04219913ebff04edaabe019810771306578_amd64",
            "8Base-CNV-4.11:container-native-virtualization/libguestfs-tools@sha256:d244c934a8209d4bfd04f42fee30ec456078a1db61f1720d11c745cc76ab3e1d_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-marker@sha256:7109aa0773b2a019fc4e981009100b94b7adb89119be585f9a577b258af277b2_amd64",
            "8Base-CNV-4.11:container-native-virtualization/ovs-cni-plugin@sha256:10baab1fb06b0afbf4c790e24c6cea12516c1f4e047c9515309af20ef45e6c01_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-api@sha256:a66fb987f6eca11f2922dc3ef5e199ef12817bac071d033829f01a3dcb2c4e14_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-artifacts-server@sha256:ef16ccd7b5928288b84e16dbc8e5e3c83716174d98b414de7d8c98f4d780fa48_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-apiserver@sha256:3fbe2cf982203ad1565faf3dfdff2131a95754fa1924bc4540ef16a8c6a92996_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-cloner@sha256:6570c84c760ddc023cc254c252d8a7a986d50e9dffb09cb56db0334f08454965_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-controller@sha256:23f99683fc40c258ffa809f6e4e97835d9506247f4dc35640275c365d54b95c0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-importer@sha256:171e69c1cf17c27b2eb69e6411b50e616366e5c188dd25baeade3c634c1425e4_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-operator@sha256:6acb6fdc85de481f0ec834646760701d1351eecfb72ecacd2393509d84f07c1f_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadproxy@sha256:e33e0ed610af88df4a2901c0b78aeb2e174d43ba60c7d7982b7c78b2f4545846_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-cdi-uploadserver@sha256:17d7ef4fd170b41bd6c0eaed374d591ab4e816d8c7d9ba5afa3d97ddd97b1521_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-controller@sha256:834c84710fa4b61b5797681e538723dda5962fc06484c092dfebb28d7ea4fd6e_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-handler@sha256:5232ce9a3704e6be8bce6bccddb234275afdaaf655a239cca642d2afc7a583ba_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-launcher@sha256:9cbbc3692cdcc0f8552a5de7233e5c43a3f9e56b6dc93af1c7c8bc3ccfed9aaf_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virt-operator@sha256:4f91d8c011681951daa86ef1f9293fbfd3d9cc4eaa4746761ba1c3fc41149bb0_amd64",
            "8Base-CNV-4.11:container-native-virtualization/virtio-win@sha256:1a0ba39da4dc899ba8c1f13acb1f978f4c794a99163ba4935e4975cad6610e70_amd64",
            "8Base-CNV-4.11:container-native-virtualization/vm-network-latency-checkup@sha256:6fd6c7b974eabe5a710b1fa2b3aaf783fe3951112b42a0156743cb16a033b700_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "golang: crypto/tls: session tickets lack random ticket_age_add"
    }
  ]
}

CVE-2021-38561 (GCVE-0-2021-38561)

Vulnerability from cvelistv5 – Published: 2022-12-26 00:00 – Updated: 2025-04-14 16:15

Summary

golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.

Severity ?

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

Assigner

mitre

References

4 references

URL	Tags
https://groups.google.com/g/golang-announce
https://go.googlesource.com/text/+/383b2e75a7a419…
https://deps.dev/advisory/OSV/GO-2021-0113
https://pkg.go.dev/golang.org/x/text/language

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T01:44:23.541Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://deps.dev/advisory/OSV/GO-2021-0113"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://pkg.go.dev/golang.org/x/text/language"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-38561",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T16:13:55.516416Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-14T16:15:14.817Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-26T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://groups.google.com/g/golang-announce"
        },
        {
          "url": "https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f"
        },
        {
          "url": "https://deps.dev/advisory/OSV/GO-2021-0113"
        },
        {
          "url": "https://pkg.go.dev/golang.org/x/text/language"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-38561",
    "datePublished": "2022-12-26T00:00:00.000Z",
    "dateReserved": "2021-08-11T00:00:00.000Z",
    "dateUpdated": "2025-04-14T16:15:14.817Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-24675 (GCVE-0-2022-24675)

Vulnerability from cvelistv5 – Published: 2022-04-20 00:00 – Updated: 2024-08-03 04:20

Summary

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

11 references

URL	Tags
https://groups.google.com/g/golang-announce
https://groups.google.com/g/golang-announce/c/oec…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-02	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.netapp.com/advisory/ntap-2022091…
https://cert-portal.siemens.com/productcert/pdf/s…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:20:49.135Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
          },
          {
            "name": "FEDORA-2022-a49babed75",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TYZC4OAY54TO75FBEFAPV5G7O4D5TM/"
          },
          {
            "name": "FEDORA-2022-c0f780ecf1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3BMW5QGX53CMIJIZWKXFKBJX2C5GWTY/"
          },
          {
            "name": "FEDORA-2022-e46e6e8317",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCRSABD6CUDIZULZPZL5BJ3ET3A2NEJP/"
          },
          {
            "name": "FEDORA-2022-fae3ecee19",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
          },
          {
            "name": "FEDORA-2022-ba365d3703",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
          },
          {
            "name": "GLSA-202208-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-02"
          },
          {
            "name": "FEDORA-2022-30c5ed5625",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220915-0010/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-14T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://groups.google.com/g/golang-announce"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
        },
        {
          "name": "FEDORA-2022-a49babed75",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TYZC4OAY54TO75FBEFAPV5G7O4D5TM/"
        },
        {
          "name": "FEDORA-2022-c0f780ecf1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3BMW5QGX53CMIJIZWKXFKBJX2C5GWTY/"
        },
        {
          "name": "FEDORA-2022-e46e6e8317",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCRSABD6CUDIZULZPZL5BJ3ET3A2NEJP/"
        },
        {
          "name": "FEDORA-2022-fae3ecee19",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
        },
        {
          "name": "FEDORA-2022-ba365d3703",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
        },
        {
          "name": "GLSA-202208-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-02"
        },
        {
          "name": "FEDORA-2022-30c5ed5625",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20220915-0010/"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-24675",
    "datePublished": "2022-04-20T00:00:00.000Z",
    "dateReserved": "2022-02-08T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:20:49.135Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-24921 (GCVE-0-2022-24921)

Vulnerability from cvelistv5 – Published: 2022-03-05 00:00 – Updated: 2024-08-03 04:29

Summary

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

7 references

URL	Tags
https://groups.google.com/g/golang-announce/c/RP1…
https://security.netapp.com/advisory/ntap-2022032…
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://security.gentoo.org/glsa/202208-02	vendor-advisory
https://cert-portal.siemens.com/productcert/pdf/s…
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:29:01.519Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220325-0010/"
          },
          {
            "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2985-1] golang-1.7 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html"
          },
          {
            "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2986-1] golang-1.8 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html"
          },
          {
            "name": "GLSA-202208-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-02"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf"
          },
          {
            "name": "[debian-lts-announce] 20230419 [SECURITY] [DLA 3395-1] golang-1.11 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-19T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20220325-0010/"
        },
        {
          "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2985-1] golang-1.7 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html"
        },
        {
          "name": "[debian-lts-announce] 20220428 [SECURITY] [DLA 2986-1] golang-1.8 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html"
        },
        {
          "name": "GLSA-202208-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-02"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf"
        },
        {
          "name": "[debian-lts-announce] 20230419 [SECURITY] [DLA 3395-1] golang-1.11 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-24921",
    "datePublished": "2022-03-05T00:00:00.000Z",
    "dateReserved": "2022-02-10T00:00:00.000Z",
    "dateUpdated": "2024-08-03T04:29:01.519Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-28327 (GCVE-0-2022-28327)

Vulnerability from cvelistv5 – Published: 2022-04-20 00:00 – Updated: 2024-08-03 05:48

Summary

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

12 references

URL	Tags
https://groups.google.com/g/golang-announce
https://groups.google.com/g/golang-announce/c/oec…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202208-02	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.netapp.com/advisory/ntap-2022091…
https://cert-portal.siemens.com/productcert/pdf/s…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:48:38.092Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
          },
          {
            "name": "FEDORA-2022-a49babed75",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TYZC4OAY54TO75FBEFAPV5G7O4D5TM/"
          },
          {
            "name": "FEDORA-2022-53f0c619c5",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NY6GEAJMNKKMU5H46QO4D7D6A24KSPXE/"
          },
          {
            "name": "FEDORA-2022-c0f780ecf1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3BMW5QGX53CMIJIZWKXFKBJX2C5GWTY/"
          },
          {
            "name": "FEDORA-2022-e46e6e8317",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCRSABD6CUDIZULZPZL5BJ3ET3A2NEJP/"
          },
          {
            "name": "FEDORA-2022-fae3ecee19",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
          },
          {
            "name": "FEDORA-2022-ba365d3703",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
          },
          {
            "name": "GLSA-202208-02",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-02"
          },
          {
            "name": "FEDORA-2022-30c5ed5625",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220915-0010/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-14T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://groups.google.com/g/golang-announce"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/oecdBNLOml8"
        },
        {
          "name": "FEDORA-2022-a49babed75",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TYZC4OAY54TO75FBEFAPV5G7O4D5TM/"
        },
        {
          "name": "FEDORA-2022-53f0c619c5",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NY6GEAJMNKKMU5H46QO4D7D6A24KSPXE/"
        },
        {
          "name": "FEDORA-2022-c0f780ecf1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3BMW5QGX53CMIJIZWKXFKBJX2C5GWTY/"
        },
        {
          "name": "FEDORA-2022-e46e6e8317",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCRSABD6CUDIZULZPZL5BJ3ET3A2NEJP/"
        },
        {
          "name": "FEDORA-2022-fae3ecee19",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/"
        },
        {
          "name": "FEDORA-2022-ba365d3703",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/"
        },
        {
          "name": "GLSA-202208-02",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202208-02"
        },
        {
          "name": "FEDORA-2022-30c5ed5625",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20220915-0010/"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-28327",
    "datePublished": "2022-04-20T00:00:00.000Z",
    "dateReserved": "2022-04-01T00:00:00.000Z",
    "dateUpdated": "2024-08-03T05:48:38.092Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30629 (GCVE-0-2022-30629)

Vulnerability from cvelistv5 – Published: 2022-08-09 20:17 – Updated: 2026-03-06 19:12

Title

Session tickets lack random ticket_age_add in crypto/tls

Summary

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption.

Severity ?

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE

CWE-200 - Information Exposure

Assigner

References

5 references

URL	Tags
https://go.dev/cl/405994
https://go.googlesource.com/go/+/fe4de36198794c44…
https://go.dev/issue/52814
https://groups.google.com/g/golang-announce/c/TzI…
https://pkg.go.dev/vuln/GO-2022-0531

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.17.11 (semver) Affected: 1.18.0-0 , < 1.18.3 (semver)

Credits

Github user @nervuri

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:56:13.230Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/cl/405994"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.googlesource.com/go/+/fe4de36198794c447fbd9d7cc2d7199a506c76a5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://go.dev/issue/52814"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://pkg.go.dev/vuln/GO-2022-0531"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 3.1,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-30629",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-24T20:38:04.620332Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-06T19:12:16.725Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "serverHandshakeStateTLS13.sendSessionTickets"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.17.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.18.3",
              "status": "affected",
              "version": "1.18.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Github user @nervuri"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during session resumption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-200: Information Exposure",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-12T19:04:50.302Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/405994"
        },
        {
          "url": "https://go.googlesource.com/go/+/fe4de36198794c447fbd9d7cc2d7199a506c76a5"
        },
        {
          "url": "https://go.dev/issue/52814"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg/m/IWz5T6x7AAAJ"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2022-0531"
        }
      ],
      "title": "Session tickets lack random ticket_age_add in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2022-30629",
    "datePublished": "2022-08-09T20:17:31.000Z",
    "dateReserved": "2022-05-12T00:00:00.000Z",
    "dateUpdated": "2026-03-06T19:12:16.725Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2022_8750

CVE-2021-38561 (GCVE-0-2021-38561)

CVE-2022-24675 (GCVE-0-2022-24675)

CVE-2022-24921 (GCVE-0-2022-24921)

CVE-2022-28327 (GCVE-0-2022-28327)

CVE-2022-30629 (GCVE-0-2022-30629)

Tags

Sightings

Nomenclature