rhsa-2024_2096
Vulnerability from csaf_redhat
Published
2024-05-01 07:37
Modified
2024-11-07 02:04
Summary
Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.1
Notes
Topic
Moderate: Logging for Red Hat OpenShift - 5.9.1
Details
Logging for Red Hat OpenShift - 5.9.1
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Moderate: Logging for Red Hat OpenShift - 5.9.1",
"title": "Topic"
},
{
"category": "general",
"text": "Logging for Red Hat OpenShift - 5.9.1",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2096",
"url": "https://access.redhat.com/errata/RHSA-2024:2096"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "LOG-4672",
"url": "https://issues.redhat.com/browse/LOG-4672"
},
{
"category": "external",
"summary": "LOG-5062",
"url": "https://issues.redhat.com/browse/LOG-5062"
},
{
"category": "external",
"summary": "LOG-5268",
"url": "https://issues.redhat.com/browse/LOG-5268"
},
{
"category": "external",
"summary": "LOG-5278",
"url": "https://issues.redhat.com/browse/LOG-5278"
},
{
"category": "external",
"summary": "LOG-5307",
"url": "https://issues.redhat.com/browse/LOG-5307"
},
{
"category": "external",
"summary": "LOG-5309",
"url": "https://issues.redhat.com/browse/LOG-5309"
},
{
"category": "external",
"summary": "LOG-5322",
"url": "https://issues.redhat.com/browse/LOG-5322"
},
{
"category": "external",
"summary": "LOG-5323",
"url": "https://issues.redhat.com/browse/LOG-5323"
},
{
"category": "external",
"summary": "LOG-5395",
"url": "https://issues.redhat.com/browse/LOG-5395"
},
{
"category": "external",
"summary": "LOG-5397",
"url": "https://issues.redhat.com/browse/LOG-5397"
},
{
"category": "external",
"summary": "LOG-5401",
"url": "https://issues.redhat.com/browse/LOG-5401"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2096.json"
}
],
"title": "Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.1",
"tracking": {
"current_release_date": "2024-11-07T02:04:37+00:00",
"generator": {
"date": "2024-11-07T02:04:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:2096",
"initial_release_date": "2024-05-01T07:37:52+00:00",
"revision_history": [
{
"date": "2024-05-01T07:37:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-05-01T07:37:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-07T02:04:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHOL 5.9 for RHEL 9",
"product": {
"name": "RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:5.9::el9"
}
}
}
],
"category": "product_family",
"name": "logging for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"product": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"product": {
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"product_id": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=v5.9.1-32"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"product": {
"name": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"product_id": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"product": {
"name": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"product_id": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"product": {
"name": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"product_id": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"product": {
"name": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"product_id": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"product": {
"name": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"product_id": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=v5.9.1-10"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"product": {
"name": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"product_id": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"product": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"product_id": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"product": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"product": {
"name": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"product_id": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"product": {
"name": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"product_id": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"product": {
"name": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"product_id": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64",
"product": {
"name": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64",
"product_id": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"product": {
"name": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"product_id": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"product": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"product_id": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"product": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"product": {
"name": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"product_id": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"product": {
"name": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"product_id": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"product": {
"name": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"product_id": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"product": {
"name": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"product_id": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"product": {
"name": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"product_id": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"product": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"product_id": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"product": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"product_id": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=v5.9.1-17"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"product": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"product_id": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=v1.1.0-223"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"product": {
"name": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"product_id": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=v0.4.0-242"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"product": {
"name": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"product_id": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/fluentd-rhel9\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"product": {
"name": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"product_id": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=v2.9.6-12"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"product": {
"name": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"product_id": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=v0.34.1-4"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"product": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"product_id": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-view-plugin-rhel9\u0026tag=v5.9.1-2"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"product": {
"name": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"product_id": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=v5.9.1-5"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"product": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"product_id": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=v0.1.0-520"
}
}
},
{
"category": "product_version",
"name": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"product": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"product_id": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=v0.1.0-222"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64"
},
"product_reference": "openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le"
},
"product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x"
},
"product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64"
},
"product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64"
},
"product_reference": "openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64"
},
"product_reference": "openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x"
},
"product_reference": "openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64"
},
"product_reference": "openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le"
},
"product_reference": "openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64"
},
"product_reference": "openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64"
},
"product_reference": "openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x"
},
"product_reference": "openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le"
},
"product_reference": "openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64"
},
"product_reference": "openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le"
},
"product_reference": "openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64"
},
"product_reference": "openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x"
},
"product_reference": "openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
},
"product_reference": "openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64"
},
"product_reference": "openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64"
},
"product_reference": "openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le"
},
"product_reference": "openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64"
},
"product_reference": "openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64"
},
"product_reference": "openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x"
},
"product_reference": "openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64"
},
"product_reference": "openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le"
},
"product_reference": "openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64"
},
"product_reference": "openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x"
},
"product_reference": "openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64"
},
"product_reference": "openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le"
},
"product_reference": "openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64"
},
"product_reference": "openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x"
},
"product_reference": "openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"relates_to_product_reference": "9Base-RHOL-5.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64 as a component of RHOL 5.9 for RHEL 9",
"product_id": "9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
},
"product_reference": "openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64",
"relates_to_product_reference": "9Base-RHOL-5.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45289",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s net/http/cookiejar standard library package. When following an HTTP redirect to a domain that is not a subdomain match or an exact match of the initial domain, an http.Client does not forward sensitive headers such as \"Authorization\" or \"Cookie\". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"known_not_affected": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45289"
},
{
"category": "external",
"summary": "RHBZ#2268018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45289"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45289",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45289"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:37:52+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2096"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect"
},
{
"cve": "CVE-2023-45290",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268017"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in Go\u0027s net/http standard library package. When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"known_not_affected": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-45290"
},
{
"category": "external",
"summary": "RHBZ#2268017",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268017"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-45290",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45290"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45290"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4",
"url": "http://www.openwall.com/lists/oss-security/2024/03/08/4"
},
{
"category": "external",
"summary": "https://go.dev/cl/569341",
"url": "https://go.dev/cl/569341"
},
{
"category": "external",
"summary": "https://go.dev/issue/65383",
"url": "https://go.dev/issue/65383"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
"url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2599",
"url": "https://pkg.go.dev/vuln/GO-2024-2599"
},
{
"category": "external",
"summary": "https://security.netapp.com/advisory/ntap-20240329-0004",
"url": "https://security.netapp.com/advisory/ntap-20240329-0004"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:37:52+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2096"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm"
},
{
"cve": "CVE-2024-24783",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268019"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"known_not_affected": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24783"
},
{
"category": "external",
"summary": "RHBZ#2268019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268019"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24783",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24783"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2024/03/08/4",
"url": "http://www.openwall.com/lists/oss-security/2024/03/08/4"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp",
"url": "https://github.com/advisories/GHSA-3q2c-pvp5-3cqp"
},
{
"category": "external",
"summary": "https://go.dev/cl/569339",
"url": "https://go.dev/cl/569339"
},
{
"category": "external",
"summary": "https://go.dev/issue/65390",
"url": "https://go.dev/issue/65390"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
"url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2598",
"url": "https://pkg.go.dev/vuln/GO-2024-2598"
},
{
"category": "external",
"summary": "https://security.netapp.com/advisory/ntap-20240329-0005",
"url": "https://security.netapp.com/advisory/ntap-20240329-0005"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:37:52+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2096"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm"
},
{
"cve": "CVE-2024-24785",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"discovery_date": "2024-03-05T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268022"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into templates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: html/template: errors returned from MarshalJSON methods may break template escaping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"known_not_affected": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24785"
},
{
"category": "external",
"summary": "RHBZ#2268022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24785",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24785"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24785",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24785"
},
{
"category": "external",
"summary": "https://go.dev/cl/564196",
"url": "https://go.dev/cl/564196"
},
{
"category": "external",
"summary": "https://go.dev/issue/65697",
"url": "https://go.dev/issue/65697"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg",
"url": "https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"
},
{
"category": "external",
"summary": "https://vuln.go.dev/ID/GO-2024-2610.json",
"url": "https://vuln.go.dev/ID/GO-2024-2610.json"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:37:52+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2096"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: html/template: errors returned from MarshalJSON methods may break template escaping"
},
{
"cve": "CVE-2024-24786",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2024-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268046"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Golang\u0027s protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64"
],
"known_not_affected": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24786"
},
{
"category": "external",
"summary": "RHBZ#2268046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268046"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24786",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24786"
},
{
"category": "external",
"summary": "https://go.dev/cl/569356",
"url": "https://go.dev/cl/569356"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/",
"url": "https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2024-2611",
"url": "https://pkg.go.dev/vuln/GO-2024-2611"
}
],
"release_date": "2024-03-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:37:52+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2096"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON"
},
{
"cve": "CVE-2024-28180",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2024-03-10T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2268854"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in Jose due to improper handling of highly compressed data. This issue could allow an attacker to send a JWE containing compressed data that uses large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jose-go: improper handling of highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64"
],
"known_not_affected": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-28180"
},
{
"category": "external",
"summary": "RHBZ#2268854",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2268854"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-28180",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-28180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-28180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28180"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g"
}
],
"release_date": "2024-03-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-05-01T07:37:52+00:00",
"details": "For OpenShift Container Platform 4.14 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.openshift.com/container-platform/4.14/release_notes/ocp-4-14-release-notes.html\n\nFor Red Hat OpenShift Logging 5.9, see the following instructions to apply this update:\n\nhttps://docs.openshift.com/container-platform/4.14/logging/cluster-logging-upgrading.html",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2096"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOL-5.9:openshift-logging/cluster-logging-operator-bundle@sha256:b9b0d5bfcb535abd58c2f69228b1b11680c4deffcc28939562e04be64f3f1819_amd64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:7438e5913d29f4145f8066e6f16d956ee7d359152f1d4320e693e3956f18cca9_ppc64le",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:8d22a9a8f5172acbae285d9013b46b37469670922d10e23760bb42e88f2385cc_s390x",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64",
"9Base-RHOL-5.9:openshift-logging/cluster-logging-rhel9-operator@sha256:f02a5d8d04b538e97b8548d46b4e30f95f0b61c4fde2a7e84f788e96375abcae_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:68e570ab61142e480d3d9634b37322712428b12114ab78a8c45bb043190c51b8_s390x",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:94a211e797db00bd9eda0b973248b1851c51b50431321860e1d7af1a587cd3ba_arm64",
"9Base-RHOL-5.9:openshift-logging/eventrouter-rhel9@sha256:a577a6eb01de0d8efb8f00b7906a800aa9cde2163097d5759745a86167e2c97c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:4ed8f5f1c6c32e57fada2d64b878c2ac332737bf9838adcc23924d69c4d79d6a_amd64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:9db3cb52aa3fa1517294af1a2d62568a0f547ab6e60e3ffc183ea1aaa6aaed00_arm64",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:c0ae53bf06eb2215b15b7c7f6226c51595fd4496fa9bcdac4a68ef8bbf8e3539_s390x",
"9Base-RHOL-5.9:openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:083cd67a0f990e18bb27a19445a717ce59c1bde4b24cd3a255252356a33799f6_arm64",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:6742236fe7345b20e2a268dd50ee59b71440007dcfa1d3eeda9cd736f5c4d18c_ppc64le",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x",
"9Base-RHOL-5.9:openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0100480ed62c245d41e8ed773e9d86e455571f43356fdbd393d07ceeae116a01_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:6c1ba758c16b501eaddd9d677ac9543be13f6ed225a748f5ddd61fdceba9c406_amd64",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x",
"9Base-RHOL-5.9:openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:10e2bf5e57e27a3d282fe42569c7942a5379b2d858068e1f7defce963b66ae11_ppc64le",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:485656286d971621a26ce84d3396487469d08b8a76e80cff72432c3e84f6cd1d_amd64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64",
"9Base-RHOL-5.9:openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:7a3e62b7f685a8f052ba0856d2148f27586fe2bf24d99321aa44dd03d18cf544_s390x",
"9Base-RHOL-5.9:openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:0f53258d5af09af01a27e3cc7746e3f303e0973e0428cffee2b67248d9ca2c1b_ppc64le",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:de897486308dc6b5a60d0590781ed4ebba827d06795e918ed69fdb90093905ef_s390x",
"9Base-RHOL-5.9:openshift-logging/vector-rhel9@sha256:fa117df007f5f3d75d8c8a314a82f8607a035152ca83eb0ce167d0e8f1331c45_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:13146ff17125b520effacedeba5dfc421abdca77e630fb97d6f2a617ffc29eec_ppc64le",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:2117cf12bf0e561098ff67be5107722aee0a0882246ffbdc51a05170a3ef8aea_s390x",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:25c50de74701e7eb3223e413826183deb019708a964e41ef2312aa4a0cc4b183_amd64",
"9Base-RHOL-5.9:openshift-logging/lokistack-gateway-rhel9@sha256:86a64598d537394af528bc9aa331a236fd529d0447031e6c915a5f1c8a4a6af5_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jose-go: improper handling of highly compressed data"
}
]
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.